Privacy Policy

This privacy policy provides information about the processing of personal data in connection with our activities and operations, including our website under the domain name caterinamakhdoomi.ch. In particular, we provide information about what, how, and where we process which personal data. We also provide information about the rights of individuals whose data we process.

We may publish additional privacy statements or other data protection information for individual or additional activities and operations.

1. Contact addresses

Responsible in terms of data protection law is:

Caterina Makhdoomi
Caterina Makhdoomi
Ramstelweg 9
4143 Dornach

info@caterinamakhdoomi.ch

In individual cases, third parties may be responsible for processing personal data, or there may be joint responsibility with third parties. We will be happy to provide data subjects with information about the respective responsibility upon request.

2. Terms and legal bases

2.1 Terms

Data subject: Natural person about whom we process personal data.

Personal data: All information relating to an identified or identifiable natural person.

Personal data requiring particular protection: data concerning trade union, political, religious or ideological views and activities, data concerning health, privacy or ethnic or racial affiliation, genetic data, biometric data that uniquely identify a natural person, data on criminal and administrative sanctions or prosecutions, and data on social assistance measures.

Processing: Any handling of personal data, regardless of the means and procedures used, such as querying, comparing, adapting, archiving, storing, retrieving, disclosing, obtaining, recording, collecting, deleting, disclosing, arranging, organizing, storing, altering, disseminating, linking, destroying and using personal data.

2.2 Legal basis

We process personal data in accordance with Swiss law, in particular the Federal Act on Data Protection (Data Protection Act, DSG) and the Ordinance on Data Protection (Data Protection Ordinance, DSV).

3. Type, scope and purpose of processing personal data

We process the personal data necessary to carry out our activities in a sustainable, humane, secure, and reliable manner. The personal data processed may, in particular, fall into the following categories: browser and device data, content data, communication data, metadata, usage data, master data including inventory and contact data, location data, transaction data, contract data, and payment data. Furthermore, the personal data may constitute particularly sensitive personal data.

We also process personal data that we receive from third parties, obtain from publicly accessible sources or collect in the course of our activities, to the extent that such processing is permissible.

Where necessary, we process personal data with the consent of the data subjects. In many cases, we may process personal data without consent, for example, to comply with legal obligations or to protect overriding interests. We may also request the consent of data subjects when their consent is not required.

We process personal data for the duration necessary for the respective purpose. We anonymize or delete personal data, particularly depending on statutory retention and limitation periods.

4. Disclosure of personal data

We may disclose personal data to third parties, have it processed by third parties, or process it jointly with third parties. Such third parties include, in particular, specialized providers whose services we utilize.

We may, for example, disclose personal data to banks and other financial service providers, public authorities, educational and research institutions, consultants and lawyers, interest groups, IT service providers, cooperation partners, credit and credit agencies, logistics and shipping companies, marketing and advertising agencies, media, organizations and associations, social institutions, telecommunications companies, insurance companies and payment service providers.

5. Communication

We process personal data in order to communicate with individuals as well as with authorities, organizations, and companies. In particular, we process data that a data subject sends to us when contacting us, for example, by post or email. We may store such data in an address book or using similar tools.

Third parties who transmit data about other individuals to us are obligated to independently ensure the data protection of these data subjects. In particular, they must ensure that such data is correct and permitted to be transmitted.

6. Data security

We take appropriate technical and organizational measures to ensure data security appropriate to the respective risk. These measures specifically ensure the confidentiality, availability, traceability, and integrity of the personal data processed, but cannot guarantee absolute data security.

297 / 5.000 Access to our website and our other digital presence is via transport encryption (SSL/TLS, in particular with the Hypertext Transfer Protocol Secure, abbreviated to HTTPS). Most browsers warn against visiting a website without transport encryption.

Our digital communications—like all digital communications—are subject to mass surveillance without cause or suspicion by security authorities in Switzerland, the rest of Europe, the United States of America (USA), and other countries. We have no direct influence on the corresponding processing of personal data by intelligence agencies, police departments, and other security authorities. Nor can we rule out the possibility that a data subject may be subject to targeted surveillance. We cannot directly influence the processing of personal data by secret services, police departments and other security authorities. We also cannot rule out that a data subject is being specifically monitored.

7. Personal data abroad

We generally process personal data in Switzerland. However, we may also disclose or export personal data to other countries, in particular to process it or have it processed there.

We may disclose personal data to any country on Earth and elsewhere in the universe, provided that the laws there ensure adequate data protection in accordance with a decision of the Swiss Federal Council.

We may disclose personal data to countries whose laws do not guarantee adequate data protection, provided that suitable data protection is ensured for other reasons, in particular on the basis of standard data protection clauses or other appropriate safeguards. Exceptionally, we may export personal data to countries without adequate or suitable data protection if the specific data protection requirements are met, for example, the express consent of the data subjects or a direct connection with the conclusion or performance of a contract. We will be happy to provide data subjects with information about any safeguards or a copy of the safeguards upon request.

8. Rights of data subjects

8.1 Data protection claims

We grant data subjects all rights under applicable law. Data subjects have, in particular, the following rights:

  • Information: Data subjects can request information about whether we process personal data about them, and if so, which personal data this is. Data subjects will also receive the information necessary to assert their data protection rights and to ensure transparency. This includes the personal data processed as such, but also, among other things, information about the purpose of processing, the retention period, any disclosure or export of data to other countries, and the origin of the personal data.
  • Correction and restriction: Data subjects can correct inaccurate personal data, complete incomplete data and have the processing of their data restricted.
  • Possibility for own point of view and human review: In the case of decisions that are based exclusively on automated processing of personal data and have legal consequences for them or significantly affect them (automated individual decisions), data subjects can present their own point of view and request review by a human.
  • Deletion and objection: Data subjects can have their personal data deleted (“right to be forgotten”) and object to the processing of their data with effect for the future.
  • Data disclosure and data transfer: Data subjects can request the disclosure of personal data or the transfer of their data to another controller.

We may postpone, restrict, or refuse the exercise of data subjects’ rights within the legally permissible framework. We may inform data subjects of any conditions that may need to be met to exercise their data protection rights. For example, we may refuse to provide information in whole or in part, citing confidentiality obligations, overriding interests, or the protection of other persons. We may also refuse to delete personal data in whole or in part, particularly with reference to statutory retention periods.

In exceptional cases, we may charge fees for exercising these rights. We will inform data subjects in advance of any costs involved.

We are obligated to take appropriate measures to identify data subjects who request information or assert other rights. Data subjects are obligated to cooperate.

8.2 Legal protection

Data subjects have the right to enforce their data protection claims through legal action or to file a complaint with a data protection supervisory authority.

The data protection supervisory authority for private controllers and federal bodies in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

9. Use of the website

9.1 Cookies

We may use cookies. Cookies—both our own cookies (first-party cookies) and cookies from third-party services we use (third-party cookies)—are data stored in your browser. Such stored data need not be limited to traditional text cookies.

Cookies can be stored temporarily in the browser as “session cookies” or for a specific period of time as so-called permanent cookies. “Session cookies” are automatically deleted when the browser is closed. Permanent cookies have a specific storage period. In particular, cookies make it possible to recognize a browser the next time you visit our website and thus, for example, to measure the reach of our website. Permanent cookies can also be used for online marketing, for example.

Cookies can be fully or partially deactivated, restricted, or deleted at any time in the browser settings. Browser settings often also allow for automated deletion and other management of cookies. Without cookies, our website may no longer be fully available. We actively request your express consent to the use of cookies—at least where and to the extent required by applicable law.

9.2 Logging

For each access to our website and our other digital presence, we may log at least the following information, provided that this information is transmitted to our digital infrastructure during such access: date and time including time zone, IP address, access status (HTTP status code), operating system including user interface and version, browser including language and version, individual subpage of our website accessed including the amount of data transferred, last website accessed in the same browser window (referrer).

We log such information, which may also constitute personal data, in log files. This information is necessary to provide our digital presence in a permanent, user-friendly, and reliable manner. The information is also necessary to ensure data security—including through or with the assistance of third parties.

9.3 Web beacon

We may integrate tracking pixels into our digital presence. Tracking pixels are also known as web beacons. Tracking pixels—including those of third parties whose services we use—are typically small, invisible images or JavaScript scripts that are automatically retrieved when you access our digital presence. Tracking pixels can collect at least the same amount of information as log files.

10. Third-party services

We use services from specialized third parties to enable us to conduct our activities in a sustainable, human-friendly, secure, and reliable manner. Such services allow us, among other things, to embed functions and content into our website. When embedding, the services used collect the users’ IP addresses at least temporarily for technically necessary reasons.

For necessary security-related, statistical, and technical purposes, third parties whose services we use may process data related to our activities in an aggregated, anonymized, or pseudonymized form. This includes, for example, performance or usage data in order to be able to provide the respective service.

In particular, we use:

10.1 Digital infrastructure

We use services from specialized third parties to access the digital infrastructure required for our activities. This includes, for example, hosting and storage services from selected providers.

In particular, we use:

10.2 Maps

We use third-party services to embed maps into our website.

In particular, we use:

10.3 Fonts

We use third-party services to embed selected fonts as well as icons, logos and symbols into our website.

In particular, we use:

11. Extensions for the website

We use extensions for our website to provide additional functionality. We may use selected services from suitable providers or use such extensions on our own digital infrastructure. Website extensions

In particular, we use:

12. Final notes on the privacy policy

We have created this privacy policy with the data protection generator of Datenschutzpartner.

We may update this privacy policy at any time. We will notify you of updates in an appropriate manner, in particular by publishing the latest privacy policy on our website. 

Translated from German to English with the help of Google Translate.