How your personal data is used

Privacy Policy

Search

1. General notice

Based on Article 13 of the Swiss Federal Constitution and the data protection regulations of the Swiss Confederation (Data Protection Act, DSG), every person has the right to protection of their privacy as well as protection against misuse of their personal data. Cyber Wave City takes your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy.

In cooperation with our hosting providers, we make every effort to protect the databases as well as possible against unauthorized access, loss, misuse or falsification.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

By using this website, you consent to the collection, processing and use of data in accordance with the following description. This website can generally be visited without registration. Data such as pages accessed or names of files accessed, date and time are stored on the server for statistical purposes without this data being directly related to your person. Personal data, in particular name, address or e-mail address are collected as far as possible on a voluntary basis. No data will be passed on to third parties without your consent.

2. Processing of personal data

Personal data is any information that relates to a specific or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, deletion, storage, modification, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. Furthermore, to the extent and insofar as the EU GDPR is applicable, we process personal data in accordance with the following legal bases in connection with Art. 6 (1) GDPR:

  • Processing of personal data with the consent of the data subject.
  • Processing of personal data for the fulfillment of a contract with the data subject as well as for the implementation of corresponding pre-contractual measures.
  • Processing of personal data for the fulfillment of a legal obligation to which we are subject under any applicable law of the EU or under any applicable law of a country in which the GDPR is applicable in whole or in part.
  • Processing of personal data in order to protect the vital interests of the data subject or another natural person.
  • Processing of personal data to protect the legitimate interests of us or of third parties, unless the fundamental freedoms and rights and interests of the data subject are overridden. Legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for the duration required for the respective purpose or purposes. In the case of longer-term retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.

3. Cookies

This website uses cookies. These are small text files that make it possible to store specific information related to the user on the user’s terminal device while the user is using the website. Cookies make it possible, in particular, to determine the frequency of use and number of users of the pages, to analyze behavior patterns of page use, but also to make our offer more customer-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved when you visit the site again. If you do not wish this to happen, you should set your Internet browser so that it refuses to accept cookies.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of the services, especially in the case of tracking, via the U.S. site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by disabling them in the browser settings. Please note that in this case not all functions of this online offer can be used.

4. SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

5. Server log files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.

6. Third party services

6.1 Contact Form

The website uses a generic contact form that collects and processes personal data based on your inquiry. After handling your inquiry, the personal data will be deleted. By using our contact form you accept the processing of your inquiry.

6.2 Facebook Analytics

Due to our legitimate interest in the analysis, optimization and economic operation of our online offer and for these purposes within the meaning of Art. 6 (1) f. of the GDPR we use the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

Facebook is certified under the Privacy Shield Agreement and thereby offers a guarantee to comply with European data protection law.

With the help of the Facebook pixel, Facebook is on the one hand able to determine the visitors of our online offer as a target group for the presentation of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display our Facebook ads only to Facebook users who have shown an interest in our website or who have specific characteristics (e. g. interests in certain topics or products determined by the websites visited) that we submit to Facebook (so-called “custom audiences”). With the help of the Facebook pixel, we also want to make sure that our Facebook ads are in line with the potential interest of users and do not have a nuisance effect. Using the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad (so-called “conversion tracking”).

The Facebook pixel is directly integrated into our website by Facebook and can store a so-called cookie, i. e. a small file, on your device. If you then log in to Facebook or visit Facebook when you are logged in, your visit to our online offer will be noted in your profile. The data collected about you is anonymous for us, i. e. it does not allow us to draw conclusions about the identity of the users. However, the data is stored and processed by Facebook so that it can be linked to the respective user profile and used by Facebook as well as for its own market research and advertising purposes. If we transfer data to Facebook for comparison purposes, it is encrypted locally in the browser and only then sent to Facebook via a secure https connection. This is done with the sole purpose of matching the data encrypted by Facebook.

Furthermore, when using the Facebook pixel, we use the additional function “advanced matching”, in which inventory data such as telephone numbers, e-mail addresses or users’ Facebook IDs is transmitted to Facebook (encrypted), but solely to create target groups (“Custom Audiences”). Users agree our use of the “advanced matching” and the related processing of their data.

Based on our legitimate interests, we also use the “Custom Audiences from File” function of the social network Facebook, Inc. in which case inventory data (phone numbers, email addresses, Facebook IDs) will be uploaded to Facebook. The upload process is encrypted. The upload serves solely to identify recipients of our Facebook ads. We want to ensure that the ads are only displayed to users who are interested in our information and services. Users agree our use of the ” Custom Audiences from File” function and the related processing of their data.

Facebook’s processing of the data is governed by Facebooks Data Usage Policy. Accordingly, general instructions on how to display Facebook ads, in the Facebook Data Usage Policy: https://www.facebook.com/policy.php. For specific information and details about the Facebook pixel and how it works, please visit the Facebook Help Center: https://www.facebook.com/business/help/651294705016616.

You may object to the collection by the Facebook pixel and use of your data to display Facebook ads. To set what kind of ads you see on Facebook, you can go to the page set up by Facebook and follow the instructions on how to set up use-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i. e. they are applied to all devices, such as desktop computers or mobile devices.

You may also object to the use of cookies for measuring range and advertising purposes via the Network Advertising Initiative’s deactivation page (http://optout.networkadvertising.org/) and additionally via the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

6.3 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as “Google”.

The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under “My data”, “Personal data”.

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DS-GVO. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. We would like to point out that on this website Google Analytics has been extended by the code “_anonymizeIp();” to ensure anonymized collection of IP addresses. This means that IP addresses are processed in abbreviated form, which means that they cannot be linked to a specific person. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.

Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Disable Google Analytics.

In addition, you can also prevent the use of Google Analytics by clicking on this link: Disable Google Analytics. This will save a so-called opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your terminal device, these opt-out cookies will also be deleted, i.e. you will have to set the opt-out cookies again if you wish to continue to prevent this form of data collection. The opt-out cookies are set per browser and computer/end device and must therefore be activated separately for each browser, computer or other end device.

6.4 Google reCAPTCHA

Google reCAPTCHA is implemented on our websites. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA («Google»). We use reCHAPTA on our websites to prevent various types of data processing abuse attempts (e.g. phishing). reCHAPTA analyzes various information of the respective visitor (e.g. IP address, mouse movements of the user, length of stay on the website). By using reCAPTCHA, data is transferred to Google, which is used to determine whether the visitor is a human being or a (spam) bot. The data processing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offers against abusive automated spying, against spam as well as protecting third parties against
such attacks.

You can read which data is collected by Google and what this data is used for together with its privacy policy at

6.5 MailChimp

In distributing newsletters, MailChimp will collect personal information from you, including e-mail addresses you have provided to Cyber Wave City for the purpose of receiving electronic newsletters, and all information relating to those e-mail addresses. MailChimp also uses cookies, web beacons and Flash player codes to collect information about

  • when you access the electronic newsletters of Cyber Wave City;
  • your browser type and version;
  • your operating system and other similar information.

For more information on the information MailChimp will collect, please refer to the MailChimp’s Privacy Policy and the MailChimp Terms of Use.

MailChimp will use the information collected from you for the purpose of hosting the online platform to enable Cyber Wave City to create, send and manage electronic newsletters. MailChimp will also use this information to measure the performance of Cyber Wave City’s email campaigns.

MailChimp may transfer this information to its contractors or other third parties who process the information on MailChimp’s behalf, or where otherwise required to do so by law.

MailChimp is based in the United States of America (USA) and is subject to the laws of the USA. Your information (including your IP address) will be transmitted to and stored by MailChimp on servers located outside Australia.

By signing up to electronic newsletters about visitor events, products and programs at Australian Parliament House (APH), you:

  • consent to your personal information being collected, used and disclosed as set out in these terms and conditions, and in MailChimp’s Privacy Policy and Terms of Use;
  • acknowledge that MailChimp is not subject to the Privacy Act 1988 (Cth) and you will not be able to seek redress under the Privacy Act 1988 (Cth) for any privacy breaches by MailChimp but will need to seek redress under the laws of the USA.

You can unsubscribe from the Cyber Wave City’s electronic newsletter at any time by selecting the “unsubscribe” option in every email sent to you by MailChimp.

6.6 YouTube

On this website, functions of the service “YouTube” are integrated. “YouTube” is owned by Google Ireland Limited, a company incorporated and operated under the laws of Ireland with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.

Your legal agreement with “YouTube” consists of the terms and conditions found at the following link: Terms. These Terms constitute a legally binding agreement between you and “YouTube” regarding your use of the Services. Google’s Privacy Policy explains how “YouTube” treats and protects your personal information when you use the Service.

6.7 Shop & Payment Providers

Our website uses a shop checkout process by the popular WordPress plugin WooCommerce. We use Google Pay, Apple Pay, Stripe, and PayPal as our payment gateway providers. Our shop and payment providers store personal data for the purpose of handling your order.
While using the shop checkout process you may be asked to insert personal data such as surname, lastname, email, postcode, and credit card information that will be transferred to the United States or Europe. The data will only be collected and processed for the purpose of handling the shop checkout process. By using our shop checkout process, you accept the processing of your order. For further information, visit the terms of use section of each individual payment service provider:

7. Rights of affected persons

7.1. Right to confirmation

Every data subject has the right to request confirmation from the website operator as to whether personal data concerning him or her are being processed. If you wish to exercise this right of confirmation, you may contact the data protection officer at any time.

7.2. Right of information

Every person affected by the processing of personal data has the right to receive information free of charge from the operator of this website at any time about the personal data stored about him or her and a copy of this information. Furthermore, information may be provided about the following, if applicable:

  • The purposes of processing
  • The categories of personal data processed
  • The recipients to whom the personal data have been or will be disclosed
  • If possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
  • The existence of a right to obtain the rectification or erasure of personal data concerning him or her, or the restriction of processing by the controller, or a right to object to such processing
  • The existence of a right of appeal to a supervisory authority
  • If the personal data are not collected from the data subject: Any available information about the origin of the data.

Furthermore, the affected person has the right to be informed whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.

If you would like to exercise this right to information, you can contact our data protection officer at any time.

7.3. Right to rectification

Every person affected by the processing of personal data has the right to demand that inaccurate personal data concerning him or her be corrected without delay. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request that incomplete personal data be completed, including by means of a supplementary declaration.

If you wish to exercise this right of rectification, you may contact our data protection officer at any time.

7.4. Right to erasure (right to be forgotten)

Any person affected by the processing of personal data has the right to demand from the controller of this website that the personal data concerning him or her be erased immediately, provided that one of the following reasons applies and insofar as the processing is not necessary:

  • The personal data have been collected or otherwise processed for such purposes for which they are no longer necessary.
  • The data subject revokes the consent on which the processing was based and there is no other legal basis for the processing
  • The data subject objects to the processing on grounds relating to his or her particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and related profiling
  • The personal data have been processed unlawfully
  • The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject
  • The personal data has been collected in relation to information society services provided directly to a child

If one of the above reasons applies and you wish to arrange for the deletion of personal data stored by the operator of this website, you can contact our data protection officer at any time. The data protection officer of this website will arrange for the deletion request to be complied with immediately.

7.5. Right to restriction of processing

Any person concerned by the processing of personal data has the right to obtain from the controller of this website the restriction of processing if one of the following conditions is met:

  • The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data
  • The processing is unlawful, the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data
  • The controller no longer needs the personal data for the purposes of the processing, but the data subject needs it for the assertion, exercise or defense of legal claims
  • The data subject has objected to the processing on grounds relating to his or her particular situation, and it is not yet clear whether the legitimate interests of the controller override those of the data subject

If one of the aforementioned conditions is met, you can request the restriction of personal data stored by the operator of this website at any time by contacting our data protection officer. The data protection officer of this website will arrange the restriction of the processing.

7.6. Right to data portability

Every person affected by the processing of personal data has the right to receive the personal data concerning him or her in a structured, common and machine-readable format. He or she also has the right to have this data transferred to another controller if the legal requirements are met.

Furthermore, the data subject has the right to obtain that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and insofar as this does not adversely affect the rights and freedoms of other persons.

To assert the right to data portability, you may at any time contact the data protection officer appointed by the operator of this website.

7.7. Right of objection

Any person affected by the processing of personal data has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her.

The operator of this website shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or if the processing serves the purpose of asserting, exercising or defending legal claims.

To exercise the right to object, you may directly contact the Data Protection Officer of this website.

Every person affected by the processing of personal data has the right to revoke a given consent to the processing of personal data at any time.

If you wish to exercise your right to revoke consent, you may contact our data protection officer at any time.

8. Objection advertising mails

The use of contact data published within the scope of the legal notice obligation for the transmission of not expressly requested advertising and information materials is hereby contradicted. Cyber Wave City expressly reserves the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

9. Chargeable services

In order to provide services for which a charge is made, we request additional data, such as payment details, in order to be able to execute your order. We store this data in our systems until the legal retention periods have expired.

10. Changes

We can adapt this data protection declaration at any time without prior notice. The current version published on our website shall apply. Insofar as the data protection declaration is part of an agreement with you, we will inform you of the change by e-mail or other suitable means in the event of an update.

11. Questions to the data protection officer

If you have any questions regarding data protection, please write us an email or contact directly the responsible person in our organization listed for data protection at the beginning of the Privacy Policy.


Last updated, 01.01.2023