Privacy Policy
This privacy policy provides information on how we process personal data in connection with our activities and services, including on our website, dimitrikoenig.com. Specifically, we explain the purposes, methods, and locations of personal data processing. We also outline the rights of individuals whose data we process.
For certain activities or additional services, further privacy policies or other legal documents, such as General Terms and Conditions (GTC), Terms of Use, or Participation Terms, may apply.
We are subject to Swiss data protection law and, where applicable, to foreign data protection law, particularly that of the European Union (EU) with the General Data Protection Regulation (GDPR). The European Commission recognizes that Swiss data protection law ensures adequate data protection.
1. Contact Information
Responsible for personal data processing:
Unique-P GmbH
Burengasse 11
CH-4655 Stüsslingen
info@unique-p.ch
We will indicate if other individuals are responsible for processing personal data on a case-by-case basis.
Data Protection Officer
We have the following data protection officer as a point of contact for individuals and authorities for inquiries related to data protection:
Dimitri König
Unique-P GmbH
Burengasse 11
CH-4655 Stüsslingen
info@unique-p.ch
2. Terms and Legal Basis
2.1 Definitions
Personal data refers to any information relating to an identified or identifiable natural person. A data subject is a person whose personal data we process.
Processing encompasses any handling of personal data, regardless of the tools and procedures applied, including querying, adjusting, storing, disclosing, obtaining, recording, collecting, deleting, revealing, organizing, linking, and using personal data.
The European Economic Area (EEA) includes the member states of the European Union (EU), as well as Liechtenstein, Iceland, and Norway. The General Data Protection Regulation (GDPR) refers to the processing of personal data as the processing of personal information.
2.2 Legal Basis
We process personal data in accordance with Swiss data protection law, particularly the Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO).
If and to the extent that the GDPR is applicable, we process personal data based on at least one of the following legal bases:
- Art. 6(1)(b) GDPR for the necessary processing of personal data to fulfill a contract with the data subject or to carry out pre-contractual measures.
- Art. 6(1)(f) GDPR for the necessary processing of personal data to protect our legitimate interests or those of third parties, provided these do not outweigh the fundamental rights and freedoms of the data subject. Legitimate interests include the ongoing, user-friendly, secure, and reliable operation of our services, communication, information security, protection from misuse, and enforcement of our legal claims.
- Art. 6(1)(c) GDPR for necessary processing of personal data to fulfill a legal obligation to which we are subject.
- Art. 6(1)(e) GDPR for necessary processing of personal data to perform a task in the public interest.
- Art. 6(1)(a) GDPR for the processing of personal data with the data subject's consent.
- Art. 6(1)(d) GDPR for the necessary processing of personal data to protect the vital interests of the data subject or another natural person.
3. Type, Scope, and Purpose
We process only the personal data necessary to carry out our services in a continuous, user-friendly, secure, and reliable manner. Such personal data may fall into the following categories: contact data, browser and device data, content data, metadata, usage data, location data, sales data, and contract and payment data.
We process personal data for the duration necessary for the relevant purpose(s) or as required by law. Personal data that is no longer needed is anonymized or deleted.
We may have third parties process personal data on our behalf, jointly process it with third parties, or transmit it to third parties. Such third parties may include specialized providers whose services we utilize, and we ensure data protection even with these third parties.
We generally process personal data with the consent of the data subjects. However, where legally permissible, we may process personal data without consent, for example, to fulfill a contract, comply with legal obligations, or safeguard overriding interests.
We may also process personal data obtained from third parties, from publicly accessible sources, or collected through our activities, provided such processing is legally permissible.
4. Communication
We process data to communicate with third parties, including data that a data subject provides when contacting us by letter or email. We may store such data in an address book or similar tools.
Third parties transmitting data about others are obliged to ensure data protection for these data subjects, including the accuracy of the transmitted personal data.
5. Data Security
We implement appropriate technical and organizational measures to ensure data security according to risk, aiming for the confidentiality, availability, traceability, and integrity of processed personal data without guaranteeing absolute data security.
Access to our website and online presence occurs through transport encryption (SSL/TLS, particularly HTTPS). Most browsers indicate transport encryption with a small padlock in the address bar.
Our digital communication is subject to mass surveillance without cause or suspicion by security authorities in Switzerland, other parts of Europe, the United States, and other countries. We cannot directly influence the corresponding processing of personal data by intelligence agencies, law enforcement, or other security authorities, nor can we exclude the targeted surveillance of specific individuals.
6. Personal Data Abroad
We generally process personal data in Switzerland and the European Economic Area (EEA), but we may transfer data to other countries for processing, provided the relevant jurisdiction ensures adequate data protection.
We may transfer data to countries that do not ensure adequate data protection, provided data protection is guaranteed on other grounds, such as standard data protection clauses or other suitable safeguards. We are happy to provide information on such guarantees upon request.
7. Rights of Data Subjects
7.1 Data Protection Claims
We grant data subjects all rights according to applicable data protection law. Data subjects, in particular, have the following rights:
- Access: Data subjects can request information on whether we process their personal data, and if so, what data is processed. Data subjects receive the information necessary to assert their data protection claims and ensure transparency. This includes details on the purpose of processing, retention period, potential data disclosure, data export to other countries, and the source of personal data.
- Correction and Restriction: Data subjects can correct inaccurate data, complete incomplete data, and restrict the processing of their data.
- Deletion and Objection: Data subjects can request the deletion of their personal data (“Right to be Forgotten”) and object to future data processing.
- Data Release and Transfer: Data subjects may request the release of their personal data or transfer to another responsible party.
We may defer, limit, or deny the exercise of data subject rights within the legally permissible scope. We may inform data subjects of any conditions for exercising their data protection rights. For example, we may refuse access to protect business secrets or other persons' privacy. Likewise, we may refuse data deletion to comply with legal retention obligations.
Exceptionally, we may impose fees for exercising rights. We will inform data subjects in advance about any potential fees.
We are required to adequately identify data subjects who request access or assert other rights. Data subjects are required to cooperate in the identification process.
7.2 Legal Protection
Data subjects have the right to enforce their data protection claims through legal channels or file complaints with the competent data protection supervisory authority.
The Swiss Federal Data Protection and Information Commissioner (FDPIC) serves as the data protection supervisory authority for complaints against private data controllers and federal agencies in Switzerland.
Potential data protection supervisory authorities for complaints from data subjects in the European Economic Area (EEA) under the GDPR are organized as members of the European Data Protection Board (EDPB). Some EEA member states, like Germany, have federated data protection supervisory authorities.
8. Use of the Website
8.1 Cookies
We may use cookies, including first-party cookies and third-party cookies from service providers. Cookies are data stored in the browser, and may include various data formats beyond traditional text cookies.
Cookies can be stored temporarily as "session cookies" or for a specified duration as "permanent cookies." "Session cookies" are automatically deleted when the browser is closed, while "permanent cookies" have a specific storage duration. Cookies enable us to recognize a browser upon subsequent visits, allowing us to measure site reach or enable online marketing.
Cookies can be deactivated or deleted via browser settings at any time. Without cookies, our website may no longer be fully functional. We ask for explicit consent to use cookies if necessary.
Many services offer general cookie opt-out options, such as AdChoices (Digital Advertising Alliance of Canada), Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance), or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).
8.2 Logging
We may log data on each access to our website or other online presence, provided this data is transmitted to our digital infrastructure. Logged information may include date and time (including time zone), IP address, access status (HTTP status code), operating system (including user interface and version), browser (including language and version), the specific sub-page accessed on our website, and the last page visited within the same browser window.
We log such information, which may include personal data, in log files. This information is necessary for providing a continuous, user-friendly, and reliable online presence and for data security purposes, including those handled by third parties.
8.3 Tracking Pixels
We may incorporate tracking pixels into our online presence, also known as web beacons. Tracking pixels, including those provided by third parties, are typically small, invisible images or JavaScript-based scripts retrieved automatically upon accessing our online presence. Tracking pixels can capture similar information as log files.
9. Notifications and Communications
We may send notifications and communications via email or other channels like instant messaging or SMS.
9.1 Success and Reach Measurement
Notifications and communications may include web links or tracking pixels to capture whether a message was opened and which links were clicked. This tracking may also include personal tracking to measure effectiveness and reach. This helps us tailor messages to recipients' preferences and reading habits, ensuring that notifications and communications are effective, user-friendly, continuous, secure, and reliable.
9.2 Consent and Objection
You generally need to explicitly consent to the use of your email address and other contact details unless other legal grounds for use apply. Where possible, we use the "Double Opt-in" method, requiring confirmation via a web link sent to you, to prevent unauthorized use. We may record these consents, including the IP address and the date and time, for security and verification purposes.
You can generally object to receiving notifications and communications, such as newsletters, at any time. An objection also allows you to opt out of personal usage tracking for success and reach measurement. Required notifications and communications related to our services are exempt from opt-out.
9.3 Service Providers for Notifications and Communications
We use specialized service providers to send notifications and communications, including:
Mailgun: Platform for transactional emails; provided by Mailgun Technologies Inc. (USA) and affiliates ("Mailgun Group"); Privacy Information: Privacy Policy.
10. Social Media
We maintain a presence on social media platforms and other online platforms to communicate with interested individuals and share information about our activities. Personal data may be processed outside Switzerland and the EEA on such platforms.
Each platform's Terms of Use, Privacy Policies, and other regulations apply, informing data subjects of their rights directly with the platform, such as the right to information.
11. Third-Party Services
We use third-party services to conduct our activities continuously, user-friendly, securely, and reliably. These services may embed features or content on our website. For technical reasons, these services may temporarily capture users' IP addresses.
For necessary security, statistical, and technical purposes, third-party providers may process data related to our activities in aggregated, anonymized, or pseudonymized form. This may include usage data required to provide the service.
We specifically use:
- Google Services: Provided by Google LLC (USA) / Google Ireland Limited (Ireland) for EEA and Swiss users; General Data Protection Information: "Privacy and Security Principles," Privacy Policy, "Google's Commitment to Compliance," "Privacy Guide for Google Products," "How We Use Data from Sites or Apps," Cookie Types and Technologies, "Personalized Advertising."
- Microsoft Services: Provided by Microsoft Corporation (USA) / Microsoft Ireland Operations Limited (Ireland) for EEA, UK, and Swiss users; General Data Protection Information: "Microsoft Privacy," "Trust Center," Privacy Policy, Data Protection Dashboard.
11.1 Digital Infrastructure
We use services from specialized third parties to access necessary digital infrastructure. This includes hosting and storage services from selected providers.
Specifically, we use:
- bunny.net: Content Delivery Network (CDN); provided by BunnyWay d.o.o. (Slovenia); Privacy Information: Privacy Policy.
- Cloudflare: Content Delivery Network (CDN); provided by Cloudflare Inc. (USA); Privacy Information: "Privacy," Privacy Policy, Cookie Policy.
- Hetzner: Hosting and other infrastructure; provided by Hetzner Online GmbH / Hetzner Cloud GmbH (Germany); Privacy Information: Privacy Policy, "Privacy FAQ."
11.2 Audio and Video Conferencing
We use specialized services for audio and video conferencing to communicate online, such as for virtual meetings or online classes. The legal terms of each service provider apply, including Privacy Policies and Terms of Use.
Depending on personal circumstances, we recommend muting microphones by default and using background blurring or virtual backgrounds during audio and video conferences.
We specifically use:
- Google Meet: Video conferencing; provided by Google; Google Meet-specific information: "Google Meet – Security and Privacy for Users."
- Microsoft Teams: Platform for audio and video conferencing; provided by Microsoft; Teams-specific information: "Privacy and Microsoft Teams."
11.3 Fonts
We use third-party services to embed selected fonts, icons, logos, and symbols into our website.
12. Success and Reach Measurement
We attempt to determine how our online offerings are used. We measure the success and reach of our activities, the impact of third-party links, and compare usage of various parts or versions of our offerings (using the A/B test method). Based on these measurements, we can improve content and make enhancements.
IP addresses of users are generally shortened ("IP masking") to comply with data minimization principles. Cookies and user profiles may also be used to create pseudonymized user profiles, recording only necessary information and not intended for individual identification. However, services with user accounts may assign our site usage to a user's profile with that service.
We specifically use:
- Fathom Analytics: Privacy-friendly alternative to Google Analytics with full anonymization and no cookies; provided by Conva Ventures Inc. (Canada); Privacy Information: Privacy Policy, "Our data journey."
13. Final Provisions
This privacy policy was created using the privacy policy generator provided by Datenschutzpartner.
We may modify and supplement this privacy policy at any time. We will notify users of such updates appropriately, including by posting the current privacy policy on our website.