Privacy Policy

1. Data Controller

Viola Schweizer
Dürener Straße 164
50931 Cologne
Germany

Email: mail@viola-schweizer.com
Phone: +49 162 583 581 0

2. Overview of Data Processing

The following overview summarises the types of data processed and the purposes of their processing and refers to the data subjects concerned.

Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. email, phone numbers), content data (e.g. form entries), usage data (e.g. pages visited, access times), meta/communication data (e.g. device information, IP addresses).

Categories of data subjects: website users, communication partners.

3. Legal Bases

Below you will find an overview of the legal bases of the GDPR on which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile.

Consent (Art. 6(1)(a) GDPR): The data subject has given consent to the processing of their personal data for one or more specific purposes.

Performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract to which the data subject is party, or for the implementation of pre-contractual measures taken at the request of the data subject.

Legitimate interests (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

4. Security Measures

We take appropriate technical and organisational measures in accordance with the legal requirements, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock icon in your browser bar.

5. Provision of the Online Service and Web Hosting

We process users' data in order to provide them with our online services. For this purpose, we process the user's IP address, which is necessary to deliver the content and functions of our online services to the user's browser or device.

Hosting: This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Vercel processes personal data on our behalf as a data processor. Processing takes place on servers in the EU and the USA. For transfers to the USA, appropriate safeguards pursuant to Art. 46 GDPR apply (EU-US Data Privacy Framework). For more information, please see Vercel's privacy policy: https://vercel.com/legal/privacy-policy (öffnet in neuem Tab)

Server log files: Each time our website is accessed, so-called server log files are automatically collected. These include the IP address, browser type and version, operating system used, referrer URL, host name of the accessing device, and the time of the server request. This data is not merged with other data sources and is deleted after no more than 30 days.

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR). Our legitimate interest lies in providing and optimising our online service and ensuring its security.

6. Web Analytics

Vercel Web Analytics: We use Vercel Web Analytics, a privacy-friendly analytics service provided by Vercel Inc. This service does not set cookies and does not store personal data in the browser. Anonymised usage data is collected, such as page views, dwell time and referring pages. Individual users cannot be identified. For more information: https://vercel.com/docs/analytics (öffnet in neuem Tab)

Vercel Speed Insights: To monitor and improve loading times, we use Vercel Speed Insights. This service measures anonymised performance metrics (Core Web Vitals) such as loading time, interactivity and visual stability. No cookies are set and no personal data is stored. For more information: https://vercel.com/docs/speed-insights (öffnet in neuem Tab)

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR). Our legitimate interest lies in the analysis and optimisation of our online service.

7. Contact

When contacting us (e.g. by email or telephone), the data provided by the enquiring person is processed insofar as this is necessary to answer the contact enquiry and any requested measures.

Data processed: name, email address, telephone number and the content of the message.

Purpose: processing and answering contact enquiries, maintaining business relationships.

Legal basis: Performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR).

Deletion: Contact enquiries are deleted as soon as they are no longer required. We review the necessity every two years. Statutory archiving obligations remain unaffected.

8. Map Services

Google Maps: Our website may integrate the mapping service Google Maps (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded after your explicit consent. In doing so, data is transmitted to Google, in particular your IP address and location. For data transfers to the USA, appropriate safeguards pursuant to Art. 46 GDPR apply (EU-US Data Privacy Framework).

Legal basis: Consent (Art. 6(1)(a) GDPR). Consent can be revoked at any time.

For more information: https://policies.google.com/privacy (öffnet in neuem Tab)

9. Cookies and Local Storage Technologies

This website does not use tracking cookies. We exclusively use the local storage function of your browser (localStorage) to save your consent preferences (e.g. cookie banner settings). This data is not transmitted to any server and serves solely the functionality of the website.

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) or consent (Art. 6(1)(a) GDPR), insofar as the storage is based on consent.

10. Rights of Data Subjects

As a data subject, you are entitled to various rights under the GDPR:

Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed and to obtain information about such data as well as further information and a copy of the data.

Right to rectification (Art. 16 GDPR): You have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.

Right to erasure (Art. 17 GDPR): You have the right to request that data concerning you be erased without undue delay, or alternatively to request restriction of processing pursuant to Art. 18 GDPR.

Right to data portability (Art. 20 GDPR): You have the right to receive data concerning you that you have provided to us in a structured, commonly used and machine-readable format.

Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw consent given at any time with effect for the future.

11. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

Competent supervisory authority:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2–4
40213 Düsseldorf
https://www.ldi.nrw.de (öffnet in neuem Tab)

12. Changes to This Privacy Policy

We reserve the right to amend this privacy policy to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.