Privacy Policy

 

In this Privacy Policy, we provide information about the personal data we process in connection with our activities and tasks, including our website https://txpmusic.ch. In particular, we inform about the purposes, methods and locations of the data processing we perform. We also inform about the rights of the people whose data we process.

For individual or additional activities and tasks, additional privacy notices and other legal documents may apply, such as the General Terms and Conditions (GTC), Terms of Use, or Conditions of Participation.

We are subject to Swiss data protection law and any applicable foreign data protection laws, in particular that of the European Union (EU) through the General Data Protection Regulation (GDPR). The European Commission recognizes that Swiss data protection law ensures adequate data protection.

1. Contact addresses.

Personal data controller:

Simona ……………
Via …………………
CH – …………………..

Email: info@txpmusic.ch

In specific cases we will indicate whether there are other personal data controllers.

2. Definitions and legal bases

2.1 Definitions.

Personal data is any information about a specific or identifiable natural person. A data subject is a person about whom we process personal data.

Processing includes any processing of personal data, regardless of the means and procedures used, such as querying, comparing, adapting, storing, retrieving, disclosing, obtaining, recording, collecting, deleting, disclosing, organizing, storing, modifying, distributing, linking, destroying, and using personal data.

The European Economic Area (EEA) includes the member states of the European Union (EU), as well as the Principality of Liechtenstein, Iceland and Norway. The General Data Protection Regulation (GDPR) refers to the processing of personal data as the processing of personal data.

2.2 Legal Basis

We process personal data in accordance with the Swiss Data Protection Act, in particular the Federal Data Protection Act (Datenschutzgesetz, DSG) and the Data Protection Regulation (Datenschutzverordnung, DSV).

We process – to the extent that the General Data Protection Regulation (GDPR) is applicable – personal data on the basis of at least one of the following legal bases:

Article 6(1)(b) GDPR for the necessary processing of personal data for the performance of a contract with the data subject and for the implementation of pre-contractual measures.
Article 6(1)(f) GDPR for the necessary processing of personal data to safeguard our own or third parties’ legitimate interests, provided that the fundamental rights and freedoms and interests of the data subject are not overridden. Legitimate interests include, in particular, our interest in carrying out our activities and tasks in a permanent, user-friendly, secure, and reliable manner, as well as in being able to communicate them, to ensure the security of information, to protect ourselves from misuse, to enforce our legal rights, and to comply with Swiss law.
Article 6(1)(c) GDPR for processing necessary to fulfill a legal obligation to which we are subject under any applicable law of the European Economic Area (EEA) member states.
Article 6(1)(e) GDPR for processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Article 6(1)(a) GDPR for the processing of personal data with the consent of the data subject.
Article 6(1)(d) GDPR for the necessary processing of personal data to protect the vital interests of the data subject or another natural person.

3. Type, ambit and purpose

We process personal data necessary to carry out our activities and tasks in a permanent, user-friendly, secure and reliable manner. Such personal data may include categories of inventory and contact data, browser and device data, content data, metadata or contextual data, usage data, location data, sales data, as well as contractual and payment data.

We process personal data for the duration necessary for the respective purposes or as required by law. Personal data that are no longer necessary for processing will be anonymized or deleted.

Personal data may be processed by third parties. We may also process or transmit personal data together with third parties. These third parties are mainly specialized providers we use. We also ensure data protection with these third parties.

We generally process personal data only with the consent of the data subjects. If and to the extent that processing is permitted by other legal grounds, we may waive the need to obtain consent. We may, for example, process personal data without consent to fulfill a contract, to fulfill legal obligations, or to protect overriding interests.

In this context, we process, in particular, information that a data subject voluntarily provides to us when they contact us-for example, by mail, e-mail, instant messaging, contact form, social media, or telephone-or when they register for a user account. We may store such information in an address book, customer relationship management system (CRM system) or similar tools. If we receive data from other people, the people who transmit it are obligated to ensure the protection of these people’s data and to ensure the accuracy of this personal data.

In addition, we process personal data that we receive from third parties, obtain from publicly accessible sources, or collect in the course of our activities and tasks, to the extent that such processing is permitted for legal reasons.

4. Applications

We process applicants’ personal data to the extent necessary to assess suitability for an employment relationship or for the subsequent execution of an employment contract. The necessary personal data arise in particular from the information requested, for example in the context of a job advertisement. We also process personal data that applicants voluntarily provide or post, particularly in the context of cover letters, resumes, other application documents, and online profiles.

We process-if and to the extent that the General Data Protection Regulation (GDPR) is applicable-personal data of candidates pursuant to Article 9(2)(b) of the GDPR.

5. Personal data abroad

We generally process personal data in Switzerland and the European Economic Area (EEA). However, we may also export or transmit personal data to other countries, particularly to process it or have it processed in those countries.

We may export personal data to all countries and territories on Earth and in the Universe, provided that local law ensures adequate data protection in accordance with the decision of the Swiss Federal Council and – if and to the extent that the GDPR is applicable – in accordance with the European Commission’s decision on adequate data protection.

We may transfer personal data to countries whose laws do not guarantee adequate data protection, provided that data protection is ensured for other reasons, in particular on the basis of standard data protection clauses or other appropriate safeguards. In exceptional cases, we may export personal data to countries without adequate or suitable data protection if special data protection requirements are met, such as the explicit consent of the data subjects or a direct link to the conclusion or performance of a contract. Upon request, we will be happy to provide data subjects with information about any guarantees or copies thereof.

6. Rights of data subjects

6.1 Data protection rights

We guarantee data subjects all their rights under the Data Protection Act. In particular, data subjects have the following rights:

• Information: Data subjects can request information about whether we process their personal data and, if so, what personal data it is. Data subjects also receive the information they need to assert their data protection rights and ensure transparency. These include the personal data processed as such, but also information about the purpose of the processing, the duration of storage, whether the data are disclosed or exported to other countries, and the origin of the personal data.We are obliged to identify data subjects who request information or exercise other rights with appropriate measures within the legally permitted framework. Data subjects are required to cooperate.
• Correction and Limitation: Data subjects may correct inaccurate personal data, complete incomplete personal data, and limit the processing of their data.
• Deletion and objection: Data subjects can request the deletion of personal data (“right to be forgotten”) and object to the processing of their data in the future.
• Disclosure and portability of data: Data subjects may request disclosure of personal data or transfer of their data to another data controller.

We may defer, limit or refuse the exercise of data subjects’ rights to the extent permitted by law. We may inform data subjects of the conditions that must be met for the exercise of their data protection rights. For example, we may refuse to provide information by referring to trade secrets or the protection of others. We may also refuse to delete personal data by referring to legal retention obligations.

Exceptionally, we may provide for costs for exercising these rights. We will inform data subjects in advance of any potential costs.

We are obliged to identify data subjects who request information or exercise other rights with appropriate measures within the legally permitted framework. Data subjects are required to cooperate.

6.2 Right to file a complaint

Data subjects have the right to assert their data protection rights in court or file a complaint with a competent data protection supervisory authority.

The data protection supervisory authority for private controllers and federal agencies in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

Data subjects have the right, if and to the extent that the General Data Protection Regulation (GDPR) is applicable, to file a complaint with a competent European data protection supervisory authority.

7. Data Security

We implement appropriate technical and organizational measures to ensure data security according to risk. However, we cannot guarantee absolute data security.

Access to our website is via transport encryption (SSL / TLS, specifically with Hypertext Transfer Protocol Secure, abbreviated as HTTPS). Most browsers indicate transport encryption with a padlock in the address bar.

Our digital communication is subject-as is generally the case with all digital communication-to mass surveillance without cause and without suspicion, as well as other surveillance by security authorities in Switzerland, the rest of Europe, the United States of America (USA) and other countries. We cannot directly influence the corresponding processing of personal data by intelligence agencies, law enforcement and other security authorities.

8. Use of the website

8.1 Cookies

We may use cookies. With cookies – both our own cookies (first-party cookies) and those of third parties whose services we use (third-party cookies) – data is stored in your browser. Such stored data is not necessarily limited to traditional text cookies.

Cookies can be stored in the browser temporarily as “session cookies” or for a specific period as so-called permanent cookies. “Session cookies” are automatically deleted when the browser is closed. Permanent cookies have a specific storage duration. Cookies allow, in particular, to recognize the browser on the next visit to our website and thus, for example, to measure the reach of our website. However, permanent cookies can also be used for online marketing.

Cookies can be disabled or deleted at any time in the browser settings, in whole or in part. Without cookies, our website may not be fully available. We require – at least if and to the extent necessary – explicit consent for the use of cookies.

When cookies are used for measuring success and reach or for advertising, a general objection (“opt-out”) is possible for many services through AdChoices (Digital Advertising Alliance of Canada), the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

8.2 Server log files

For each access to our web site, we may record the following information, if transmitted by your browser to our server infrastructure or if determined by our web server: date and time, including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system, including user interface and version, browser, including language and version, individual subpage of our web site visited, including volume of data transferred, last web site visited in the same browser window (referer or referrer).

This information, which may also constitute personal data, is stored in server log files. The information is necessary to provide our website in a permanent, user-friendly and reliable manner, as well as to ensure data security, especially the protection of personal data – including by or with the help of third parties.

8.3 Tracking pixels

We may use tracking pixels on our website. Tracking pixels are also called web beacons. With tracking pixels – including third-party tracking pixels whose services we use – small, usually invisible images are automatically retrieved when you visit our website. With tracking pixels, the same information contained in server log files can be collected.

9. Notifications and messages

We send notifications and messages via e-mail and through other communication channels such as instant messaging or SMS.

9.1 Measuring success and reach

Notifications and messages may contain web links or tracking pixels that record whether an individual message was opened and which web links were clicked. Such web links and tracking pixels may also record the use of notifications and messages at a personal level. We use this statistical recording of usage to measure success and reach, to send notifications and messages in an effective, easy-to-use, and permanent, secure, and reliable manner, based on the needs and reading habits of recipients.

9.2 Consent and rejection

In principle, you must expressly consent to the use of your e-mail address and other contact addresses, unless the use is permitted for other legal reasons. For any possible consent, we use, if possible, the “double opt-in” procedure, i.e., you receive an e-mail with a web link that you must click to confirm, in order to prevent abuse by unauthorized third parties. For testing and security purposes, we may record such consents, including Internet Protocol (IP) address, date and time.

In principle, you can object at any time to receiving notifications and messages such as newsletters. With such objection, you can simultaneously object to statistical recording of usage for measuring success and reach. Notifications and messages necessary in connection with our activities and tasks remain confidential.

10. Social Media

We have a presence on social media and other online platforms to communicate with data subjects and provide information about our activities and operations. In connection with these platforms, personal data may be processed outside Switzerland and the European Economic Area (EEA).

The general terms and conditions (GTC) and terms of use, as well as the privacy policies and other provisions of the individual operators of these platforms also apply. These provisions directly inform data subjects of their rights vis-à-vis the respective platform, including the right to access information.

11. Third-party services

We use specialized third-party services to carry out our activities and operations in a permanent, user-friendly, secure and reliable manner. With such services we may incorporate features and content into our website. As part of such integration, the services used acquire, at least temporarily, the Internet Protocol (IP) addresses of users for technically compelling reasons.

For necessary technical, statistical and security purposes, the third parties whose services we use may process data in connection with our activities and operations in an aggregated, anonymized or pseudonymized manner. This data may include performance or usage data to offer the respective service.

Specifically, we use:

Google Services: Providers: Google LLC (USA) / Google Ireland Limited (Ireland) for users in the European Economic Area (EEA) and Switzerland; General Privacy Information: “Privacy and Security Principles,” Privacy Policy, “Google is committed to complying with applicable privacy laws,” “Privacy Guide in Google Products,” “How we use data from the websites or apps where our services are used,” “Types of Cookies and Other Technologies Used by Google,” “Personalized Advertising.”
Microsoft Services: Providers: Microsoft Corporation (USA) / Microsoft Ireland Operations Limited (Ireland) for users in the European Economic Area (EEA), UK and Switzerland; General Privacy Information: “Privacy at Microsoft,” “Privacy and Security (Trust Center),” Privacy Policy, Privacy Dashboard (Data and Privacy Settings).

12. Evaluation of the result and scope

We seek to determine how our online offerings are being used. In this context, we can measure the success and reach of our activities and initiatives, as well as the impact of third-party links on our website. For example, we may also test and compare the usage of different parts or versions of our online offering (“A/B Test” method). Based on the results of measuring success and reach, we may correct errors, strengthen popular content, or make improvements to our online offering.

For the measurement of success and reach, in most cases, the Internet Protocol (IP) addresses of individual users are stored. In this case, IP addresses are generally shortened (“IP Masking”), following the principle of data minimization.

Cookies can be used to measure success and reach, and user profiles can be created. The user profiles created may include, for example, individual pages visited or content viewed on our website, information about screen size or browser window size, and, at least approximately, location. Generally, the user profiles created are strictly pseudonymized and are not used to identify individual users. Some third-party services where users are logged in can potentially link the use of our online offering to the user’s account or profile at that service.

Specifically we use:

Google Analytics: Measuring Success and Reach; Provider: Google; Google Analytics-specific information: Measuring across different browsers and devices (Cross-Device Tracking) and with pseudonymized Internet Protocol (IP) addresses, which are transmitted to Google in the U.S. only exceptionally in full form, Privacy Policy, Browser Add-on for disabling Google Analytics.

13. Final dispositions

We created this privacy policy using Datenschutzpartner’s Privacy Policy Generator. Please note: This privacy policy is an automatic translation from German.

We may modify and supplement this privacy policy at any time. We will inform of such changes and additions in an appropriate form, in particular by posting the current privacy policy on our website.