Privacy

Privacy Policy

Introduction

With the following data protection declaration, we would like to explain to you which types of your personal data (hereinafter also referred to as "data" for short) we process for which purposes and to what extent in the context of the provision of our application.

The terms used are not gender specific.

As of July 27, 2021

Table of contents

Responsible

Jacanatrade KLG
c / o Daniel Gutzwiller
Hochstrasse 82
4052 Basel

Email address: info@vennquest.com .

Overview of the processing

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of data processed

  • Inventory data (e.g. names, addresses).
  • Content data (e.g. entries in online forms).
  • Contact details (e.g. email, telephone numbers).
  • Meta / communication data (e.g. device information, IP addresses).
  • Usage data (e.g. websites visited, interest in content, access times).

Categories of data subjects

  • Employees (e.g. employees, applicants, former employees).
  • Interested parties.
  • Communication partner.
  • Customers.
  • Users (e.g. website visitors, users of online services).

Purposes of processing

  • Provision of our online offer and user-friendliness.
  • Office and organizational procedures.
  • Direct marketing (e.g. by email or post).
  • Feedback (e.g. collecting feedback via the online form).
  • Marketing.
  • Contact inquiries and communication.
  • Profiles with user-related information (creation of user profiles).
  • Security measures.
  • Provision of contractual services and customer service.
  • Management and answering of inquiries.

Relevant legal bases

Below you will find an overview of the legal bases of the GDPR, on the basis of which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection requirements may apply in your or our country of residence or domicile. If more specific legal bases are relevant in individual cases, we will inform you of this in the data protection declaration.

  • Consent (Art. 6 Para. 1 S. 1 lit. a. GDPR) - The person concerned has their consent to the processing of their personal data for a specific purpose or for several specific purposes given.
  • Fulfillment of the contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR) - The processing is for the fulfillment of a contract to which the data subject is a party, or for the implementation Pre-contractual measures required, which take place at the request of the data subject.
  • Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR) - The processing is necessary to safeguard the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and fundamental freedoms of the data subject, which require the protection of personal data, prevail.

National data protection regulations in Switzerland : In addition to the data protection regulations of the General Data Protection Regulation, national data protection regulations apply in Switzerland. This includes in particular the Federal Data Protection Act (DSG). The DSG applies in particular if no EU / EEC citizens are affected and, for example, only data from Swiss citizens is processed.

Security measures

In accordance with the legal requirements, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, we make suitable technical solutions and organizational measures to ensure a level of protection appropriate to the risk.

Collection of access data and log files : We ourselves (or our web hosting provider) collect data on every access to the server (so-called server log files). The server log files can include the address and name of the web pages and files accessed, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP Addresses and the requesting provider belong.

The server log files can be used on the one hand for security purposes, e.g. to avoid overloading the server (especially in the case of abusive attacks, so-called DDoS attacks) and on the other hand to ensure the load on the server and its stability .

  • Processed data types: content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta / communication data (e.g. device information, IP addresses). < / li>
  • Affected persons: Users (e.g. website visitors, users of online services).
  • Purposes of processing: Provision of our online offer and user-friendliness.
  • Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Registration, login and user account

Users can create a user account. As part of the registration, the required mandatory information is communicated to the users and processed for the purpose of providing the user account on the basis of contractual obligations. The processed data includes in particular the login information (user name, password and an email address).

As part of the use of our registration and login functions as well as the use of the user account, we save the IP address and the time of the respective user action. The storage takes place on the basis of our legitimate interests as well as those of the users in protection against misuse and other unauthorized use. A transfer of this data to third parties does not take place, unless it is necessary to pursue our claims or there is a legal obligation to do so.

Users can be informed by email about processes that are relevant to their user account, such as technical changes.

Registration with real names : Due to the nature of our community, we ask users to only use our offer using real names. I.e. the use of pseudonyms is not permitted.

Profiles of the users are public : The profiles of the users are publicly visible and accessible.

Deletion of data after termination : If users have terminated their user account, their data will be deleted with regard to the user account, subject to legal permission, obligation or consent of the user.

It is up to the users to save their data in the event of termination before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract.

  • Processed data types: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), meta / communication data (e.g. device information, IP Addresses).
  • Affected persons: Users (e.g. website visitors, users of online services).
  • Purposes of processing: Provision of contractual services and customer service, security measures, administration and answering inquiries.
  • Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legitimate interests (Art. 6 Par. 1 S. 1 lit. f. GDPR ).

Community functions

The community functions we provide allow users to enter into conversations or other exchanges with one another. Please note that the use of the community functions is only permitted under observance of the applicable legal situation, our conditions and guidelines as well as the rights of other users and third parties.

Posts by users are public : The posts and content created by users are publicly visible and accessible.

Setting the visibility of posts : The users can use settings to determine the extent to which the posts and content they have created are visible or accessible to the public or only to certain people or groups.

Storage of data for security purposes : The contributions and other inputs of users are processed for the purposes of community and conversation functions and, subject to legal obligations or legal permission, are not disclosed to third parties. An obligation to surrender may arise in particular in the case of illegal contributions for the purposes of legal prosecution. We point out that in addition to the content of the posts, their time and the IP address of the user are saved. This is done in order to be able to take appropriate measures to protect other users and the community.

Restricted deletion of conversation contributions : Out of consideration for other users, conversation contributions of the user remain stored even after termination and account deletion, so that conversations, comments, advice or similar communication between and among users do not make sense lose or turn back. Usernames are deleted or pseudonymized, unless they already represent pseudonyms. Users can request the complete deletion of the contributions to the conversation from us at any time.

Protection of own data : The users decide for themselves which data they disclose about themselves within our online offer. For example, when users provide information about themselves or take part in conversations. We ask users to protect their data and to publish personal data only with care and only to the extent necessary. In particular, we ask users to note that they have to protect their access data and use secure passwords (i.e. especially long and random combinations of characters).

  • Processed data types: Usage data (e.g. websites visited, interest in content, access times), meta / communication data (e.g. device information, IP addresses).
  • Affected persons: Users (e.g. website visitors, users of online services).
  • Purposes of processing: Provision of contractual services and customer service, security measures.
  • Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legitimate interests (Art. 6 Par. 1 S. 1 lit. f. GDPR ).

Contact and request management

When you contact us (e.g. via the contact form, e-mail, telephone or via social media), the details of the inquiring person are processed, insofar as this is necessary to answer the contact inquiries and any requested measures.

The answering of contact inquiries in the context of contractual or pre-contractual relationships takes place to fulfill our contractual obligations or to answer (pre) contractual inquiries and otherwise on the basis of the legitimate interests in answering the inquiries.

  • Processed data types: Inventory data (e.g. names, addresses), contact details (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms).
  • Affected persons: Communication partner.
  • Purposes of processing: Contact inquiries and communication.
  • Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legitimate interests (Art. 6 Par. 1 S. 1 lit. f. GDPR ).

Video conferencing, online meetings, webinars and screen sharing

We use platforms and applications from other providers (hereinafter referred to as "conference platforms") for the purpose of holding video and audio conferences, webinars and other types of video and audio meetings (hereinafter collectively referred to as "conference") . When selecting the conference platforms and their services, we observe the legal requirements.

Data processed by conference platforms: As part of the participation in a conference, the conference platforms process the personal data of the participants mentioned below. The scope of the processing depends on the one hand on which data is required in the context of a specific conference (e.g. specification of access data or real names) and which optional information is provided by the participants. In addition to the processing for the implementation of the conference, the data of the participants can also be processed by the conference platforms for security purposes or service optimization. The processed data includes personal data (first name, last name), contact information (e-mail address, telephone number), access data (access codes or passwords), profile pictures, information on professional position / function, the IP address of the Internet access

  • Processed data types: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times ), Meta / communication data (e.g. device information, IP addresses).
  • Affected persons: Communication partners, users (e.g. website visitors, users of online services).
  • Purposes of processing: Provision of contractual services and customer service, contact inquiries and communication, office and organizational procedures.
  • Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a. GDPR), contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR) , Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Cloud services

We use software services (so-called "cloud services", also known as "software as a service") that are accessible via the Internet and run on the servers of their providers for the following purposes: document storage and management, calendar management, e-mail Sending, spreadsheets and presentations, exchanging documents, content and information with specific recipients or publishing websites, forms or other content and information as well as chats and participation in audio and video conferences.

In this context, personal data can be processed and stored on the servers of the provider, insofar as they are part of communication processes with us or otherwise processed by us, as set out in this data protection declaration. This data can include in particular master data and contact details of the users, data on procedures, contracts, other processes and their content. & Nbsp;

  • Processed data types: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times ), Meta / communication data (e.g. device information, IP addresses).
  • Affected persons: Customers, employees (e.g. employees, applicants, former employees), interested parties, communication partners.
  • Purposes of processing: Office and organizational procedures.
  • Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a. GDPR), contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR) , Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Newsletter and electronic notifications

We send newsletters, e-mails and other electronic notifications (hereinafter "newsletter") only with the consent of the recipient or legal permission In addition, our newsletters contain information about our services and us.

In order to register for our newsletters, it is generally sufficient to provide your email address. However, we can ask you to provide a name for the purpose of addressing you personally in the newsletter, or other information, if this is necessary for the purposes of the newsletter.

Double opt-in procedure: The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an email in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with someone else's e-mail address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Deletion and restriction of processing: We can store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time. In the event of obligations to permanently observe contradictions, we reserve the right to store the email address in a blacklist (so-called "blocklist") for this purpose alone.

The logging of the registration process takes place on the basis of our legitimate interests for the purpose of proving that it has proceeded properly. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in an efficient and secure mailing system.

Notes on legal bases: The newsletter is sent on the basis of the consent of the recipient or, if consent is not required, on the basis of our legitimate interests in direct marketing, if and to the extent that this is legal, e.g. in In the case of recruiting customers, is allowed. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests. The registration process is recorded based on our legitimate interests to prove that it was carried out in accordance with the law.

Contents: Information about us, our services, promotions and offers.

  • Processed data types: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), meta / communication data (e.g. device information, IP addresses).
  • Affected persons: Communication partner.
  • Purposes of processing: Direct marketing (e.g. by email or post).
  • Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a. GDPR), legitimate interests (Art. 6 Par. 1 S. 1 lit. f. GDPR). < / li>
  • Opposition option (opt-out): You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can use one of the contact options given above, preferably e-mail.

Surveys and surveys

The surveys and surveys carried out by us (hereinafter "surveys") are evaluated anonymously. Personal data is only processed to the extent that this is necessary for the provision and technical implementation of the surveys (e.g. processing of the IP address in order to display the survey in the user's browser or to allow the survey to be resumed using a temporary cookie (session cookie) enable) or users have consented.

Notes on legal bases: If we ask the participants for consent to the processing of their data, this is the legal basis for the processing, otherwise the processing of the participants' data is based on our legitimate interests in the implementation an objective survey.

  • Processed data types: Contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta / communication data (e.g. Device information, IP addresses).
  • Affected persons: Communication partner.
  • Purposes of processing: Contact inquiries and communication, direct marketing (e.g. by email or post).
  • Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a. GDPR), legitimate interests (Art. 6 Par. 1 S. 1 lit. f. GDPR). < / li>

Services and service providers used:

Online marketing

We process personal data for online marketing purposes, which can include, in particular, the marketing of advertising space or the presentation of advertising and other content (collectively referred to as "content") based on the potential interests of users and the measurement of their effectiveness.

For these purposes, so-called user profiles are created and saved in a file (so-called "cookie") or similar processes are used, by means of which the user information relevant to the presentation of the aforementioned content is saved. This information may include content viewed, websites visited, online networks used, but also communication partners and technical information, such as the browser used, the computer system used and information on usage times. If users have consented to the collection of their location data, these can also be processed.

The IP addresses of the users are also saved. However, we use available IP masking procedures (i.e. pseudonymisation by shortening the IP address) to protect users. In general, no clear user data (such as e-mail addresses or names) is saved as part of the online marketing process, but pseudonyms. That means, we as well as the providers of the online marketing process do not know the actual identity of the users, but only the information stored in their profiles.

The information in the profiles is usually stored in the cookies or by means of similar processes. These cookies can later generally also be read out on other websites that use the same online marketing process, analyzed for the purpose of displaying content and supplemented with additional data and stored on the server of the online marketing process provider.

As an exception, clear data can be assigned to the profiles. This is the case if the users are, for example, members of a social network whose online marketing process we use and the network connects the profiles of the users with the aforementioned information. We ask you to note that users can make additional agreements with the providers, e.g. through consent during registration.

As a matter of principle, we only have access to summarized information about the success of our advertisements. However, within the framework of so-called conversion measurements, we can check which of our online marketing processes have led to a so-called conversion, i.e., for example, to a contract with us. The conversion measurement is used solely to analyze the success of our marketing measures.

Unless otherwise stated, we ask you to assume that cookies used will be stored for a period of two years.

Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for processing data is consent. Otherwise, user data will be processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would like to draw your attention to the information on the use of cookies in this data protection declaration.

  • Processed data types: Usage data (e.g. websites visited, interest in content, access times), meta / communication data (e.g. device information, IP addresses).
  • Affected persons: Users (e.g. website visitors, users of online services).
  • Purposes of processing: Marketing, profiles with user-related information (creation of user profiles).
  • Security measures: IP masking (pseudonymization of the IP address).
  • Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a. GDPR), legitimate interests (Art. 6 Par. 1 S. 1 lit. f. GDPR). < / li>
  • Opposition option (opt-out): We refer to the data protection information of the respective provider and the opposition options specified for the provider (so-called "opt-out"). Unless an explicit opt-out option has been specified, you have the option of switching off cookies in your browser settings. However, this can restrict the functions of our online offer. We therefore also recommend the following opt-out options, which are offered in summary for the respective areas: a) Europe: https: // www.youronlinechoices.eu . b) Canada: https://www.youradchoices.ca/choices . c) USA: https://www.aboutads.info/choices . d) Cross-regional: https://optout.aboutads.info .

Services and service providers used:

Presence in social networks (Social Media)

We maintain an online presence within social networks and process user data in this context in order to communicate with the users active there or to offer information about us.

We would like to point out that user data can be processed outside of the European Union. This can result in risks for the user because, for example, the enforcement of the users' rights could be made more difficult.

Furthermore, the data of users within social networks are usually processed for market research and advertising purposes. For example, usage profiles can be created on the basis of user behavior and the resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and the interests of the users are stored. Furthermore, data can also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.

Also in the case of requests for information and the assertion of data subject rights, we point out that these can most effectively be asserted with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information directly. If you still need help, you can contact us.

Facebook : We are together with Facebook Ireland Ltd. responsible for collecting (but not further processing) data from visitors to our Facebook page (so-called "fan page"). This data includes information about the types of content users view or interact with, or the actions they take (see “Things You and Others Do and Provide” in the Facebook Data Policy: https://www.facebook.com/policy ), as well as information about the devices used by the users (e.g. IP addresses, operating system, browser type, language settings, cookie data; see under "Device information" in the Facebook data policy declaration: https://www.facebook.com/policy ). As explained in the Facebook data policy under "How do we use this information?", Facebook also collects and uses information to provide analysis services, so-called "Page Insights", for website operators so that they can obtain information about how people are using their pages and interact with the content associated with them. We have a special agreement with Facebook ("Information on Page Insights", https: // www. facebook.com/legal/terms/page_controller_addendum ), which regulates in particular which security measures Facebook must observe and in which Facebook has agreed to fulfill the rights of the data subject (i.e. users can, for example, provide information or delete requests directly to Facebook). The rights of users (in particular to information, deletion, objection and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the "Information on Page Insights" ( https://www.facebook.com / legal / terms / information_about_page_insights_data ).

  • Processed data types: Contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta / communication data (e.g. Device information, IP addresses).
  • Affected persons: Users (e.g. website visitors, users of online services).
  • Purposes of processing: Contact requests and communication, feedback (e.g. collecting feedback via online form), marketing.
  • Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Services and service providers used:

Change and update of the data protection declaration

We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as the changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

If we provide addresses and contact information of companies and organizations in this data protection declaration, please note that the addresses can change over time and ask you to check the information before contacting us.