We are pleased about your visit to our website layer.swiss and your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is very important to us.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the legal provisions of the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR). The following privacy policy serves to fulfill the information obligations arising from the FADP and the GDPR. These can be found, for example, in Articles 19 et seq. of the FADP and Articles 13 et seq. of the GDPR.

Owner or person responsible

The controller within the meaning of Article 5(j) of the GDPR or Article 4(7) of the GDPR is the person who, alone or jointly with others, decides on the purposes and means of processing personal data. The controller pursuant to Article 4(7) of the GDPR is also the recipient of the personal data within the meaning of Article 4(9) of the GDPR. Any third-party recipients will be identified separately.

With regard to our website, the owner or person responsible is:

datahub gmbh
Sentimattstrasse 6
6003 Lucerne
Switzerland
E-Mail: contact@layer.swiss
Tel.: +41 78 715 42 08

Contact details of the data controller (DSG) or the data protection officer (GDPR)

We have appointed a data protection advisor in accordance with Article 10 of the German Federal Data Protection Act (BDSG). This advisor also meets the requirements of a data protection officer pursuant to Article 37 of the GDPR.

You can reach this person using the following contact details:

Tina H.
datahub gmbh
Sentimattstrasse 6
6003 Lucerne
Switzerland
Email: tina@layer.swiss

Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the accessing device (e.g., computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Hostname of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Notification of whether the access was successful;
(9) Amount of data transferred

This data is stored in our system's log files. This data is not stored together with the personal data of any specific user, so individual website visitors cannot be identified.

Legal basis for the processing of personal data

The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest).

Purpose of data processing

The temporary (automated) storage of data is necessary for the operation of a website visit to enable the website to be delivered. The storage and processing of personal data also serves to maintain the compatibility of our website for as many visitors as possible and to combat misuse and resolve malfunctions. For this purpose, it is necessary to log the technical data of the requesting computer in order to react as quickly as possible to display errors, attacks on our IT systems, and/or malfunctions of our website. Furthermore, the data helps us to optimize the website and to generally ensure the security of our IT systems.

Storage duration

The aforementioned technical data will be deleted as soon as it is no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Right to restrict processing, object to processing, rectify processing and erase data

You can request the restriction of processing pursuant to Article 18 GDPR or object to processing pursuant to Article 21 GDPR at any time, as well as request the rectification or erasure of data pursuant to Articles 16 and 17 GDPR. You can find information about your rights and how to exercise them in the section below this privacy policy.

Special features of the website

Our website offers various features that involve the collection, processing, and storage of your personal data. Below, we explain what happens to this data:

Contact form(s)

• What personal data is collected and to what extent is it processed?

  The data you entered into our contact forms, which you entered into the input mask of the contact form.

• Legal basis for the processing of personal data

  The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB) as well as Art. 6 para. 1 lit. a GDPR (consent by clear affirmative action or behavior).

• Purpose of data processing

  The data collected via our contact form(s) will only be used to process the specific contact request submitted through the form. Please note that we may also send you emails to the address you provided to fulfill your request. This is to confirm that your request has been correctly forwarded to us. However, sending this confirmation email is not mandatory and is for your information only.

• Storage duration

  After your request has been processed, the collected data will be deleted immediately, unless statutory retention periods apply.

• Right to restrict processing, object to processing, rectify processing and erase data

  You can request the restriction of processing pursuant to Article 18 GDPR or object to processing pursuant to Article 21 GDPR at any time, as well as request the rectification or erasure of data pursuant to Articles 16 and 17 GDPR. You can find information about your rights and how to exercise them in the section below this privacy policy.

• Necessity of providing personal data

  The use of the contact forms is voluntary. You are not obligated to contact us via the contact form; you can also use the other contact options listed on our website. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the required information on the contact form, you will either be unable to submit the request or we will be unable to process your request due to incomplete information.

Newsletter registration form

• What personal data is collected and to what extent is it processed?

  By subscribing to the newsletter on our website, we receive the email address you entered in the registration field and, if applicable, further contact details, provided you give them to us via the newsletter registration form.

• Legal basis for the processing of personal data

  The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB) as well as Art. 6 para. 1 lit. a GDPR (consent by clear affirmative action or behavior).

• Purpose of data processing

  The data collected in our newsletter registration form will be used exclusively for sending our newsletter, in which we inform you about all our services and news. After registration, we will send you a confirmation email containing a link that you must click to complete your newsletter subscription (double opt-in). By doing so, you give your consent to data processing in accordance with Art. 6 para. 6 GDPR.

• Storage duration

  You can unsubscribe from our newsletter at any time by clicking the unsubscribe link, which is included in every newsletter. Your data will be deleted immediately after you unsubscribe, unless there are legal obligations to retain it. Similarly, your data will be deleted immediately if you do not complete the registration process. We reserve the right to delete your data without giving reasons and without prior or subsequent notification.

• Right to restrict processing, object to processing, rectify processing and erase data

  You can request the restriction of processing pursuant to Article 18 GDPR or object to processing pursuant to Article 21 GDPR at any time, as well as request the rectification or erasure of data pursuant to Articles 16 and 17 GDPR. You can find information about your rights and how to exercise them in the section below this privacy policy.

• Necessity of providing personal data

  If you wish to subscribe to our newsletter, you must complete the fields marked as mandatory and confirm your email address by clicking the double opt-in link. This information is required to subscribe to our newsletter. The information is used solely for sending our newsletter. If you do not complete the mandatory fields, we will be unable to provide you with our newsletter service.

Appointment booking form

• Scope of processing personal data

  The data you entered in our appointment booking form.

• Legal basis for the processing of personal data

  The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB) as well as Art. 6 para. 1 lit. b GDPR (implementation of (pre-)contractual measures).

• Purpose of data processing

  The data collected via our appointment booking form will only be used for processing appointment requests received through the appointment booking form.

• Storage duration

  Your appointment booking will be deleted immediately 12 months after the appointment date, unless legal retention obligations apply. We reserve the right to delete your booking without giving reasons and without prior or subsequent notification.

• Right to restrict processing, object to processing, rectify processing and erase data

  You can request the restriction of processing pursuant to Article 18 GDPR or object to processing pursuant to Article 21 GDPR at any time, as well as request the rectification or erasure of data pursuant to Articles 16 and 17 GDPR. You can find information about your rights and how to exercise them in the section below this privacy policy.

• Necessity of providing personal data

  Using our appointment booking form is necessary if you wish to book an appointment with us online. You must provide certain mandatory information for online booking. If you do not complete all mandatory information, your appointment booking cannot be accepted or processed.

  
  

Disclosure of information to third parties

The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB).

The disclosure of information to third parties depends on the scope of the activities or services described below on our website or our business model.

As a general rule, we retain your information only as long as necessary and treat it confidentially. Exceptions to this are the transfer of personal data to debt collection agencies, public bodies and authorities, and private individuals who have a legal right to it based on legal provisions, court decisions, or official orders, as well as the transfer to authorities for the purpose of initiating legal proceedings or for law enforcement purposes if our legally protected rights are infringed.

Statistical analysis of visits to this website - web tracker

When you access this website or individual files on this website, we collect, process, and store the following data: IP address, the website from which the file was accessed, the name of the file, the date and time of access, the amount of data transferred, and a message indicating whether the access was successful (so-called web log). We use this access data exclusively in non-personalized form for the continuous improvement of our website and for statistical purposes.

Any personal data processed is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 GDPR) and the principle of good faith (Art. 6 para. 2 GDPR and Art. 2 Swiss Civil Code). We also use the following web trackers to analyze visits to this website:

• Google

  We use the Google service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, email: support-deutschland@google.com , website: http://www.google.com/ , on our website . According to the assessment of Swiss authorities, data processing takes place in secure third countries. The list of countries designated by Switzerland and further information can be found at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision by the EU Commission under the EU-US Data Privacy Framework pursuant to Article 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

  The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you gave on our website.

  We use Google to load additional Google services on our website. This service is used to provide further Google services, such as the necessary data processing for delivering streams, fonts, and relevant Google search results. It is technically required to exchange information about website visitors that Google already holds between Google services and to provide website visitors with personalized content tailored to their Google account.

  For processing purposes, the service or we collect the following data: background data stored in the Google user account or other Google services about the website visitor, background data for providing Google services such as streaming data or advertising data, data about the website user's use of Google search, information about the device used, the IP address and the user's browser, and other data from Google services for providing Google services related to our website.

  If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for displaying and processing the services provided by Google. This may also involve data transfer to the Google services Google APIs, DoubleClick, Google Cloud, Google Ads, and Google Fonts, in accordance with the Google Privacy Policy. You can view the certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active .

  You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

  Further information on how the transferred data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy .

  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de .

• Google Maps

  We use the Google Maps service on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, email: support-deutschland@google.com , website: http://www.google.com/ . According to the assessment of Swiss authorities, data processing takes place in secure third countries. The list of countries considered secure by Switzerland, as well as further information, can be found at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. Regarding the transfer of personal data to the USA, there is an adequacy decision by the EU Commission under the EU-US Data Privacy Framework pursuant to Article 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

  The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you gave on our website.

  On our behalf, Google will use the information obtained via Google Maps to display the map to you. Google Maps allows you to find us faster and more accurately than a simple, non-interactive directions map. The corresponding data will also be used to identify website visitors who view our Google Maps map, potentially using their Google advertising ID, and to link this information to physical visits and clicks on other contact information listed with Google. This allows Google to estimate expected visitor traffic.

  For processing purposes, the service or we collect the following data: data required for visualizing and displaying location data in the form of a map, such as IP address, information from Google background services like Google APIs, search terms, IP address, coordinates, starting point and destination when using the route planner, location data, Google advertising ID, Android advertising ID.

  We have entered into a joint processing agreement with Google regarding Google Maps. You can find the details at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/ . When the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of this data processing agreement, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for displaying and processing the services provided by Google. This may also involve data processing by the Google services Google APIs, Google Cloud, and Google Fonts, in accordance with Google's privacy policy and under Google's data protection responsibility. You can find information about the certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active .

  You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

  Further information on how the transferred data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy .

  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de .

• Gstatic

  We use the Gstatic service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, email: support-deutschland@google.com , website: http://www.google.com/ , on our website . According to the assessment of Swiss authorities, data processing takes place in secure third countries. The list of countries considered secure by Switzerland, as well as further information, can be found at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision by the EU Commission under the EU-US Data Privacy Framework pursuant to Article 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

  The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you gave on our website.

  Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and preload necessary catalog files. The service specifically loads background data for Google Fonts and Google Maps.

  As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. You can view their certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active .

  You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

  Further information on how the transferred data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy .

  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de .

  
  

Integration of external web services and processing of data outside the EU

Our website uses active content from external providers, so-called web services. By accessing our website, these external providers may receive personal information about your visit. This may involve the processing of data outside of Switzerland and the EU. You can prevent this by installing a suitable browser plugin or disabling the execution of scripts in your browser. However, this may result in limited functionality on websites you visit.

We use the following external web services:

• Google Cloud APIs

  We use the Google Cloud APIs service on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, email: support-deutschland@google.com , website: http://www.google.com/ . According to the assessment of Swiss authorities, data processing takes place in secure third countries. The list of countries considered secure by Switzerland, as well as further information, can be found at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. Regarding the transfer of personal data to the USA, there is an adequacy decision by the EU Commission under the EU-US Data Privacy Framework pursuant to Article 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

  The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you gave on our website.

  We use Google APIs to load additional Google services on our website. Google APIs are a collection of interfaces for communication between the various Google services used on your website. This service is used in particular for displaying Google Fonts and providing the Google Maps map.

  For processing purposes, the service or we collect the following data: IP address

  If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for displaying and processing the services provided by Google. This may also involve data transfer to the Google services Google Cloud, Google Maps, Google Ads, and Google Fonts, in accordance with Google's privacy policy, under Google's data protection responsibility. You can view the certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active .

  You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

  Further information on how the transferred data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy .

  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de .

• Google Fonts

  We use the Google Fonts service on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, email: support-deutschland@google.com , website: http://www.google.com/ . According to the assessment of Swiss authorities, data processing takes place in secure third countries. The list of countries considered secure by Switzerland, as well as further information, can be found at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. Regarding the transfer of personal data to the USA, there is an adequacy decision by the EU Commission under the EU-US Data Privacy Framework pursuant to Article 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the usual level of protection under the GDPR applies to the data transfer.

  The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you gave on our website.

  We use the Google Fonts service to integrate attractive fonts into our website, thus presenting you with a visually improved version. This service may also be used on our website if other Google services are loaded that require Google Fonts to function. This is the case, for example, if our website uses Google services that absolutely require Google Fonts to operate.

  For processing purposes, the service or we collect the following data: data on fonts, IP address of the website visitor, statistics on the use of fonts and other data from Google services relating to our website.

  If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for displaying and processing the services provided by Google. This may also involve data transfer to the Google services Google APIs, Google Cloud, and Google Ads in accordance with the Google Privacy Policy. You can view the certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active .

  You can withdraw your consent at any time. Further information on how to withdraw your consent can be found either in the consent form itself or at the end of this privacy policy.

  Further information on how the transferred data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy .

  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de .

• Legally OK legal text snippet and module

  We use the Legally ok legal text snippet service and modules from Legally ok GmbH, Schochenmühlestrasse 6, 6340 Baar, Switzerland, email: hello@legally-ok.com , website: https://www.legally-ok.com/ , on our website. Processing takes place exclusively in Switzerland in accordance with applicable Swiss data protection legislation. Processing also takes place in a third country outside the EU. For this third country, there is an adequacy decision by the European Commission. You can find a current list of all adequacy decisions on the European Commission's website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de ).

  The legal basis for the transfer and processing is Article 31 Paragraph 1 of the German Federal Data Protection Act (BDSG) and Article 6 Paragraph 1 Letter c of the GDPR. The use of this service helps us to comply with our legal obligations.

  This service loads content from our legal texts on our website. The integration on our site ensures that the most up-to-date legal texts are loaded. This integration may also load other technical modules related to the legal texts or legally required elements.

  You can find information about your rights regarding data processing at the end of this privacy policy.

  Further information on how the transferred data is handled can be found in the provider's privacy policy at https://www.legally-ok.com/datenschutz/ .

  
  

Data security and privacy, communication via email

Your personal data is protected by technical and organizational measures during collection, storage, and processing to ensure it is inaccessible to third parties. However, we cannot guarantee complete data security during transmission to our IT systems via unencrypted email. Therefore, for highly confidential information, we recommend encrypted communication or sending it by post.

Duration of data storage and rights of the data subject

Storage duration

We only store personal data to the extent and for as long as this is necessary to fulfill the purposes for which the personal data was collected, if we have a legitimate overriding interest in storing it, or if we are legally obligated to do so.

Right to information

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access the information specified in Sections 25 et seq. of the German Federal Data Protection Act (BDSG) or Article 15(1) of the GDPR, provided that the data controller cannot refuse, restrict, or postpone providing this information (see Articles 26 et seq. BDSG or Article 15(4) GDPR). We will gladly provide you with a copy of the data.

Claim for rectification

Pursuant to Article 32 Paragraph 1 of the German Federal Data Protection Act (BDSG) or Article 16 of the General Data Protection Regulation (GDPR), you have the right to request that inaccurate personal data (such as address, name, etc.) be corrected, provided that no legal obligation prevents this. You can also request that the data we have stored about you be completed at any time. Any such changes will be made immediately.

Right to erasure

According to Article 17 Paragraph 1 of the GDPR, you have the right to have the personal data we have collected about you deleted if

• the data is either no longer needed;

• Due to the revocation of your consent, the legal basis for processing has ceased to exist without replacement;

• no longer exist as legitimate reasons for processing;

• Your data is being processed unlawfully;

• a legal obligation requires this.

The right does not exist according to Art. 17 para. 3 GDPR if

• the processing is necessary for exercising the right to freedom of expression and information;

• Your data has been collected on the basis of a legal obligation;

• the processing is necessary for reasons of public interest;

• the data are required for the establishment, exercise or defense of legal claims.

Right to restrict processing

According to Article 18 Paragraph 1 GDPR, you have the right in certain cases to request the restriction of the processing of your personal data.

This is the case when

• the accuracy of your personal data is disputed;

• the processing is unlawful and you do not consent to its deletion;

• the data are no longer needed for the processing purpose, but the collected data serve the establishment, exercise or defense of legal claims;

• An objection has been lodged against the processing pursuant to Art. 21 para. 1 GDPR and it is still unclear which interests prevail.

Right of withdrawal

If you have given us your explicit consent to the processing of your personal data (Art. 6 para. 6 DSG and Art. 31 para. 1 DSG; Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), you can withdraw this consent at any time. Please note that this does not affect the lawfulness of the processing carried out based on the consent before its withdrawal. Data that we are legally obligated to retain will be deleted after the retention period expires.

Right to object

In accordance with Article 21 of the GDPR, you have the right to object at any time to the processing of your personal data that has been collected on the basis of Article 6(1)(f) of the GDPR (within the scope of a legitimate interest). If you have given us your explicit consent to the processing of your personal data (Article 6(6) and Article 31(1) of the GDPR), you can withdraw this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal. You only have this right if there are special circumstances that justify the storage and processing of your data. Data that we are legally obligated to retain will be deleted after the retention period expires.

How do you exercise your rights?

You can exercise your rights at any time by contacting us using the contact details below:

Datahub GmbH,
Sentimattstrasse 6,
6003 Lucerne,
Switzerland,
Email: contact@layer.swiss,
Tel.: +41 78 715 42 08

Right to data portability

According to Article 20 of the GDPR, you have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used, and machine-readable format. The data can be sent either to you or to a controller designated by you.

We will provide you with the following data upon request:

• Data collected on the basis of consent (Art. 31 para. 1 DSG and Art. 6 para. 1 letter a GDPR);

• Data that we have received from you in connection with existing contracts (Art. 31 para. 2 letter a DSG as well as Art. 6 para. 1 letter b GDPR and Art. 9 para. 2 letter a GDPR);

• Data that has been processed as part of an automated procedure.

We will transfer your personal data directly to a controller of your choice, provided this is technically feasible. Please note that, pursuant to Article 26(1)(b) of the GDPR and Article 20(4), we may not transfer data that infringes upon the legitimate interests of third parties, or may only transfer such data to a limited extent.

Notifications to the FDPIC and the possibility of legal action

According to Article 49 of the Data Protection Act (DSG), data subjects may lodge a complaint with the supervisory authority if there are sufficient indications that data processing may violate data protection regulations. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

Further information can be found in the contact form of the FDPIC: https://www.edoeb.admin.ch/edoeb/de/home/deredoeb/kontakt.html

If you suspect that your data is being processed unlawfully on our website, you can seek legal clarification of the issue pursuant to Art. 32 of the Data Protection Act (DSG). Generally, this involves filing a lawsuit under Art. 28 et seq. of the Swiss Civil Code (ZGB). If your data is being processed by federal authorities, the procedure is governed by Art. 41 of the DSG. In this case, you can also contact the Federal Data Protection and Information Commissioner (FDPIC) (see the contact form above).

Right to lodge a complaint with the supervisory authority pursuant to Art. 77 para. 1 GDPR

If you suspect that your data is being processed unlawfully on our website, you can, of course, seek legal clarification of the issue at any time. Furthermore, you have every other legal recourse available to you. Regardless of this, pursuant to Article 77(1) of the GDPR, you have the right to lodge a complaint with a supervisory authority. This right to lodge a complaint under Article 77 of the GDPR applies in the EU member state of your residence, your place of work, and/or the place of the alleged infringement. This means you can choose the supervisory authority to which you submit your complaint from among those locations. The supervisory authority with which the complaint is lodged will then inform you of the progress and outcome of your complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.