Privacy Policy

This is a translation of the German original. In case of any discrepancies, the German version shall prevail.

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you here about which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy applies to the online services of EventButler - Your event portal, ButlerMedien GmbH, which are accessible under the domains www.eventbutler.ch, www.eventbutler.com and the various subdomains ("our website").

Controller

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

EventButler - Your event portal, ButlerMedien GmbH
Burghaldenweg 19
5330 Bad Zurzach
Switzerland
+41 (0) 56 500 0 699

What is this about?

This privacy policy meets the legal requirements for transparency in the processing of personal data. Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour when visiting a website. Information that we cannot link to you (or only with disproportionate effort), e.g. through anonymisation, is not personal data. The processing of personal data (e.g. collecting, querying, using, storing or transmitting it) always requires a legal basis and a defined purpose.

Stored personal data is deleted as soon as the purpose of the processing has been achieved and there are no lawful grounds for further retention. For each processing operation, we inform you of the specific retention periods or criteria for storage. Regardless of this, in individual cases we store your personal data for the establishment, exercise or defence of legal claims and where statutory retention obligations apply.

Who receives my data?

We only pass on the personal data we process on our website to third parties if this is necessary to fulfil the purposes and is covered by the legal basis (e.g. consent or legitimate interests) in the individual case. In addition, in individual cases we pass on personal data to third parties if this serves the establishment, exercise or defence of legal claims. Possible recipients may then be, for example, law enforcement authorities, lawyers, auditors, courts, etc.

Where we use service providers to operate our website who process personal data on our behalf as processors pursuant to Art. 28 GDPR, they may be recipients of your personal data. Further information on the use of processors and web services can be found in the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that we send to the browser of your device when you visit our websites and that are stored there. As an alternative to cookies, information can also be stored in your browser's local storage. Some functions of our website cannot be offered without cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to carry out various analyses, so that we are able, for example, to recognise the browser you use when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and identifying your preferred settings (e.g. country and language settings). Where third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot execute programs and cannot contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or in the consent manager of this website.

Subject to the statutory provisions of the General Data Protection Regulation (GDPR), you as a data subject have the following rights:

• Access pursuant to Art. 15 GDPR to the data stored about you in the form of meaningful information on the details of the processing, as well as a copy of your data;
• Rectification pursuant to Art. 16 GDPR of incorrect or incomplete data stored by us;
• Erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• Restriction of processing pursuant to Art. 18 GDPR, where the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you oppose its erasure because you need it for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR.
• Data portability pursuant to Art. 20 GDPR, where you have provided us with personal data on the basis of consent pursuant to Art. 6(1)(a) GDPR or on the basis of a contract pursuant to Art. 6(1)(b) GDPR and it has been processed by us using automated means. You will receive your data in a structured, commonly used and machine-readable format, or we will transmit the data directly to another controller where technically feasible.
• Objection pursuant to Art. 21 GDPR to the processing of your personal data, where it is based on Art. 6(1)(e) or (f) GDPR and there are grounds relating to your particular situation, or the objection is directed against direct marketing. The right to object does not apply if overriding compelling legitimate grounds for the processing are demonstrated or the processing serves the establishment, exercise or defence of legal claims. Where the right to object does not apply to individual processing operations, this is indicated there.
• Withdrawal of your consent pursuant to Art. 7(3) GDPR with effect for the future.
• Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data infringes the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our registered office.

Below we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective retention period. No automated individual decision-making, including profiling, takes place.

Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file accessed
• Website from which access is made (referrer URL)
• Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by us, but by a service provider that processes the aforementioned data on our behalf pursuant to Art. 28 GDPR.

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring its security and stability on the basis of Art. 6(1)(f) GDPR. The collection of the data and its storage in log files is essential for the operation of the website. There is no right to object to the processing due to the exception under Art. 21(1) GDPR. Where further storage of the log files is required by law, the processing is based on Art. 6(1)(c) GDPR. There is no statutory or contractual obligation to provide the data; however, it is technically impossible to access our website without providing the data.

Retention period

The aforementioned data is stored for the duration of the display of the website and, for technical reasons, for a maximum of 7 days thereafter.

Type and scope of processing

On our website we offer you the opportunity to contact us via a form. The information collected via mandatory fields is required to process the request. In addition, you can voluntarily provide further information that you consider necessary for processing the contact request.

When you use the contact form, your personal data is not passed on to third parties.

Purpose and legal basis

The processing of your data through the use of our contact form is carried out for the purpose of communication and handling your request on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Where your request relates to an existing contractual relationship with us, the processing is carried out for the purpose of performing the contract on the basis of Art. 6(1)(b) GDPR. There is no statutory or contractual obligation to provide your data; however, your request cannot be processed without the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Retention period

Where you use the contact form on the basis of your consent, we store the data collected for each request for a period of three years, starting from the completion of your request, or until you withdraw your consent.

If you use the contact form in the context of a contractual relationship, we store the data collected for each request for a period of [three years] from the end of the contractual relationship.

Type and scope of processing

If you subscribe to our newsletter on our website, we collect your email address [and your name…] and store this information together with the date of registration and your IP address. You will then receive an email in which you must confirm your newsletter subscription (double opt-in). If you do not confirm the subscription within 24 hours, it expires automatically and the data is not processed for sending the newsletter.

To send the newsletter, we use a service provided by Brevo, which processes your personal data on our behalf pursuant to Art. 28 GDPR. Your data is not passed on to third parties.

Purpose and legal basis

We process your data for the purpose of sending the newsletter on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future pursuant to Art. 7(3) GDPR by unsubscribing from the newsletter. There is no statutory or contractual obligation to provide your data; however, the newsletter cannot be sent without your data.

Retention period

After you subscribe to the newsletter, we store the data for a maximum of 24 hours until the subscription is confirmed. After successful confirmation, we store your data until you withdraw your consent (unsubscribe from the newsletter) and, for technical reasons, for a maximum of 7 days thereafter.

Type and scope of processing

To use certain areas of our website, you can register a user account. The information collected via the mandatory fields during registration is required to provide access to the user account. In addition, you can voluntarily provide further information for additional (convenience) functions.

For the registration of a user account, your personal data is passed on exclusively in accordance with this privacy policy.

Purpose and legal basis

We process your data for the purpose of providing a user account to perform a contract with you pursuant to Art. 6(1)(b) GDPR. There is a contractual obligation to provide your data, as this information is required to identify you and for us to perform the contract. There is no statutory obligation to provide the data. Without this information, it is not possible to register a user account and thus to conclude a contract.

In addition, voluntarily provided information is processed for the purpose of providing further (convenience) functions on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future pursuant to Art. 7(3) GDPR by deactivating the functions / by deleting the voluntary information in the user account.

Retention period

We store your personal data in connection with the provision of the user account for the duration of the contractual relationship. After the end of the contract / deletion of the user account, your data is only stored further if statutory retention obligations (e.g. under tax and commercial law) apply.

Additional information that you provide to us on the basis of your consent is only stored until you withdraw your consent by deactivating the functions / deleting the data, but no longer than until the end of the contract on which the provision of the user account is based.

We maintain so-called fan pages, accounts or channels on the networks listed below in order to provide you with information and offers within social networks as well and to offer you further ways to contact us and find out about our offers. Below we inform you which data we or the respective social network process about you in connection with accessing and using our fan pages/accounts.

Data we process about you

If you wish to contact us by messenger or direct message via the respective social network, we generally process the user name with which you contact us and, where applicable, store further data you provide to the extent necessary to process/answer your request.

The legal basis is Art. 6(1)(f) GDPR (processing is necessary for the purposes of the legitimate interests of the controller).

(Static) usage data we receive from the social networks

Via insights functions, we receive automatically provided statistics concerning our accounts. Among other things, the statistics contain the total number of page views, likes, information on page activities and post interactions, reach, video views and information on the proportion of men/women among our fans/followers.

The statistics only contain aggregated data that cannot be traced back to individual persons. You cannot be identified by us through them.

Which data the social networks process about you

To view the content of our fan pages or accounts, you do not have to be a member of the respective social network, and no user account for the respective social network is required.

Please note, however, that when you access the respective social network, the social networks also collect and store data from website visitors without a user account (e.g. technical data in order to display the website to you) and use cookies and similar technologies over which we have no influence. Details can be found in the privacy policy of the respective social network (see the corresponding links above).

If you wish to interact with the content on our fan pages/accounts, e.g. comment on, share or like our posts and/or contact us via messenger functions, prior registration with the respective social network and the provision of personal data are required.

We have no influence on the data processing by the social networks in the context of your use. To our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, and also for analysing usage behaviour (using cookies, pixels/web beacons and similar technologies), on the basis of which advertising based on your interests is displayed both within and outside the respective social network. It cannot be ruled out that your data may also be stored by the social networks outside the EU/EEA and passed on to third parties.

Information on, among other things, the exact scope and purposes of the processing of your personal data, the retention period/deletion and guidelines on the use of cookies and similar technologies in connection with registering for and using the social networks can be found in the privacy policies/cookie policies of the social networks. There you will also find information about your rights and options to object.

When you visit our Facebook page, Facebook (Meta) collects, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides further information on this at the following link: https://facebook.com/help/pages/insights.

The statistical information transmitted does not allow us to draw conclusions about individual users. We only use it to respond to the interests of our users, to continuously improve our online presence and to ensure its quality.

We only collect your data via our fan page in order to enable communication and interaction with us. This generally includes your name, message content, comment content and the profile information you have made "public".

The processing of your personal data for the purposes mentioned above is based on our legitimate business and communication interest in offering an information and communication channel pursuant to Art. 6(1)(f) GDPR. If you as a user have given the respective social network provider your consent to data processing, the legal basis of the processing extends to Art. 6(1)(a) and Art. 7 GDPR.

As the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorised to have full access to your data. For this reason, only the provider can directly take and implement appropriate measures to fulfil your user rights (request for information, request for erasure, objection, etc.). The most effective way to assert such rights is therefore directly with the respective provider.

We are jointly responsible with Facebook for the personal content of the fan page. Data subject rights can be asserted with Meta Platforms Ireland Ltd. as well as with us.

Under the GDPR, primary responsibility for the processing of insights data lies with Facebook, and Facebook fulfils all obligations under the GDPR with regard to the processing of insights data. Meta Platforms Ireland Ltd. makes the essence of the Page Insights Addendum available to data subjects.

We do not make any decisions regarding the processing of insights data or the storage period of cookies on users' devices.

Further information can be found directly at Facebook (addendum with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Further information on, among other things, the exact scope and purposes of the processing of your personal data, the retention period/deletion and guidelines on the use of cookies and similar technologies in connection with registration and use can be found in Facebook's privacy policy/cookie policy:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
https://www.facebook.com/policies/cookies

When you visit our Instagram page, Instagram (Meta) collects, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides further information on this at the following link (note: clicking the following link takes you to the website of the social network Facebook, which is also part of the Meta group; the information provided via the link applies equally to the social network Instagram): https://facebook.com/help/pages/insights.

The statistical information transmitted does not allow us to draw conclusions about individual users. We only use it to respond to the interests of our users, to continuously improve our online presence and to ensure its quality.

We only collect your data via our fan page in order to enable communication and interaction with us. This generally includes your name, message content, comment content and the profile information you have made "public".

The processing of your personal data for the purposes mentioned above is based on our legitimate business and communication interest in offering an information and communication channel pursuant to Art. 6(1)(f) GDPR. If you as a user have given the respective social network provider your consent to data processing, the legal basis of the processing extends to Art. 6(1)(a) and Art. 7 GDPR.

As the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorised to have full access to your data. For this reason, only the provider can directly take and implement appropriate measures to fulfil your user rights (request for information, request for erasure, objection, etc.). The most effective way to assert such rights is therefore directly with the respective provider.

We are jointly responsible with Instagram for the personal content of the fan page. Data subject rights can be asserted with Meta Platforms Ireland Ltd. as well as with us.

Under the GDPR, primary responsibility for the processing of insights data lies with Instagram, and Instagram fulfils all obligations under the GDPR with regard to the processing of insights data. Meta Platforms Ireland Ltd. makes the essence of the Page Insights Addendum available to data subjects.

We do not make any decisions regarding the processing of insights data or the storage period of cookies on users' devices.

Further information can be found directly at Instagram (addendum with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Further information on, among other things, the exact scope and purposes of the processing of your personal data, the retention period/deletion and guidelines on the use of cookies and similar technologies in connection with registration and use can be found in Instagram's privacy policy/cookie policy (note: clicking the following link takes you to the website of the social network Facebook):
https://help.instagram.com/519522125107875/?helpref=uf_share
This information can also be viewed in the help section of the Instagram website via the following link:
https://help.instagram.com/581066165581870

Twitter is a social network of Twitter Inc., based in San Francisco, California, USA, which enables the creation of private profiles of natural persons (personal account) and professional profiles (professional account) of natural persons and companies. Among other things, Twitter users can write short messages (so-called "tweets"), interact with the content of other users, e.g. write so-called "retweets", like posts, share posts and reply when other users mention or tag them in content.

When using or visiting the network, and thus also when visiting our Twitter account, Twitter automatically collects data from users or visitors, for example user name and IP address. This is done with the help of tracking technologies, in particular cookies. On the basis of the data collected in this way, Twitter provides users with information, offers and recommendations, among other things. This information is used to provide us, as the operator of our Twitter page, with statistical information about the use of the Twitter page. Further information can be found in Twitter's privacy policy: https://twitter.com/privacy#twitter-privacy-1.

The statistical information transmitted does not allow us to draw conclusions about individual users. We only use it to respond to the interests of our users, to continuously improve our online presence and to ensure its quality.

We only collect your data via our fan page in order to enable communication and interaction with us. This generally includes your name, message content, comment content and the profile information you have made "public".

The processing of your personal data for the purposes mentioned above is based on our legitimate business and communication interest in offering an information and communication channel pursuant to Art. 6(1)(f) GDPR. If you as a user have given the respective social network provider your consent to data processing, the legal basis of the processing extends to Art. 6(1)(a) and Art. 7 GDPR.

As the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorised to have full access to your data. For this reason, only the provider can directly take and implement appropriate measures to fulfil your user rights (request for information, request for erasure, objection, etc.). The most effective way to assert such rights is therefore directly with the respective provider.

We are jointly responsible with Twitter for the personal content of the fan page. Data subject rights can be asserted with Twitter Inc. as well as with us.

Under the GDPR, primary responsibility for the processing of insights data lies with Twitter, and Twitter fulfils all obligations under the GDPR with regard to the processing of insights data. Twitter Inc. makes the essence of the Page Insights Addendum available to data subjects.

We do not make any decisions regarding the processing of insights data or the storage period of cookies on users' devices.

Further information on, among other things, the exact scope and purposes of the processing of your personal data, the retention period/deletion and guidelines on the use of cookies and similar technologies in connection with registration and use can be found in Twitter's privacy policy/cookie policy:
Privacy policy: https://twitter.com/privacy#twitter-privacy-1
Cookie policy: https://help.twitter.com/rules-and-policies/twitter-cookies

LinkedIn is a social network of LinkedIn Inc., based in Sunnyvale, California, USA, which enables the creation of private and professional profiles of natural persons and company profiles. Users can maintain their existing contacts and make new ones within the social network. Companies and other organisations can create profiles on which photos and other company information are uploaded in order to present themselves as employers and recruit staff. Other LinkedIn users have access to this information and can write their own articles and share this content with others. The focus of the network is on professional exchange on specialist topics with people who share the same professional interests.

When using or visiting the network, LinkedIn automatically collects data from users or visitors, for example user name, job title and IP address. This is done with the help of various tracking technologies. On the basis of the data collected in this way, LinkedIn provides users with information, offers and recommendations, among other things.

We only collect your data via our company profile in order to enable communication and interaction with us. This generally includes your name, message content, comment content and the profile information you have made "public".

The processing of your personal data for the purposes mentioned above is based on our legitimate business and communication interest in offering an information and communication channel pursuant to Art. 6(1)(f) GDPR. If you as a user have given the respective social network provider your consent to data processing, the legal basis of the processing extends to Art. 6(1)(a) and Art. 7 GDPR.

As the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorised to have full access to your data. For this reason, only the provider can directly take and implement appropriate measures to fulfil your user rights (request for information, request for erasure, objection, etc.). The most effective way to assert such rights is therefore directly with the respective provider.

We are jointly responsible with LinkedIn for the personal content of our company profile. Data subject rights can be asserted with LinkedIn Inc. as well as with us.

We do not make any decisions regarding the data collected on the LinkedIn site by means of tracking technologies.

Further information about LinkedIn can be found at: https://about.linkedin.com.

Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy.

Further information on the retention period/deletion and guidelines on the use of cookies and similar technologies in connection with registration and use of LinkedIn can be found at: https://www.linkedin.com/legal/cookie-policy.

Type and scope of processing

We use Plausible Analytics from Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia, as an analytics service for the statistical evaluation of our online services. This includes, for example, the number of visits to our online services, the subpages visited and the length of time visitors stay. This information is used, among other things, to compile reports on website activity.

Plausible Analytics does not set cookies, does not store any information in the browser and does not collect any personal data from visitors.

Purpose and legal basis

Plausible Analytics is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG.

Retention period

We cannot influence the specific retention period of the processed data; it is determined by Plausible Insights OÜ. Further information can be found in the Plausible Analytics privacy policy: https://plausible.io/data-policy

Type and scope of processing

We use jQuery CDN to properly deliver the content of our website. jQuery CDN is a service of jQuery that acts as a content delivery network (CDN) on our website.

A CDN helps to deliver content of our online services, in particular files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to jQuery servers, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of jQuery CDN.

Purpose and legal basis

The content delivery network is used on the basis of our legitimate interests, i.e. our interest in secure and efficient delivery and in optimising our online services pursuant to Art. 6(1)(f) GDPR.

Retention period

We cannot influence the specific retention period of the processed data; it is determined by jQuery. Further information can be found in the jQuery CDN privacy policy: https://www.stackpath.com/legal/privacy-statement/

Type and scope of processing

We have integrated Vimeo Video on our website. Vimeo Video is a component of the video platform of Vimeo, LLC, on which users can upload content, share it over the internet and receive detailed statistics.

Vimeo Video enables us to integrate content from the platform into our website.

Vimeo Video uses cookies and other browser technologies to analyse user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the content played and to create reports. 

When you access this content, you establish a connection to servers of Vimeo, LLC, 555 W 18th St, New York, New York 10011, whereby your IP address and possibly browser data such as your user agent are transmitted.

Purpose and legal basis

The service is used on the basis of our legitimate interests, i.e. our interest in platform-independent provision of content pursuant to Art. 6(1)(f) GDPR.

Retention period

We cannot influence the specific retention period of the processed data; it is determined by Vimeo, LLC. Further information can be found in the Vimeo Video privacy policy: https://vimeo.com/privacy

Type and scope of processing

We have integrated YouTube Video on our website. YouTube Video is a component of the video platform of YouTube, LLC, on which users can upload content, share it over the internet and receive detailed statistics.

YouTube Video enables us to integrate content from the platform into our website.

YouTube Video uses cookies and other browser technologies to analyse user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the content played and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the videos played to the profile.

When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted.

Purpose and legal basis

The service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision of the European Commission (e.g. for the USA), we have agreed other appropriate safeguards within the meaning of Art. 44 et seq. GDPR with the recipients of the data. Unless otherwise stated, these are standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these standard contractual clauses can be viewed at  https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914&from=EN.

In addition, before such a third-country transfer we obtain your consent pursuant to Art. 49(1)(a) GDPR, which you give via the consent manager (or other forms, registrations, etc.). Please note that third-country transfers may involve risks that are unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).

Retention period

We cannot influence the specific retention period of the processed data; it is determined by YouTube, LLC. Further information can be found in the YouTube Video privacy policy: https://policies.google.com/privacy