The controller of the data collection within the meaning of the Swiss Federal Act on Data Protection is
Erlebnis Hofmatt, with registered office at Hofmattweg 2, 3665 Wattenwil, Switzerland
Telephone: +41 (0) 76 490 36 65
Hosting provider: cyon
Scope of the processing of personal data
We only process the personal data of users of our website insofar as this is necessary to provide a functional website and our content and services.
The following points describe which personal data is processed:
- Technical necessity (see point 1)
- Contact form (see point 2)
- Google Maps (see point 3)
- WPML (see point 4)
1. Technical necessity
As with every connection to a web server, the server of our web hosting provider cyon in Basel, Switzerland, logs and stores certain technical data. This data includes the IP address and operating system of your device, the data, the access time, the type of browser and the browser request, including the origin of the request (referrer). This is necessary for technical reasons in order to make our website available to you. cyon uses technical and organizational measures to protect this data from unauthorized access and does not pass it on to third parties.
The raw logs contain the following information
- IP address of the accessing device
- Date and time of access
- URL accessed
- Access status/HTTP status code
- If available, the referrer (referring page)
- Amount of data transferred during access
- Browser identification (browser name and version)
The data is stored in the log files on cyon’s web server for 24 hours (see cyon.ch – raw logs). This data is not stored together with other personal data of the user. We have deactivated the website statistics so that the log data is not stored.
Purpose of data processing
The storage of the IP address by the system is necessary to enable delivery of the web pages to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.
Legal basis for data processing
The legal basis for the temporary storage of data and log files is
- 4, Art. 13 para. 1 DSG;
- within the scope of application of the GDPR, Art. 6 para. 1 lit. f GDPR,
as the storage is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest. The legitimate interests are based on the fact that we cannot offer the website if technically required settings are not available, stored and otherwise processed. Processing is also necessary in order to detect, defend against and document attacks on the integrity and functionality of the website. This outweighs the interests of the user of the website, as they visit the website of their own accord and can stop the processing of data by simply leaving the website.
Deletion of personal data
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after 24 hours at the latest. We do not store data beyond this period.
Right of objection
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object. If the user wishes to prevent future and further storage, they must leave the website and refrain from accessing this website in the future.
2. Contact form
There are forms on our website that users can use to contact us.
If a user makes use of this option, the data entered in the input mask provided on the website will be transmitted to us and stored. These data are
Name, e-mail, telephone number and message
Alternatively, it is possible to contact us via the e-mail address provided or by telephone. In this case, the user’s personal data transmitted with the e-mail or by telephone will also be stored, in particular the e-mail address or telephone number.
Purpose of data processing
The purpose of processing the data is, on the one hand, to contact the user.
The legal basis for the processing of personal data is the consent of the user in accordance with
- 4 para. 5 DSG and
- within the scope of the GDPR: Art. 6 para. 1 lit. a GDPR.
The legal basis for the processing is also
- 4, Art. 13 para. 1 FADP;
- within the scope of application of the GDPR, Art. 6 para. 1 lit. f GDPR.
as the storage is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest. The legitimate interests are based on the fact that, in particular in the event of a complaint, we must initiate measures to identify and correct the defects complained about in order to achieve our quality standards. This outweighs the interests of the user of the website, as the user uses the contact form of his or her own volition and thus consciously wants to give us the opportunity to use good and bad experiences to optimize our manufacturing and sales process.
Deletion of data
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
3. Google Maps
Our website uses the map service Google Maps, which is offered to persons from Switzerland and the European Economic Area by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland. In order for the Google map material used by us to be integrated, your web browser must establish a connection to a Google server, which may also be located in the USA, when you access our website. By integrating the map material, Google receives the information that a page of our website has been accessed from the IP address of your device. If you access the Google map service on our website while you are logged into your Google profile, this can also be linked to your Google profile. If you do not wish to be associated with your Google profile, you must log out of Google before accessing our website.
We use WPML from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (hereinafter referred to as: WPML). WPML is a multilingual plugin for WordPress. We use WPML to display our website in different languages. When you visit our website, WPML stores a cookie on your device to save the language setting you have selected. This allows personal data to be stored and analyzed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system).
Further information on the collection and storage of data by WPML can be found here:
Purpose of data processing
The use of WPML enables us to display our website in multiple languages.
- Legal basis for the processing of personal data The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in addressing visitors to our website in their native language.
- Duration of storageWPML stores cookies on your end device. You can find information on the storage duration of cookies at: https://wpml.org/documentation/privacy-policy-and-gdpr-compliance
- Objection and removal option You can prevent the collection and processing of your personal data by WPML by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (www.noscript.net) in your browser.
Right of objection & deletion of personal data
You can find information on objection and removal options vis-à-vis WPML at:
5. Use of social media plugins
For data protection reasons, we do not use social media plugins.
Revocation of consent
The user has the option at any time to revoke consent to the processing of personal data given by him in connection with the use of the website without cause.
If the user contacts us by email, they can object to the storage of their personal data at any time by sending an email to firstname.lastname@example.org, where the legal basis for the processing was exclusively the user’s consent. In such a case, the conversation cannot be continued. If, on the basis of the communication that has already taken place, an action has been taken that triggers legally binding consequences for us or the person concerned, or if we are entitled or obliged to archive the data for legal reasons, we are entitled to refuse a request for deletion.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Disclosure to third parties
As a matter of principle, we do not pass on personal data that we collect within the scope of the website to third parties, with the exception of state institutions and courts, insofar as these can order us to provide data with binding effect.
The data is processed exclusively in Switzerland.
Rights of the user
If your personal data is processed, you have the following rights:
Right to information
You can request confirmation from us as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request the following information from us:
- the purposes for which the personal data are processed
- the categories of personal data that are processed
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed
- the envisaged period for which the personal data concerning you will be stored, or, if specific information on this is not possible, the criteria used to determine that period
- the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by us or a right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- all available information about the origin of the data if the personal data is not collected from the data subject
- the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. If this is the case and there is no adequacy decision, we are also obliged to inform you of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
Right to rectification
You have a right to rectification and/or completion vis-à-vis us if the processed personal data concerning you is incorrect or incomplete. We must make the correction without delay as soon as you have informed us of the correct way to record this data.
Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
- if you contest the accuracy of the personal data concerning you for a period enabling us to verify the accuracy of the personal data
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead
- we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or
- if you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
Right to erasure
If the legal conditions are met, you can request us to delete the personal data concerning you immediately and we are then obliged to delete this data immediately. If we have made the personal data concerning you public and we are legally obliged to delete it, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.
Please note that there are also legal grounds on which we are not obliged to comply with a request for erasure.
If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right vis-à-vis us to be informed about these recipients.
Right to data portability
Subject to the conditions set out in the law, the user has the right to receive the personal data concerning him or her, which he or she has provided to us, in a structured, commonly used and machine-readable format and, where appropriate, to transmit those data to another controller without hindrance from us to which the personal data have been provided.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly by us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Right of objection
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
In connection with the use of information society services, you have the option of exercising your right to object by automated means using technical specifications.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes data protection law applicable to us.