data protection
The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit our website. Our data protection practices comply with the legal provisions of the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR). The following privacy policy serves to fulfill the information obligations arising from the FADP and the GDPR. These can be found, for example, in Art. 19 ff. INLB and Art. 13 ff. of the GDPR.
Owner or responsible person
The controller within the meaning of Art. 5 lit. j DSG or Art. 4 No. 7 GDPR is the person who, alone or jointly with others, decides on the purposes and means of processing personal data. The controller within the meaning of Art. 4 No. 7 GDPR is also the recipient of the personal data within the meaning of Art. 4 No. 9 GDPR. Each third-party recipient must be identified separately.
With regard to our website, the owner or responsible person is:
BE BRAVE AG
Blegi 3
6343 Risch-Rotkreuz
Switzerland
Email: [email protected]
Provision of the website and creation of log files
Each time you access our website, our system automatically collects data and information from the device (e.g., computer, mobile phone, tablet, etc.) used to access it.
What personal data is collected and to what extent is it processed?
(1) Information about the browser type and browser version used;
(2) The operating system of the accessing device;
(3) Host name of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Notification of whether the retrieval was successful;
(9) Amount of data transferred
This data is stored in our system's log files. This data is not stored together with the personal data of a specific user, meaning that individual visitors to the website cannot be identified.
Legal basis for the processing of personal data
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG and Art. 2 ZGB) as well as in accordance with Art. 6 para. 1 lit. f GDPR (legitimate interest).
Purpose of data processing
The temporary (automated) storage of data is necessary for the course of a website visit in order to enable the delivery of the website. The storage and processing of personal data also takes place in order to maintain the compatibility of our website for as many visitors as possible and to combat misuse and eliminate malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to respond as early as possible to display errors, attacks on our IT systems, and/or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our information technology systems.
Duration of storage
The aforementioned technical data will be deleted as soon as it is no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.
Right to restriction, objection, rectification, and erasure
You may request the restriction of processing in accordance with Art. 18 GDPR or object to the processing in accordance with Art. 21 GDPR, as well as request the rectification or erasure of data in accordance with Art. 16 or 17 GDPR at any time. You can find out what rights you have and how you can exercise them in the section below of this privacy policy.
Special features of the website
Our website offers you various functions, the use of which requires us to collect, process, and store personal data. Below, we explain what happens to this data:
callback service
What personal data is collected and to what extent is it processed?
We process the data you enter in our callback form, such as your phone number and name, for the following purpose.
Legal basis for the processing of personal data
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG and Art. 2 ZGB), as well as in accordance with Art. 6 para. 1 lit. a DSG (consent through unambiguous affirmative action or behavior).
Purpose of data processing
Provision and implementation of the callback service, fulfillment of callback requests.
Duration of storage
The data will be deleted as soon as it is no longer required for processing your callback request.
Right to object, processing, correction, and deletion
You may restrict processing in accordance with Article 18 of the GDPR, object to processing in accordance with Article 21 of the GDPR, and request the correction or deletion of data at any time in accordance with Articles 16 or 17 of the GDPR. You can find out what rights you have and how you can exercise them in the section below of this privacy policy.
Necessity of providing personal data
The information provided in the callback form is not required by law. If you do not fill in the mandatory fields or do not fill them in completely, we will not be able to process your callback request.
Contact form(s)
What personal data is collected and to what extent is it processed?
The data you entered in our contact forms, which you entered in the input mask of the contact form.
Legal basis for the processing of personal data
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG and Art. 2 ZGB), as well as in accordance with Art. 6 para. 1 lit. a DSG (consent through unambiguous affirmative action or behavior).
Purpose of data processing
We use the data collected via our contact form(s) exclusively for processing the specific contact request received via the contact form. Please note that we may also send emails to the address you provided in order to fulfill your contact request. The purpose of this is to send you confirmation that your request has been correctly forwarded to us. However, sending this confirmation email is not mandatory for us and is for your information only.
Duration of storage
Once your request has been processed, the data collected will be deleted immediately, unless there are legal retention periods.
Right to restriction, objection, rectification, and erasure
You may request the restriction of processing in accordance with Art. 18 GDPR or object to the processing in accordance with Art. 21 GDPR, as well as request the rectification or erasure of data in accordance with Art. 16 or 17 GDPR at any time. You can find out what rights you have and how you can exercise them in the section below of this privacy policy.
Necessity of providing personal data
The use of the contact forms is voluntary. You are not obliged to contact us via the contact form, but can also use the other contact options offered on our website. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the required information in the contact form, you will either not be able to send the request or we will not be able to process your request due to missing information.
live chat feature
Scope of personal data processing
The data you enter in our live chat, such as your name and content.
Legal basis for the processing of personal data
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG and Art. 2 ZGB), as well as in accordance with Art. 6 para. 1 lit. a DSG (consent through unambiguous affirmative action or behavior).
Purpose of data processing
We only use the data recorded via our live chat to process inquiries received via our live chat.
Duration of storage
After processing your request, which we received in our live chat, the collected data will be deleted immediately, provided that there are no legal retention periods.
Right to restriction, objection, rectification, and erasure
You may request the restriction of processing in accordance with Art. 18 GDPR or object to the processing in accordance with Art. 21 GDPR, as well as request the rectification or erasure of data in accordance with Art. 16 or 17 GDPR at any time. You can find out what rights you have and how you can exercise them in the section below of this privacy policy.
Necessity of providing personal data
The use of live chat is voluntary. You are not obligated to contact us via live chat. You can also use the other contact options on our website. If you do not enter the required information, you will not be able to use our live chat.
Newsletter registration form
What personal data is collected and to what extent is it processed?
When you subscribe to the newsletter on our website, we receive the email address you entered in the registration field and, if applicable, other contact details, provided you have entered these in the newsletter registration form.
Legal basis for the processing of personal data
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG and Art. 2 ZGB), as well as in accordance with Art. 6 para. 1 lit. a DSG (consent through unambiguous affirmative action or behavior).
Purpose of data processing
The data collected in the registration form for our newsletter will be used exclusively for sending our newsletter, in which we inform you about all our services and news. After registration, we will send you a confirmation email with a link that you must click to complete your registration for our newsletter (double opt-in). By doing so, you give your consent to data processing in accordance with Art. 6 (6) DSG.
Duration of storage
You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after unsubscribing, provided that there are no legal retention obligations. Your data will also be deleted by us immediately if your subscription is not completed. We reserve the right to delete data without giving reasons and without prior or subsequent notification.
Right to restriction, objection, rectification, and erasure
You may request the restriction of processing in accordance with Art. 18 GDPR or object to the processing in accordance with Art. 21 GDPR, as well as request the rectification or erasure of data in accordance with Art. 16 or 17 GDPR at any time. You can find out what rights you have and how you can exercise them in the section below of this privacy policy.
Necessity of providing personal data
If you would like to receive our newsletter, you must fill in the fields marked as mandatory and confirm your email address by clicking on the double opt-in link. The information provided when registering for the newsletter is required in order to use the newsletter service. The information will be used exclusively for sending our newsletter. If you do not fill in the mandatory fields, we will not be able to provide you with our newsletter service.
Appointment booking form
Scope of personal data processing
The data you enter in our appointment booking form.
Legal basis for the processing of personal data
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG and Art. 2 ZGB), as well as in accordance with Art. 6 para. 1 lit. b DSG (implementation of (pre-)contractual measures).
Purpose of data processing
We use the data collected via our appointment booking form solely for the purpose of processing appointment requests received via the appointment booking form.
Duration of storage
Your appointment booking will be deleted by us immediately after 12 months have elapsed since the appointment was made, provided that there are no legal retention obligations. We reserve the right to delete your data without giving reasons and without prior or subsequent notification.
Right to restriction, objection, rectification, and erasure
You may request the restriction of processing in accordance with Art. 18 GDPR or object to the processing in accordance with Art. 21 GDPR, as well as request the rectification or erasure of data in accordance with Art. 16 or 17 GDPR at any time. You can find out what rights you have and how you can exercise them in the section below of this privacy policy.
Necessity of providing personal data
You must use our appointment booking form if you wish to book an appointment with us online. You must provide certain mandatory information for online booking. If you do not fill in the mandatory information completely, your appointment booking cannot be accepted or processed.
Disclosure of information to third parties
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG and Art. 2 CC).
The disclosure of information to third parties depends on the scope of activities or offers on our website or our business model described below.
We only store your data for as long as necessary and treat it confidentially. Exceptions to this are the transfer of personal data to debt collection agencies, public bodies and authorities, and private individuals who have a right to this data on the basis of legal regulations, court decisions, or official orders, as well as the transfer of data to authorities for the purpose of initiating legal proceedings or criminal prosecution if our legally protected rights are violated.
Automatic identity and credit check for shipping on account or online payment
What personal data is collected and to what extent is it processed?
If you choose to pay by invoice or order online via a payment service, you will be asked during the ordering process to consent to the transfer of data required for processing the payment and for identity and credit checks. First and last name, street, house number, postal code, city, date of birth, and your order details.
Legal basis for the processing of personal data
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG and Art. 2 CC).
In direct connection with the conclusion or fulfillment of a contract (Art. 31 para. 2 lit. a DSG), there is an overriding interest in obtaining information about the identity of a contracting party. In direct connection with the conclusion of a contract, personal data may be processed for the purpose of creditworthiness checks, provided that the personal data is not particularly sensitive or involves high-risk profiling, the data is only passed on to third parties if they need the data for the conclusion or performance of a contract with the data subject, the data is not older than ten years, and the data subject is of legal age (Art. 31 para. 2 lit. c. DSG). See also Art. 6 para. 1 lit. b GDPR (implementation of (pre)contractual measures).
Purpose of data processing
For the purpose of identity and credit checks, we transmit data to credit agencies and receive information and, if necessary, credit reports from them. We receive information and, where applicable, credit ratings from these credit agencies on the basis of mathematical-statistical methods, which include address data in their calculations (so-called score values). When using online payment services, we transfer your data to the relevant partners and receive information from them in order to release the order for shipment.
Duration of storage
We store the data relevant for processing the payment for as long as is necessary to complete the transaction. If the data is subject to statutory retention requirements, it will be deleted after the retention period has expired.
Right to restriction, objection, rectification, erasure, and information
You may restrict processing at any time in accordance with Art. 18 GDPR, object to processing in accordance with Art. 21 GDPR, and request the correction or deletion of data in accordance with Art. 16 or 17 GDPR. In accordance with Art. 25 GDPR, you may request information at any time as to whether personal data about you is being processed. This means that you can view the information necessary to exercise your rights under the Data Protection Act at any time and ensure transparent data processing. If the information stored about you is incorrect, we will delete it and consult the data protection officer if necessary. You can find out what rights you have and how you can exercise them in the section below of this privacy policy.
Statistical analysis of visits to this website - Webtracker
Google
We use the Google service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/. According to the Swiss authorities, processing takes place in secure third countries. The list of countries in Switzerland and further information can be found at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. For the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Protection Framework of the EU Commission within the meaning of Art. 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified under the DPF, meaning that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the transfer of personal data is your consent in accordance with Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
We use Google to load additional Google services on the website. The service is used to provide additional Google services, such as data processing required for the provision of streams, fonts, and relevant Google search content. It is technically necessary to exchange the website visitor's information already available to Google between Google services and to offer the website visitor individual content tailored to their Google account.
For the processing itself, the service or we collect the following data: Background data about the site visitor stored in the Google user account or other Google services, background data for the provision of Google services such as streaming data or advertising data, data about the site visitor's use of Google Search, information about the device used, the user's IP address and browser, and other data from Google services for the provision of Google services in connection with our website.
When the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transfer and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Doubleclick, Google Cloud, Google Ads, and Google Fonts in accordance with Google's privacy policy. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent form itself or at the end of this privacy policy.
Further information on how the transmitted data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Gstatic
We use the Gstatic service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/. According to the Swiss authorities, processing takes place in secure third countries. The list of countries in Switzerland and further information can be found at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. For the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Protection Framework of the EU Commission within the meaning of Art. 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified under the DPF, meaning that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the transfer of personal data is your consent in accordance with Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and preload necessary catalog files. In particular, the service loads background data for Google Fonts and Google Maps.
As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. You can check the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list .
You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent form itself or at the end of this privacy policy.
Further information on how the transmitted data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Integration of external web services and processing of data outside the EU
We use active content from external providers, known as web services, on our website. When you visit our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside Switzerland and the EU. You can prevent this by installing an appropriate browser plugin or deactivating the execution of scripts in your browser. This may lead to functional restrictions on websites you visit.
We use the following external web services:
Google Cloud APIs
We use the Google Cloud APIs service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/. According to the Swiss authorities, processing takes place in secure third countries. The list of countries in Switzerland and further information can be found at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. For the transfer of personal data to the USA, there is an adequacy decision on the EU-US data protection framework of the EU Commission within the meaning of Art. 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified under the DPF, meaning that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the transfer of personal data is your consent in accordance with Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
We use Google APIs to load additional Google services onto the website. Google APIs is a collection of interfaces for communication between the various Google services used on your website. The service is used in particular to display Google Fonts and to provide the Google Maps map.
For the processing itself, the service or we collect the following data: IP address
When the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transfer and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Cloud, Google Maps, Google Ads, and Google Fonts in accordance with Google's privacy policy under Google's data protection responsibility. You can view the provider's certification in accordance with the EU-US General Data Protection Regulation at https://www.dataprivacyframework.gov/list .
You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent form itself or at the end of this privacy policy.
Further information on how the transmitted data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Google fonts
We use the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/. According to the Swiss authorities, processing takes place in secure third countries. The list of countries in Switzerland and further information can be found at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. For the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Protection Framework of the EU Commission within the meaning of Art. 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified under the DPF, meaning that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the transfer of personal data is your consent in accordance with Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
We use the Google Fonts service to integrate attractive fonts into our website so that we can show you our website in a visually improved version. The service can also be used on our website if other Google services are loaded on our website that require Google Fonts to function. This is the case, for example, if our website uses Google services that require Google Fonts to run.
For the processing itself, the service or we collect the following data: data about fonts, the IP address of the site visitor, statistics about font usage, and other data from Google services related to our website.
When the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transfer and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Google Cloud, and Google Ads in accordance with Google's privacy policy. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list .
You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent form itself or at the end of this privacy policy.
Further information on how the transmitted data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Google reCaptcha
We use the Google reCaptcha service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: [email protected], website: https://www.google.com/. According to the Swiss authorities, processing takes place in secure third countries. The list of countries in Switzerland and further information can be found at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. For the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Protection Framework of the EU Commission within the meaning of Art. 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified under the DPF, meaning that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the transfer of personal data is your consent in accordance with Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
If Google reCaptcha is activated on our website, the data collected by Google reCaptcha is transferred to servers belonging to Google Ireland Limited. As part of order processing, personal data may also be transferred to the servers of the parent company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. The service uses certain characteristics and an analysis of page behavior to determine whether the entries are automated entries made by a program (known as a bot) or human entries. The service has three different levels. Either the service automatically recognizes that the entry is not an automated entry made by a bot, or it asks the user to select a captcha checkbox. A third option is to display small image or voice tasks/text tasks that must be solved by the website visitor. Google reCaptcha is a captcha service that is used on our website for security reasons to prevent bots (robot programs) from interacting with our website. Google reCaptcha verifies on our behalf that only humans and not bots can use our website. This enables us to protect the special functions of our website (e.g., contact forms or other input options such as the login area) from unauthorized access.
For processing purposes, the service or we collect the following data: user behavior (e.g., mouse gestures or input behavior), IP address, browser data, computer information.
If you wish to use the input options on our website that are protected by Google reCaptcha, you must allow the use of Google reCaptcha and, if necessary, solve the corresponding captchas. If you do not complete the captcha or do not allow the use of Google reCaptcha, you will not be able to use the form protected by the captcha. Alternatively, you can always use our other contact options (e.g., by mail or email). You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list .
You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent form itself or at the end of this privacy policy.
Further information on how the transmitted data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
HubSpot Forms by HubSpot
We use the HubSpot Forms service from HubSpot, Inc., 25 First Street, 2141 Cambridge, United States, email: [email protected], website: https://www.hubspot.de/. Your personal data will be transferred to so-called unsafe third countries, which do not guarantee adequate data protection under their legislation. Your data will only be transferred if adequate data protection is guaranteed. This can be ensured by:
- Contracts under international law
- Data protection clauses in a contract between the controller or processor and its contractual partner that have been notified to the EDÖB in advance
- specific security measures drawn up by the competent federal authority and communicated in advance to the EDÖB
- Standard data protection clauses that the EDÖB has approved, issued, or recognized in advance, or
- binding internal company data protection regulations that have been previously approved by the EDÖB or by a data protection authority in a country that guarantees adequate protection
If such guarantees do not exist, your data may only be disclosed if you have given your consent, if the disclosure is directly related to the conclusion or performance of a contract, or if the disclosure is necessary for the enforcement of claims before courts and authorities or for the protection of public interests. Personal data is also transferred to the USA. For the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Protection Framework of the EU Commission within the meaning of Art. 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the transfer of personal data is your consent in accordance with Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
With the help of hsforms, we can easily provide you with surveys and forms on our website.
You can verify the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list .
You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent form itself or at the end of this privacy policy.
Further information on how the transmitted data is handled can be found in the provider's privacy policy at https://legal.hubspot.com/de/privacy-policy.
Hubspot
We use the Hubspot service from HubSpot, Inc, 25 First Street, 2141 Cambridge, United States, email: [email protected], website: https://www.hubspot.de/. Your personal data will be transferred to so-called unsafe third countries, which do not guarantee adequate data protection under their legislation. Your data will only be transferred if adequate data protection is guaranteed. This can be ensured by:
- Contracts under international law
- Data protection clauses in a contract between the controller or processor and its contractual partner that have been notified to the EDÖB in advance
- specific security measures drawn up by the competent federal authority and communicated in advance to the EDÖB
- Standard data protection clauses that the EDÖB has approved, issued, or recognized in advance, or
- binding internal company data protection regulations that have been previously approved by the EDÖB or by a data protection authority in a country that guarantees adequate protection
If such guarantees do not exist, your data may only be disclosed if you have given your consent, if the disclosure is directly related to the conclusion or performance of a contract, or if the disclosure is necessary for the enforcement of claims before courts and authorities or for the protection of public interests. Personal data is also transferred to the USA. For the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Protection Framework of the EU Commission within the meaning of Art. 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
The legal basis for the transfer of personal data is our legitimate interest in processing in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in achieving the purpose described below.
HubSpot is a CRM platform for marketing, sales, and service. The service provides us with tools for social media marketing, content management, web analytics, customer service, and search engine optimization, among other things.
You can verify the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list .
You have a right to object to the processing of your data, as set out in Article 21 of the GDPR. Further information can be found at the end of this privacy policy.
Further information on how the transmitted data is handled can be found in the provider's privacy policy at https://legal.hubspot.com/de/privacy-policy.
Legally compliant Legal text snippet and module
On our website, we use the Legally ok legal text snippet service and modules provided by Legally ok GmbH, Schochenmühlestrasse 6, 6340 Baar, Switzerland, email: [email protected], website: https://www.legally-ok.com/. Processing takes place exclusively in Switzerland in accordance with the data protection legislation applicable there. Processing also takes place in a third country outside the EU. There is an adequacy decision by the Commission for this third country. On the EU Commission website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de).
The legal basis for the transfer and processing is Art. 31 para. 1 DSG and Art. 6 para. 1 lit. c GDPR. Using the service helps us to comply with our legal obligations.
With the help of this service, the content of our legal texts is downloaded onto our website. The latest legal texts are downloaded via integration on our site. This integration also allows additional technical modules relating to the legal texts or legally required elements to be downloaded.
You can read about your rights regarding processing at the end of this privacy policy.
Further information on how the transmitted data is handled can be found in the provider's privacy policy at https://www.legally-ok.com/datenschutz/.
Information about the use of cookies
Scope of personal data processing
We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. Cookies are small text files that your browser can store on your access device. These text files contain a characteristic string of characters that uniquely identifies the browser when you return to our website. The process of storing a cookie file is also referred to as "setting a cookie." Cookies can be set by both the website itself and external web services.
Legal basis for the processing of personal data
Art. 6 ff. FADP (principles) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest) and Art. 6 para. 1 lit. a and Art. 9 para. 2 lit. a GDPR (consent) are decisive.
You can see which legal basis is relevant in the cookie table listed further down in this section.
In general, for cookies that are collected on the basis of a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated therein (technically necessary cookies). In addition, cookies may increase user-friendliness and enable a more personalized approach. Here, we have weighed up your interests against ours.
With the help of cookie technology, we can only identify, analyze, and track individual website visitors if the website visitor consents to the use of cookies in accordance with Art. 6 para. 6 FADP or Art. 6 para. 1 lit. a GDPR.
Purpose of data processing
Cookies are set by our website or external web services to maintain the full functionality of our website, improve user experience, or pursue the purpose specified with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, e.g., an individual or random ID, so that we can offer more personalized services. Details can be found in the table below.
Duration of storage
The cookies listed below are stored in your browser until they are deleted or, in the case of session cookies, until the session has expired. Details are provided in the table below:
| Cookie name | server | supplier | purpose | legal basis | Duration of storage | Type |
|---|---|---|---|---|---|---|
| Google Recaptcha | www.google.com | Google reCaptcha | The Google Recaptcha cookie checks whether the user is a real person or a bot. To this end, Google ReCaptcha analyzes extensive user data in order to make the most accurate assessment possible. | consent | approx. 6 months | analytics |
| __cf_bm | .hubspot.com | Hubspot | Cloudflare places the __cf_bm cookie on end-user devices that access customer websites protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for these bot solutions to function properly. The cookie contains information used to calculate Cloudflare's proprietary bot score and, if anomaly detection is enabled in Bot Management, a session identifier. The information in the cookie (except for time-related information) is encrypted and can only be decrypted by Cloudflare. | Legitimate interest | approx. 31 minutes | safety |
| __cf_bm | .hsforms.net, .hsforms.com | HubSpot Forms by HubSpot | Cloudflare places the __cf_bm cookie on end-user devices that access customer websites protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for these bot solutions to function properly. The cookie contains information used to calculate Cloudflare's proprietary bot score and, if anomaly detection is enabled in Bot Management, a session identifier. The information in the cookie (except for time-related information) is encrypted and can only be decrypted by Cloudflare. | Legitimate interest | approx. 31 minutes | safety |
| __hs_cookie_cat_pref | be-brave.ag | Website operator | We use the cookie to store the cookie preferences of our website visitors and to ensure that only cookies for which the website visitor has given their consent to data processing are set and processed on our website. | Compliance with legal obligations | approx. 6 months | cookie banner |
| __hssc | be-brave.ag | Hubspot | This cookie stores the domain, the number of visitors, and the time when visits began. It therefore determines whether the number of sessions needs to be increased. | consent | approx. 31 minutes | analytics |
| __hssrc | be-brave.ag | Hubspot | This cookie measures whether the visitor has restarted their browser, thereby determining whether it is a new visit to the website. | consent | meeting | configuration |
| __hstc | be-brave.ag | Hubspot | This cookie stores the domain, user token, time of first, last, and current visit, and number of sessions on the site. | consent | approx. 6 months | analytics |
| _cfuvid | .hubspot.com | Hubspot | This cookie is part of the services offered by Cloudflare, including load balancing, website content delivery, and DNS connection provision for website operators. It is used for rate limiting to distinguish individual users who have the same IP address. | consent | meeting | configuration |
| _cfuvid | .hsforms.com | HubSpot Forms by HubSpot | This cookie is part of the services offered by Cloudflare, including load balancing, website content delivery, and DNS connection provision for website operators. It is used for rate limiting to distinguish individual users who have the same IP address. | consent | meeting | configuration |
| _icl_visitor_lang_js | be-brave.ag | Website operator | This cookie is used to determine the origin of the visitor based on their IP address and to set the language of the website based on the origin of the page view. | consent | approximately 24 hours | configuration |
| hubspotutk | be-brave.ag | Hubspot | This cookie is used by HubSpot to track visitors to the website. | consent | approx. 6 months | analytics |
| wp-wpml_current_language | be-brave.ag | Website operator | The cookie stores language settings or recognizes the browser's language and directs the user of this website directly to the corresponding multilingual content. | consent | meeting | configuration |
| wpml_browser_redirect_test | be-brave.ag | WPML (OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong Special Administrative Region) | This cookie is set and read to determine whether the browser allows cookies to be set. | consent | meeting | configuration |
Right to object, withdraw consent, and erasure
You can configure your browser according to your preferences so that cookies are generally prevented from being set. You can then decide on a case-by-case basis whether to accept cookies or allow them in principle. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to store recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until revocation.
Data security and data protection, communication by email
Your personal data is protected during collection, storage, and processing by technical and organizational measures so that it is not accessible to third parties. In the case of unencrypted communication by email, complete data security cannot be guaranteed during transmission to our IT systems, so we recommend encrypted communication or postal mail for information that requires a high degree of confidentiality.
Duration of data storage and rights of the data subject
Duration of storage
We only store personal data to the extent and for as long as necessary to fulfill the purposes for which the personal data was collected, we have a legitimate overriding interest in storing the data, or we are legally obliged to do so.
Right to information
You have the right to request confirmation as to whether we process personal data about you. If this is the case, you have the right to information in accordance with Art. 25 ff. DSG or Art. 15 para. 1 GDPR, provided that the information cannot be refused, restricted, or postponed by the owner of the data collection (cf. Art. 26 f. DSG or Art. 15 para. 4 GDPR). We will also be happy to provide you with a copy of the data.
Right to rectification
In accordance with Art. 32 (1) DSG or Art. 16 GDPR, you have the right to request the correction of inaccurate personal data (e.g., address, name, etc.), provided that there is no legal obligation to the contrary. You can also request that the data we store be completed at any time. Any necessary corrections will then be made immediately.
Right to erasure
According to Article 17 (1) of the GDPR, you have the right to request that we delete the personal data we have collected about you if
- the data is either no longer required;
- the legal basis for processing has ceased to exist without replacement due to the withdrawal of your consent;
- there are no longer any legitimate reasons for processing the data;
- Your data is being processed unlawfully;
- a legal obligation requires this.
According to Article 17 (3) of the General Data Protection Regulation, this right does not apply if
- the processing is necessary for exercising the right of freedom of expression and information;
- Your data was collected on the basis of a legal obligation;
- processing is necessary for reasons of public interest;
- the data is necessary for the assertion, exercise, or defense of legal claims.
Right to restriction of processing
According to Art. 18 (1) GDPR, you have the right to request the restriction of the processing of your personal data in individual cases.
This is the case when
- the accuracy of the personal data is contested by you;
- the processing is unlawful and you do not agree to the erasure;
- the data is no longer required for the purpose of processing, but the collected data is used to assert, exercise, or defend legal claims;
- an objection to the processing has been lodged in accordance with Art. 21 (1) GDPR and it is still unclear which interests prevail.
Right of withdrawal
If you have given us your express consent to process your personal data (Art. 6 para. 6 DSG and Art. 31 para. 1 DSG; Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), you can revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of the consent until it is revoked. Information for which we are legally obliged to retain data will be deleted after the expiry of the retention period.
Right to object
In accordance with Art. 21 of the GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6 (1) f of the GDPR (within the scope of a legitimate interest). If you have given us your express consent to process your personal data (Article 6(6) of the GDPR and Article 31(1) of the GDPR), you may revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of the consent until its revocation. You only have this right if there are special circumstances that argue against storage and processing. Information that we are legally obliged to retain will be deleted after the retention period has expired.
How can you exercise your rights?
You can exercise your rights at any time by contacting us using the contact details below:
BE BRAVE AG
Blegi 3
6343 Risch-Rotkreuz
Switzerland
Email: [email protected]
Right to data portability
In accordance with Article 20 of the General Data Protection Regulation, you have the right to receive your personal data. We will provide the data in a structured, commonly used, and machine-readable format. The data can be sent either to you or to a responsible person designated by you.
We will provide you with the following data upon request:
- Data collected on the basis of consent (Art. 31 para. 1 DSG and Art. 6 para. 1 lit. a GDPR);
- Data that we have received from you within the scope of existing contracts (Art. 31 para. 2 lit. a DSG as well as Art. 6 para. 1 lit. b GDPR and Art. 9 para. 2 lit. a GDPR);
- Data that has been processed as part of an automated procedure.
We will transfer personal data directly to a controller of your choice, provided this is technically feasible. Please note that we will not transfer data that affects the overriding interests of third parties, or will only do so to a limited extent, in accordance with Art. 26 (1) b DSG or Art. 20 (4) GDPR.
Reports to the EDÖB and the possibility of filing a complaint
According to Art. 49 DSG, data subjects may file a report with the supervisory authority if there are sufficient grounds to believe that data processing may violate data protection regulations. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
For further information, please use the EDÖB contact form: https://www.edoeb.admin.ch/edoeb/de/home/deredoeb/kontakt.html
If you suspect that your data is being processed unlawfully on our website, you can have the matter clarified in court in accordance with Art. 32 FADP. As a rule, legal action should be sought in accordance with Art. 28 ff. CC. If you are affected by the processing of data by federal authorities, the procedure is governed by Art. 41 DSG. In this case, you can also contact the EDÖB (see the note on the contact form above).
Right to lodge a complaint with the supervisory authority pursuant to Art. 77(1) GDPR
If you suspect that your data is being processed unlawfully on our site, you can of course seek legal clarification of the matter at any time. In addition, you have every other legal option available to you. Regardless of this, you have the option of contacting a supervisory authority in accordance with Article 77 (1) of the GDPR. You have the right to lodge a complaint in accordance with Art. 77 GDPR in the EU member state of your residence, your place of work, and/or the location of the alleged infringement, i.e., you can choose the supervisory authority to which you wish to refer from the above-mentioned locations. The supervisory authority to which the complaint has been lodged will then inform you of the status and outcome of your submission, including the possibility of a legal remedy in accordance with Art. 78 GDPR.