top of page

Privacy Policy

Data Protection

Protecting your personal data is important to us. We place great importance on data security and data protection and have therefore implemented comprehensive safeguards to protect your personal data against unauthorised access and misuse. We collect, process and disclose your personal data only in accordance with applicable legal provisions and with your consent.

Our Data Protection Officer is available at any time to answer your questions and provide information.

​

Data Controller

The data controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Silvio Gardoni
Arenae Consulting AG
Freiestrasse 18
CH – 8032 Zurich

Phone: +41 44 247 70 00
Email: info@arenae.ch

Website: www.arenae.ch

General Information

Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Swiss Confederation (Federal Act on Data Protection, FADP), every person has the right to protection of their privacy and to protection against the misuse of their personal data. The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this Privacy Policy.

In cooperation with our hosting providers, we make every effort to protect the databases as effectively as possible against unauthorised access, loss, misuse or falsification.

Please note that data transmission over the Internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

By using this website, you consent to the collection, processing and use of data in accordance with the description set out below. This website can generally be used without registration. In this process, data such as accessed pages or names of retrieved files, date and time are stored on the server for statistical purposes, without this data being directly attributable to your person.

Personal data, in particular names, addresses or email addresses, is collected on a voluntary basis wherever possible. Such data will not be disclosed to third parties without your consent.

Privacy Policy for SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the website operator. You can recognise an encrypted connection by the change in your browser’s address bar from “http://” to “https://” and by the lock symbol in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Privacy Policy for Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

 

This information includes:

  • Browser type and browser version

  • Operating system used

  • Referrer URL

  • Host name of the accessing device

  • Time of the server request

This data cannot be assigned to specific individuals. The data is not merged with other data sources. We reserve the right to review this data retrospectively if we become aware of specific indications of unlawful use.

​

Applicable Legal Bases

In accordance with Article 13 of the GDPR, we inform you of the legal bases for our data processing activities. Unless the legal basis is specified in this Privacy Policy, the following applies:

  • The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR;

  • The legal basis for processing personal data for the performance of our services, the implementation of contractual measures and for responding to enquiries is Article 6(1)(b) GDPR;

  • The legal basis for processing personal data for compliance with legal obligations is Article 6(1)(c) GDPR;

  • The legal basis for processing personal data to safeguard our legitimate interests is Article 6(1)(f) GDPR.

Where the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.

Processing of Personal Data

Personal data means any information relating to an identified or identifiable natural person. A data subject is a person whose personal data is processed. Processing includes any operation performed on personal data, regardless of the means and procedures used, in particular the collection, disclosure, acquisition, deletion, storage, alteration, destruction and use of personal data.

​

We process personal data in accordance with Swiss data protection law. In addition, where and insofar as the EU General Data Protection Regulation (GDPR) is applicable, we process personal data on the basis of the following legal grounds in connection with Article 6(1) GDPR:

  • Consent (Article 6(1)(a) GDPR)

The data subject has given consent to the processing of their personal data for one or more specific purposes.

  • Performance of a Contract and Pre-Contractual Enquiries (Article 6(1)(b) GDPR)

Processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.

  • Legal Obligation (Article 6(1)(c) GDPR)

Processing is necessary for compliance with a legal obligation to which the controller is subject.

Protection of Vital Interests (Article 6(1)(d) GDPR)

Processing is necessary to protect the vital interests of the data subject or of another natural person.

  • Legitimate Interests (Article 6(1)(f) GDPR)

Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

  • Application Process as a Pre-Contractual or Contractual Relationship (Article 9(2)(b) GDPR)

Where special categories of personal data within the meaning of Article 9(1) GDPR (e.g. health data, such as severe disability status or ethnic origin) are requested from applicants during the application process in order for the controller or the data subject to exercise rights or fulfil obligations arising from employment law and social security and social protection law, such data is processed on the basis of Article 9(2)(b) GDPR.

Where processing is necessary to protect the vital interests of applicants or other persons, Article 9(2)(c) GDPR applies. For purposes of preventive health care or occupational medicine, assessment of an employee’s working capacity, medical diagnosis, health or social care or treatment, or the management of health or social care systems and services, processing is based on Article 9(2)(h) GDPR.

Where special categories of personal data are disclosed on the basis of voluntary consent, processing is carried out on the basis of Article 9(2)(a) GDPR.

 

We process personal data only for as long as is necessary for the respective purpose or purposes. Where longer retention periods are required due to legal or other obligations to which we are subject, we restrict processing accordingly.

Rights of Data Subjects

Every data subject has the right to obtain confirmation from the operator of the website as to whether personal data concerning them is being processed. If you wish to exercise this right to confirmation, you may contact the Data Protection Officer at any time.

Copyright and all other rights to content, images, photographs or other files on this website belong exclusively to the operator of this website or to the specifically named rights holders. Prior written consent of the copyright holder must be obtained for the reproduction of any files.

Right of Access

Every data subject affected by the processing of personal data has the right to obtain free information at any time from the operator of this website about the personal data stored about them, as well as a copy of this information.

​

In addition, information may be provided regarding the following, where applicable:

  • the purposes of the processing;

  • the categories of personal data being processed;

  • the recipients or categories of recipients to whom the personal data has been or will be disclosed;

  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

  • the existence of a right to rectification or erasure of personal data concerning the data subject, or restriction of processing by the controller, or a right to object to such processing;

  • the existence of a right to lodge a complaint with a supervisory authority;

  • where the personal data is not collected from the data subject, any available information as to its source.

Furthermore, the data subject has the right to be informed whether personal data has been transferred to a third country or to an international organisation. Where this is the case, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.

​

If you wish to exercise this right of access, you may contact our Data Protection Officer at any time:

​

Silvio Gardoni
Arenae Consulting AG
Freiestrasse 18
CH – 8032 Zurich

Email: info@arenae.ch
Website: www.arenae.ch

Right to Rectification

Every data subject affected by the processing of personal data has the right to request the immediate rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject also has the right to request the completion of incomplete personal data, including by means of a supplementary statement.

If you wish to exercise this right to rectification, you may contact our Data Protection Officer at any time.

Right to Erasure (Right to be Forgotten)

Every data subject affected by the processing of personal data has the right to request from the controller of this website the immediate erasure of personal data concerning them, provided that one of the following reasons applies and insofar as the processing is not necessary:

  • The personal data has been collected or otherwise processed for purposes for which it is no longer necessary;

  • The data subject withdraws consent on which the processing was based and there is no other legal basis for the processing;

  • The data subject objects to the processing for reasons arising from their particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to processing for direct marketing purposes, including related profiling;

  • The personal data has been unlawfully processed;

  • The erasure of personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject;

  • The personal data has been collected in relation to the offer of information society services directly to a child.

If one of the above reasons applies and you wish to request the erasure of personal data stored by the operator of this website, you may contact our Data Protection Officer at any time. The Data Protection Officer of this website will ensure that the erasure request is complied with without undue delay.

Right to Restriction of Processing

Every data subject affected by the processing of personal data has the right to request the restriction of processing from the controller of this website if one of the following conditions is met:

  • The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;

  • The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of its use;

  • The controller no longer needs the personal data for the purposes of the processing, but the data subject requires it for the establishment, exercise or defence of legal claims;

  • The data subject has objected to processing for reasons relating to their particular situation, and it has not yet been determined whether the legitimate grounds of the controller override those of the data subject.

If one of the above conditions applies and you wish to request the restriction of personal data stored by the operator of this website, you may contact our Data Protection Officer at any time. The Data Protection Officer of this website will arrange for the restriction of processing.

Right to Data Portability

Every data subject affected by the processing of personal data has the right to receive the personal data concerning them in a structured, commonly used and machine-readable format. The data subject also has the right, where the legal requirements are met, to have this data transmitted to another controller.

 

Furthermore, the data subject has the right to request that personal data be transmitted directly from one controller to another, where this is technically feasible and provided that this does not adversely affect the rights and freedoms of others.

​

To exercise the right to data portability, you may contact the Data Protection Officer appointed by the operator of this website at any time.

Right to Object

Every data subject affected by the processing of personal data has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them.

In the event of an objection, the operator of this website will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or where the processing serves the establishment, exercise or defence of legal claims.

To exercise the right to object, you may contact the Data Protection Officer of this website directly.

Right to Withdraw Data Protection Consent

Every data subject affected by the processing of personal data has the right to withdraw any consent previously given to the processing of personal data at any time.

If you wish to exercise your right to withdraw consent, you may contact our Data Protection Officer at any time.

Paid Services

For the provision of paid services, we may request additional data, such as payment details, in order to process your order or request. We store this data in our systems until the applicable statutory retention periods have expired.

Privacy Policy for Cookies

This website uses cookies. Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user’s computer. A cookie primarily serves to store information about a user during or after their visit to an online service.

​

The information stored may include, for example, language settings on a website, login status, a shopping cart, or the point at which a video was watched. The term cookies also includes other technologies that perform the same functions as cookies (e.g. when user data is stored using pseudonymous online identifiers, also referred to as “user IDs”).

​

Types of Cookies and Their Functions

The following types of cookies and functions are distinguished:

  • Temporary Cookies (also known as session cookies):
    Temporary cookies are deleted at the latest when a user leaves an online service and closes their browser.

  • Persistent Cookies:
    Persistent cookies remain stored even after the browser is closed. For example, the login status may be saved or preferred content may be displayed directly when the user revisits a website. User interests used for reach measurement or marketing purposes may also be stored in such cookies.

  • First-Party Cookies:
    First-party cookies are set by us.

  • Third-Party Cookies:
    Third-party cookies are primarily used by advertisers (so-called third parties) to process user information.

Privacy Policy for Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller responsible for processing data on this website is located outside the European Economic Area (EEA) or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are referred to below collectively as “Google.”

​

The statistics obtained allow us to improve our website and make it more interesting for you as a user. This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out using a User ID. If you have a Google user account, you can deactivate cross-device analysis of your usage in your account settings under “My Data”and “Personal Data.”

The legal basis for the use of Google Analytics is Article 6(1)(f) GDPR. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. We would like to point out that Google Analytics has been extended on this website by the code “_anonymizeIp();” to ensure anonymised collection of IP addresses. As a result, IP addresses are processed in shortened form, which excludes direct personal identification. Insofar as the data collected about you has a personal reference, this is immediately excluded and the personal data is deleted without delay.

​

Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide further services related to website and internet usage to the website operator.

​

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the United States. You can prevent the storage of cookies by adjusting the settings of your browser software; however, please note that in this case you may not be able to use all functions of this website to their full extent.

​

You can also prevent the collection of data generated by cookies and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link:
Google Analytics Opt-out

In addition, you can prevent the use of Google Analytics by clicking on the following link:
Google Analytics Opt-out

This will set an opt-out cookie on your device that prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your device, these opt-out cookies will also be deleted. This means that you will need to set the opt-out cookies again if you wish to continue preventing this form of data collection. Opt-out cookies are set per browser and per device and must therefore be activated separately for each browser, computer or other device.

Privacy Policy for the Contact Form

If you send us enquiries via the contact form, the information you provide in the enquiry form, including the contact details you enter there, will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. We do not pass on this data without your consent.

Privacy Policy for Newsletter Data

If you would like to subscribe to the newsletter offered on this website, we require an email address as well as information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No additional data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

You may withdraw your consent to the storage of the data, the email address and its use for sending the newsletter at any time, for example via the “unsubscribe” link included in the newsletter.

Copyright

Anyone who commits a copyright infringement without the consent of the respective rights holder may be subject to criminal prosecution and may also be liable for damages.

General Disclaimer

All information provided on this website has been carefully reviewed. We strive to ensure that our content is up to date, accurate and complete. Nevertheless, errors cannot be entirely ruled out. We therefore do not guarantee the completeness, accuracy or timeliness of the information provided, including journalistic and editorial content.

​

Claims for liability arising from material or immaterial damage caused by the use of the information provided are excluded, unless there is proven intentional or grossly negligent misconduct.

​

The publisher may, at its own discretion and without prior notice, change or delete content and is not obliged to update the content of this website. Use of and access to this website is at the user’s own risk. The publisher, its clients or partners shall not be liable for any damages, including direct, indirect, incidental, foreseeable or consequential damages, allegedly arising from visiting this website.

​

The publisher also assumes no responsibility or liability for the content and availability of third-party websites that can be accessed via external links on this website. The operators of the linked websites are solely responsible for their content. The publisher expressly distances itself from all third-party content that may be unlawful, legally objectionable or contrary to public decency.

Changes

We may update this Privacy Policy at any time without prior notice. The version currently published on our website shall apply. Where this Privacy Policy forms part of an agreement with you, we will inform you of any updates by email or by other appropriate means.

Questions to the Data Protection Officer

If you have any questions regarding data protection, please send us an email or contact the person responsible for data protection within our organisation, as listed at the beginning of this Privacy Policy.

Zurich, 01 January 2024

bottom of page