Privacy
In the course of using this website, your personal data will be processed by us as the data controller and stored for the time necessary to fulfil the specified purposes and legal obligations. In the following, we inform you about what data is involved, how it is processed and what rights you have in this regard.
According to Art. 4 No. 1 of the General Data Protection Regulation (GDPR), personal data is any information relating to an identified or identifiable natural person.
I. General
In this privacy policy, we inform you comprehensively about our handling of your personal data as our internet user, webshop user and newsletter subscriber. We explain your rights in connection with the processing of personal data in our company. The processing of personal data of our employees and customers outside of our webshop is regulated exclusively within the framework of our employee or mandate contracts.
A. Scope of application
This data protection declaration applies to all processing activities in connection with personal data:
visits to our website
orders in our webshop
Newsletter
Applications
Depending on the data processing, European data protection law (Regulation (EU) 2016/679 (General Data Protection Regulation)) may also or exclusively apply in addition to the applicable Swiss law (Federal Data Protection Act (FADP) of 19 June 1992, SR 235.1).
B. Person responsible
The Vagabond Company GmbH
c/o Kemmatten 3
6330 Lake Hünenberg
Tel. 079 101 71 25
C. Data protection advisor
Carmen Berjon
The Vagabond Company GmbH
c/o Kemmatten 3
6330 Lake Hünenberg
carmen.berjon@berjon.ch
D. Contact details of the Swiss supervisory authority
Federal Data Protection and Information Commissioner
Feldeggweg 1
CH - 3003 Bern
Tel. +41 58 462 43 95
II. Processing Activities
Depending on your relationship with us, we process different personal data about you for different purposes and on different legal bases.
A. Visiting our website
DATA PROCESSING
When you visit our website, the browser used on your terminal device automatically sends information to our website server. This information is temporarily stored in a so-called log file.
PERSONAL DATA
The following information is collected without your intervention and stored until automated deletion:
IP address of the requesting computer
Date and time of access
Name and URL of the file accessed
Website from which access was made (referrer URL)
Browser type and browser version as well as other information transmitted by the browser, such as the operating system of your computer, the name of your access provider, your geographical origin, language setting, etc.
PURPOSE
The said data are processed for the following purposes:
Ensuring a smooth connection of the website
Ensuring a comfortable use of our website
Evaluation of system security and stability
LEGAL BASIS
The legal basis for this data processing lies in our private interest pursuant to Art. 13 para. 1 DSG or Art. 6 para. 1 p. 1 lit. f DSGVO. This data is collected and evaluated for statistical purposes and to improve the quality of the website. Under no circumstances do we use the collected data to draw conclusions about your person or to create user profiles with the help of this data.
NECESSITY
This information is necessary for the functioning of the websites.
RETENTION PERIOD
After your session has expired, the session cookies are deleted, but we retain the logg in accordance with legal requirements.
B. Contact form
DATA PROCESSING
For questions of any kind, we offer you the possibility to contact us via a form provided on the website.
PERSONAL DATA
The following information must be provided:
valid e-mail address
First and last name
Company name (optional)
Address (optional)
Telephone number (optional)
PURPOSE
The said data will be processed for the following purposes:
Answering your request
Contacting
LEGAL BASIS
This data processing is carried out on the basis of contractual or pre-contractual measures in accordance with Art. 13 para. 2 lit. a DSG or Art. 6 para. 1 p. 1 lit. b DSGVO.
C. Visiting our webshop
DATA PROCESSING
You have the possibility to order various products on our webshop.
PERSONAL DATA
You must provide the following information:
Valid e-mail address
First and last name
Company name (optional)
Address
Telephone number (optional)
Credit card information such as customer or supplier identification number.
We use the Wix e-commerce system to design and place our products in our webshop.
PURPOSE
The said data is processed for the following purposes:
Processing of the purchase
Creation of a receipt
Contacting
Lead generation for marketing purposes
LEGAL BASIS
This data processing is carried out on the basis of contractual or pre-contractual measures in accordance with Art. 13 para. 2 lit. a DSG or Art. 6 para. 1 p. 1 lit. b DSGVO.
D. Cookies
1. general
DATA PROCESSING
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our site. A cookie does not in all cases mean that we can identify you.
PERSONAL DATA
A cookie does not in all cases mean that we can identify you.
PURPOSE
The purpose of using cookies is to statistically record the use of our website and to evaluate it for the purpose of optimisation and user-friendliness.
LEGAL BASIS
We process technically necessary cookies on the basis of our overriding private interest. We only process technically unnecessary cookies if we have voluntarily given your consent in accordance with Art. 13 para. 1 DSG or Art. 6 para. 1 p. 1 lit. a DSGVO.
NEED
Cookies are automatically accepted in the default setting of most Internet browsers. If you do not wish to store cookies from our websites on your device, you can configure your browser settings so that you receive a warning before certain cookies are stored.
Please note that partial or complete deactivation of cookies may mean that you cannot use all the functions of our websites.
RETENTION PERIOD
Cookies have different retention periods. If they are third-party cookies, we have no influence on the retention period. 2.
2. technically necessary cookies
DATA PROCESSING
In order to store your personal user settings regarding cookies and language selection on our website, we use a logging cookie.
PERSONAL DATA
No personal data is processed. Only the current status of your selected cookie and language setting is stored.
PURPOSE
Processing is done to re-identify your personal cookie settings on our website.
LEGAL BASIS
The processing is carried out on the basis of our overriding interest pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO and Art. 13 para. 1 DSG.
NECESSITY
This cookie is necessary for the functionality of the website.
RETENTION PERIOD
The cookie is automatically deleted from your system after one month.
3. IFrame from Google maps
DATA PROCESSING
We use an IFrame from Google maps from Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
PERSONAL DATA
By clicking on the iframe, the user is redirected to the provider's website. Clicking on the Google Maps iframe takes you to the Google Maps websites. We have no influence on the processing of personal data on the websites of Google Inc.
For more information on the data collected, please refer to the privacy policy of Google Inc. at https://policies.google.com/privacy?hl=en-US.
PURPOSE
An IFrame serves to structure our website and is used to place other web content on our website. By clicking on the IFrame, the user is redirected to the provider's website. We have no influence on the processing of personal data on third-party websites.
LEGAL BASIS
Data processing in connection with plugins and IFrames is carried out on the basis of our legitimate interests pursuant to Art. 13 para. 1 DSG or Art. 6 para. 1 p. 1 lit. f DSGVO. They prevail because otherwise we would not be able to provide an interactive map on our website.
NECESSITY
The data mentioned are not necessary within the framework of the website functionality.
E. Newsletter
DATA PROCESSING
You have the possibility to subscribe to our newsletter.
For your consent to our newsletter dispatch, we use the so-called double opt-in procedure, i.e. we will only send you a newsletter by e-mail if you have expressly confirmed this to us beforehand. You will receive a notification e-mail asking you to confirm the link contained in the e-mail. You can unsubscribe from the newsletter at any time.
PERSONAL DATA
When you register for the newsletter, we collect the following data from you:
First and last name (optional)
We then process data that can be used to determine whether a newsletter message has been opened and which links, if any, have been clicked on. In addition, technical information is collected, for example:
Time of retrieval
IP address
Browser type
Operating system
PURPOSE
The said data are processed for the following purpose:
Dispatch of the newsletter
Analysis of the newsletter campaign
The analysis of the newsletter campaign enables us to determine whether a newsletter message was opened and which links were clicked on. This information is used exclusively for the statistical evaluation of newsletter campaigns.
LEGAL BASIS
We only store your personal data for the purpose of sending the newsletter if you have voluntarily given us your consent to do so in accordance with Art. 13 Para. 1 DSG or Art. 6 Para. 1 S. 1 lit. a DSGVO.
NECESSITY
The processing is necessary for the dispatch of our newsletter and the statistical evaluation.
STORAGE PERIOD
The data stored for the purpose of the newsletter subscription will be kept by us until you unsubscribe from the newsletter. Once you have unsubscribed from the newsletter, it will be deleted from our servers. Data stored by us for other purposes (e.g. e-mail addresses for events or course registrations, etc.) remain unaffected by this.
F. Application
DATA PROCESSING
You have the option of applying to us by e-mail. In these cases, we process all the data that you send us with your application file.
If you are not hired directly and another applicant declines, we will contact you again and keep your documents for this purpose.
PERSONAL DATA
Depending on the data actually submitted, these are usually:
Contact details of the applicant and references
Application letter
Application photo or video
Certificates of achievement
curriculum vitae
Criminal record extract (only where explicitly requested)
AHV number
PURPOSE
We process this data for the purpose of checking your suitability for the position applied for or for the purpose of handling the application process.
LEGAL BASIS
This processing operation is necessary to carry out pre-contractual measures on the basis of your request (Art. 13 para. 2 lit. a DSG or Art. 6 para. 1 lit. b DSGVO).
NECESSITY
The aforementioned data is not necessary within the framework of the website functionality.
RETENTION PERIOD
Your data will be automatically deleted no later than 6 months after notification of rejection. If you expressly agree to storage in our database of interested parties, we will delete the data later at an agreed time.
III. transfer of data to third parties
DATA PROCESSING
Your personal data will not be passed on to third parties for purposes other than those listed or to contractors other than those listed and their subcontractors.
Third parties are technology providers for the optimal operation of the websites and social media presences as well as for the provision of the services listed above.
IV. Cross-border disclosure to third countries without an adequate level of data protection
DATA PROCESSING
No data is disclosed to third countries without an adequate level of data protection or only under the contractual obligation to maintain an adequate level of data protection (EU standard clauses).
Personal data is only transferred to third countries if the data protection requirements of Art. 6 DSG or Art. 44 ff. DPA are met.
A third country is a country outside of Switzerland or the European Economic Area (EEA) in which Swiss data protection law or the European GDPR is not directly applicable. A third country is considered unsafe if, according to the FDPIC or the EU Commission, the country does not have an adequate level of data protection.
With the ECJ ruling of 16 July 2020 (C-311/18), the adequacy decision for the USA was declared invalid. The FDPIC has also withdrawn the adequacy from the USA. The USA is thus a so-called unsafe third country.
When personal data is transferred to the USA, there is a risk that US authorities can gain access to the personal data. Swiss citizens have no effective legal protection against such access in the USA.
In this data protection information, we inform you when and how we transfer personal data to the USA or other insecure third countries.
V. Data security
DATA PROCESSING
We take appropriate measures to ensure that your personal data cannot be accessed or stolen by unauthorised third parties. In particular, through appropriate technical (e.g. firewall, password protection, SSL encryption, etc.) and organisational (e.g. restriction of authorised persons, training of authorised persons, etc.) measures, we ensure that only authorised persons have access to this data. Our data processing and security measures are continuously improved in line with technological developments.
PERSONAL DATA
Personal data is any information relating to an identified or identifiable natural person, including name, address, telephone number or email or IP address.
PURPOSE
We use SSL encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
VI. retention period
DATA PROCESSING
We will retain your personal data for as long as we consider necessary or appropriate to comply with applicable laws or for as long as it is necessary for the purposes for which it was collected. We will delete your personal data as soon as it is no longer needed and in any case after the maximum retention period of five or ten years as required by law. Data that is no longer necessary and for which there is no legal obligation to retain it will be destroyed once the purpose and justification no longer apply.
PERSONAL DATA
In detail, we keep your data for the following period:
We retain data that we process by law for the statutory retention period, for example if required by labour law, social security law, tax law or the Business Records Ordinance;
Data that we need for the performance of a contract, we keep at least for the duration of the contract and for a maximum of 10 years thereafter, unless we need the data for the assertion of our rights;
We retain data that we process to protect our legitimate interests for a maximum of ten years after the end of the contractual relationship, unless we need the data to assert our rights;
If no employment is found, your application documents will be deleted, destroyed or returned to you after six months.
VII. Your rights
DATA PROCESSING
As a potentially affected person, you can assert various claims against us in accordance with the applicable national and international law.
If necessary, we will process your personal data again in order to fulfil these claims.
PERSONAL DATA
Depending on the applicable law, data subjects may exercise the following rights:
To request information about your personal data processed by us. In particular, information pursuant to Art. 15 DPA or Art. 8 DPA may include information:
about the purposes of processing
the category of personal data
the categories of recipients to whom your data have been or will be disclosed
the planned storage period
the existence of a right to rectification, erasure, restriction of processing or objection
the existence of a right of appeal
the origin of your data, if it has not been collected by us
as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details.
demand the correction of incorrect or incomplete personal data stored by us without delay (Art. 16 DSGVO, Art. 5 para. 2 DSG)
to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its deletion and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO (Art. 18 DSGVO, Art. 15 DSG).
To receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller (Art. 20 DSGVO).
request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims (Art. 17 DSGVO, Art. 15 DSG).
to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future (Art. 7 (3) DSGVO).
object to the processing, provided that your personal data are processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f DSGVO (Art. 21 DSGVO) and insofar as there are grounds for doing so which arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
complain to a supervisory authority (cf. above) (Art. 77 DSGVO).
VIII. Up-to-dateness and amendment of this data protection declaration
We reserve the right to amend this data protection declaration at any time or to adapt it to new processing methods.