Legal Notice

IMPACT point AG
Vorderhausstrasse 4A
CH-9053 Teufen
Switzerland

Phone: +41-71-2221586
www.impactpoint.ch
contact(at)impactpoint.ch

Director: Ireneusz Myskow
Commercial register: Commercial register information of the Canton of Appenzell Ausserrhoden, ID: CHE-114.569.519

Privacy Policy

This Privacy Policy provides you with information on the processing of personal data according to Article 13 GDPR (EU General Data Protection Regulation).

You can visit our website without providing any personal information. Only if you send us a message via the contact form or by other means, we collect the data you provide.

1 Controller

IMPACT point AG, Vorderhausstrasse 4A, CH-9053 Teufen, Switzerland, Phone: +41-71-2221586, contact(at)impactpoint.ch

Contact details of our Data Protection Officer

K3 Finanzkommunikation GmbH, Feldbergstrasse 17a, D-61462 Königstein, Germany, Phone: +49-6174-201620, mail(at)k3-finanzkommunikation.de. Attn: Mr. Bernhard Kramer

2 Processing of personal data when you visit our website
2.1 Server log files

When you access our website, your browser software transmits the following data to the web server: your IP address, information on your browser software and operating system, referrer URL (the URL of the website page from where you accessed our website), the contents accessed on our website, date and time.

We keep records of this data (server log files). The data that we collect in server log files will not be associated with any other personal data.

The data will be stored for a maximum period of seven days. Where certain data is necessary as evidence for the for the establishment, exercise or defence of legal claims, it will be stored as long as it is necessary for that purpose.

The legal basis is Article 6(1)(f) GDPR (pursuit of legitimate interests). The processing of personal data is based on our legitimate interests in analysing the use of the website, optimising our services and ensuring its security, including the establishment, exercise or defence of legal claims.

2.2 Cookies
Our website uses cookies. Cookies are text files which are stored by your browser software on your terminal device and which enable the analysis of the use of this website by visitors on the website, e.g. what contents a visitor has accessed. Cookies are stored using an identification which is randomly generated; they do not make a person directly identifiable.

You may prevent the use of cookies by changing the settings in your browser software. You can also delete cookies at any time. Please be advised that if you deactivate cookies, you might not be able to use the full functionality of our website.

2.3 Google Analytics
Our website uses Google Analytics, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Analytics to analyse how visitors use our website.

Google Analytics uses cookies (see 2.2 above). Information such as your IP address, the contents accessed on our website, and date and time will be transmitted to Google’s servers in the US and will be processed there. Google will truncate your IP address within the EU or the EEA before it is transmitted to the US so that the data collected cannot be associated with an identifiable person. Google processes the collected data to provide us with an evaluation of how visitors use our website. Google does not associate the collected data with other data. Please find further information on the processing of personal data by Google at policies.google.com/privacy.

You may prevent the collection of personal data by deactivation cookies (see 2.2 above). Google provides an opt-out browser add-on at tools.google.com/dlpage/gaoptout, which prevents the transmission of data to Google Analytics.

The legal basis is Article 6(1)(f) GDPR (pursuit of legitimate interests). The processing of personal data is based on our legitimate interests to improve the user experience of visitors of our website.

3 Processing of personal data that you provide to us

When you contact us using the contact form, we will process the information you provide to process your request or enquiry. The legal basis is Article 6(1)(b) GDPR (taking steps prior to entering into a contract).

4 Social media and third party content
4.1 YouTube player

Our website uses the YouTube player, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the YouTube player to embed YouTube videos on our website.

No data will be transmitted to Google before you start an embedded video. Once you start a video, your browser contacts Google’s servers in the US order to display the video within our website. No cookies are set when you use the YouTube player. If you are logged in to YouTube when you start a video, Google will associate data on what videos you watch with your Google account. To prevent this, you must log out of all Google services before you watch an embedded video. Please find further information on the processing of personal data by Google at policies.google.com/privacy.

The legal basis is Article 6(1)(f) GDPR (pursuit of legitimate interests). The processing of personal data is based on our legitimate interests to improve the user experience of visitors of our website.

4.2 Google Fonts

Our website uses Google Fonts to display external web fonts provided by Google. Google Fonts is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit our website, your browser establishes a connection to Google’s servers in the USA in order to download the necessary fonts. Google processes your IP address and the fonts required by your browser in order to provide the fonts. Please find further information on the processing of personal data by Google at policies.google.com/privacy.

The legal basis is Article 6(1)(f) GDPR (pursuit of legitimate interests). The processing of personal data is based on our legitimate interests to improve the user experience of visitors of our website.

4.3 Twitter

Our website uses content of the social network Twitter, which operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.

If you access a page that includes content from Twitter, your browser will transmit data to the Twitter server, including you IP address and date and time. If you are logged in to Twitter while visiting a page on our website that included content from Twitter, the data collected by Twitter will be associated with your Twitter account. To prevent this, you must log out of Twitter before you access a page that includes content from Twitter. Please find further information on the processing of personal data by Twitter at twitter.com/privacy.

The legal basis is Article 6(1)(f) GDPR (pursuit of legitimate interests). The processing of personal data is based on our legitimate interests to improve the user experience of visitors of our website.

4.4 Instagram

Our website uses content of the social network Instagram, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (“Facebook”). We also operate a channel on Instagram. We are joint controllers (Article 26 GDPR) with Facebook with regard to Instagram. You may contact Facebook’s data protection officer using the contact form at www.facebook.com/help/contact/540977946302970. We have concluded an agreement with Facebook which determines our respective responsibilities for compliance with the obligations under the GDPR, in particular as regards the exercising of the rights of the data subject and our respective duties to provide information on the processing of personal data.

When you access our Instagram channell, Facebook process personal data such as your IP address, the contents accessed on Instagram, and date and time as well as any information you provide or content you upload on Instagram.

Facebook processes the collected data to evaluate how visitors use our Instagram channel. Facebook will use this data for market research and advertising and create user profiles. Using such user profiles Facebook is able to provide advertisements on Instagram and on Facebook or websites which are based on your interests (personalised advertising). If you are logged into Instagram when you visit our website, Facebook will associate this data with your user account.

Facebook uses cookies (see 2.2 above), in particular to provide personalised advertising. You may prevent the use of cookies (see 2.2 above).

The legal basis is Article 6(1)(f) GDPR (pursuit of legitimate interests). The processing of personal data is based on our legitimate interests to communicate with the public and to promote our services (Instagram channel) and to improve the user experience of visitors of our website (our website).

If you contact us via Instagram, we will process the personal data you provide to handle your request or enquiry. The legal basis is Article 6(1)(b) GDPR (taking steps prior to entering into a contract).

Where you have given your consent, the legal basis is Article 6(1)(a) GDPR (consent). You may withdraw your consent at any time.[FMH1]

The processing of personal data by Facebook Ireland Ltd. may be carried out by its parent company Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

Please find further information on the processing of personal data by Facebook at help.instagram.com/519522125107875.

5 Processing of personal data that you provide to us

When you contact us using the contact form, we will process the information you provide to process your request or enquiry. The legal basis is Article 6(1)(b) GDPR (taking steps prior to entering into a contract).

6 Recipients personal data

We employ the following service providers which process data on our behalf:

Mittwald CM Service GmbH & Co. KG

Königsberger Straße 4-6

32339 Espelkamp

Telefon: +49-5772-293-100, support(at)mittwald.de

wela Ltd

Gustav-Adolf Strasse 9, D-22043 Hamburg , Germany (Representative Office),

Phone: +49-40-537998055, info(at)wela.com

The legal basis is Article 28 GDPR (commissioned processing of personal data).

For the processing of personal data by Google and Twitter, see 4.1, 4.2 and 4.3 above.

Facebook Inc., which may process personal in connection with Instagram, Twitter Inc. and Google LLC, which operates the Google servers, are located in the US. These companies are certified under the EU-U.S. Privacy Shield Framework (see www.privacyshield.gov). The EU Commission has determined that an adequate level of protection is ensured where data are processed by companies which are certified under the EU-U.S. Privacy Shield Framework.

Apart from the aforementioned cases we will only share data relating to you with third parties without your consent where one of the following applies:

Where it is necessary to pursue legitimate interests; our legitimate interests include in particular the establishment, exercise and defence of legal claims; in this case, the legal basis is Article 6(1)(f) GDPR.
For compliance with a legal obligation; in this case, the legal basis is Article 6(1)(c) GDPR.

7 Period for which personal data will be stored

We store your data only as long as it is necessary for the relevant purpose.

8 Your rights

Where the respective legal requirements are met, you have the following rights:

You have the right to withdraw any consent you have given with future effect at any time (Article 7(3) GDPR.)

You have the right to withdraw any consent you have given with future effect at any time (Article 7(3) GDPR.)
You have the right to obtain information on what personal data relating to you we have store (Article 15 GDPR).
You have the right to request the rectification of inaccurate data (Article 16 GDPR).
You have the right to request the erasure (Article 17) or the restriction of processing (Article 18 GDPR) of data which is no longer necessary. Where there is a legal obligation to retain data, e g for business correspondence according to commercial law and tax law, or another statutory exception, data will not be deleted, but the processing will be restricted.
You have the right to data portability (Article 20 GDPR), i e the right to receive the data you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance from us; this may include the right to have such data transmitted directly to another controller where technically feasible.
If you consider that the processing of your data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority (Article 77 GDPR).

Right to object: You may at any time object to the processing of your data for purposes in the pursuit of legitimate interests (Article 21(1) GDPR) on grounds relating to your particular situation; you may at any time object to the processing of your data for direct marketing purposes (Article 21(2) GDPR).

Last revision: 30 January 2020