Note on the validity of this privacy policy
This privacy policy applies both to Löwe Apartment GmbH (Switzerland) and to Martin und Franziska Löwe GbR (Germany). Both companies operate this website jointly. The measures and information described in the following privacy policy therefore apply equally to both companies.
Privacy policy
We appreciate your visit to our website loeweapartments.ch and your interest in our company.
The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit our site. Our data protection practice is in accordance with the legal regulations of the Federal Act on Data Protection (DSG) of Switzerland and the General Data Protection Regulation of the EU (GDPR). The following privacy policy serves to fulfill the information obligations arising from the DSG and the GDPR. These can be found, for example, in Art. 19 ff. DSG and Art. 13 ff. of the GDPR.
Owner or person responsible
The person responsible within the meaning of Art. 5 letter j DSG or Art. 4 No. 7 GDPR is the person who, alone or jointly with others, decides on the purposes and means of processing personal data. The person responsible according to Art. 4 No. 7 GDPR is also the recipient of the personal data within the meaning of Art. 4 No. 9 GDPR. Any third-party recipient will be identified separately.
With regard to our website, the owner or person responsible is:
Löwe Apartment GmbH
Spinnereistrasse 12
8192 Glattfelden
Switzerland
E-Mail: info@loeweapartments.ch
Phone: +41765363300
Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the accessing device (e.g. computer, mobile phone, tablet, etc.).
Which personal data is collected and to what extent is it processed?
(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Host name of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) that were accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Message as to whether the retrieval was successful;
(9) Amount of data transferred
This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, so that individual page visitors are not identified.
Legal basis for the processing of personal data
The processing of personal data takes place according to the principle of lawfulness (Art. 6 para. 1 DSG) and according to the requirement of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest).
Purpose of data processing
The temporary (automated) storage of the data is necessary for the course of a website visit in order to enable delivery of the website. The storage and processing of personal data also takes place to maintain the compatibility of our website for as many visitors as possible and to combat misuse and eliminate faults. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, the data is used to optimize the website and to generally ensure the security of our information technology systems.
Duration of storage
The aforementioned technical data will be deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.
Possibility of restriction, objection, correction and deletion
You can request the restriction of processing in accordance with Art. 18 GDPR or object to the processing in accordance with Art. 21 GDPR, as well as request a correction or deletion of the data in accordance with Art. 16 or 17 GDPR at any time. You can find out which rights you have and how to assert them in the lower section of this data protection declaration.
Special functions of the website
Our site offers you various functions, during the use of which personal data is collected, processed and stored by us. Below we explain what happens to this data:
Contact form(s)
Which personal data is collected and to what extent is it processed?
The data you enter in our contact forms, which you have entered in the input mask of the contact form.
Legal basis for the processing of personal data
The processing of personal data takes place according to the principle of lawfulness (Art. 6 Para. 1 GDPR) and according to the requirements of good faith (Art. 6 Para. 2 GDPR or Art. 2 ZGB) as well as Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR (consent through clear confirming action or behavior or explicit consent).
Purpose of data processing
We will only use the data collected via our contact form(s) to process the specific contact request received through the contact form. Please note that in order to fulfill your contact request, we may also send you emails to the specified address. This is for the purpose of you receiving confirmation from us that your request has been correctly forwarded to us. However, sending this confirmation email is not mandatory for us and is only for your information.
Duration of storage
After processing your request, the collected data will be deleted immediately, provided that there are no legal retention periods.
Possibility of restriction, objection, correction and deletion
You can request the restriction of processing in accordance with Art. 18 GDPR or object to the processing in accordance with Art. 21 GDPR, as well as request a correction or deletion of the data in accordance with Art. 16 or 17 GDPR at any time. You can find out which rights you have and how to assert them in the lower section of this data protection declaration.
Necessity of providing personal data
The use of the contact forms is voluntary. You are not obliged to contact us via the contact form, but can also use the other contact options specified on our site. If you would like to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the necessary information on the contact form, you will either not be able to send the request or we will not be able to process your request due to a lack of information.
Disclosure of information to third parties
The processing of personal data takes place according to the principle of lawfulness (Art. 6 Para. 1 GDPR) and according to the requirements of good faith (Art. 6 Para. 2 GDPR or Art. 2 ZGB).
The disclosure of information to third parties depends on the scope of activities or offers of our website or our business model described below.
In principle, we only keep your information for as long as necessary and treat it confidentially. Excluded from this are the transfer of personal data to debt collection service providers, to public bodies and authorities as well as to private individuals, who have a claim to it due to legal regulations, court decisions or official orders, as well as the transfer to authorities for the purpose of initiating legal proceedings or for criminal prosecution purposes, if our legally protected rights are attacked.
Statistical evaluation of visits to this website - web tracker
When you access this website or individual files on the website, we collect, process and store the following data: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and notification of the success of the access (so-called web log). We use this access data exclusively in non-personalized form for the continuous improvement of our website and for statistical purposes.
The processing of any personal data takes place according to the principle of lawfulness (Art. 6 Para. 1 GDPR) and according to the requirements of good faith (Art. 6 Para. 2 GDPR or Art. 2 ZGB). We also use the following web trackers to evaluate visits to this website:
Google
We use the Google service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: https://www.google.com/.
Processing takes place in secure third countries according to the assessment of Swiss authorities. You can find the list of countries of Switzerland and further information under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer.The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.
We use Google to be able to reload further services from Google on the website. The service is used to provide further Google services, such as the required data processing for the provision of streams and fonts and relevant content from Google Search. It is technically required to be able to exchange the information about the page visitor already available to Google between the Google services and to be able to provide the page visitor with individual content adapted to his Google account.
For processing itself, the service or we collect the following data: Background data that is stored about the page visitor in the Google user account or in other Google services, background data for the provision of Google services such as streaming data or advertising data, data about the page user's handling of Google Search, information about the end device used, the user's IP address and browser, and other data from Google services for the provision of Google services related to our website.
If the service is activated on our website, our website connects to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Doubleclick, Google Cloud, and Google Ads and Google Fonts in accordance with the Google data protection declaration. You can access the provider's certification within the framework of the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can revoke your consent at any time. You can find more information on how to revoke your consent either in the consent itself or at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Google Maps
We use the Google Maps service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: https://www.google.com/.
Processing takes place in secure third countries according to the assessment of Swiss authorities. You can find the list of countries of Switzerland and further information under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer.The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.
On our behalf, Google will use the information obtained via Google Maps to show you the map. With Google Maps you can find us faster and more accurately than with a simple non-interactive map. The corresponding data is also used to assign the page visitors who view our Google Maps map, if necessary with the help of the Google advertising ID, and to link them with physical visits and calls to further contact information listed on Google. In this way, Google can make an assessment of the expected visitor flows.
For processing itself, the service or we collect the following data: Data that is required for the visualization and presentation of location data in the form of a map, such as in particular IP address, information from Google background services such as Google Apis, search terms, IP address, coordinates, when using the route planner starting point and destination, location data, Google advertising ID, Android advertising ID.
We have concluded a contract with Google for joint processing with regard to Google Maps. You can find the content at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/. If the service is activated on our website, our website connects to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be processed by the Google services Google Apis, Google Cloud and Google Fonts in accordance with the Google data protection declaration under the data protection responsibility of Google. You can access the provider's certification within the framework of the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can revoke your consent at any time. You can find more information on how to revoke your consent either in the consent itself or at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Gstatic
We use the Gstatic service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: https://www.google.com/.
Processing takes place in secure third countries according to the assessment of Swiss authorities. You can find the list of countries of Switzerland and further information under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer.The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.
Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and load required catalog files in advance. In particular, the service loads background data for Google Fonts and Google Maps.
As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. You can access the provider's certification within the framework of the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can revoke your consent at any time. You can find more information on how to revoke your consent either in the consent itself or at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Integration of external web services and processing of data outside the EU
We use active content from external providers, so-called web services, on our website. When you visit our website, these external providers may receive personal information about your visit to our website. This may involve processing data outside of Switzerland and the EU. You can prevent this by installing a corresponding browser plugin or deactivating the execution of scripts in your browser. This may lead to functional restrictions on websites that you visit.
We use the following external web services:
CloudFlare
We use the CloudFlare service of the company Cloudflare, Inc., 101 Townsend St, 94107 San Francisco, United States, E-mail: support@cloudflare.com, website: https://www.cloudflare.com/de-de/.
Your personal data will be transferred to so-called insecure third countries, which do not guarantee adequate data protection through their legislation. Your data will only be disclosed if adequate data protection is guaranteed. This can be guaranteed in particular by: - international treaties
- Data protection clauses in a contract between the controller or the processor and its contractual partner, which have been notified to the FDPIC in advance
- Specific guarantees that the responsible federal body has developed and notified to the FDPIC in advance
- Standard data protection clauses that the FDPIC has approved, issued or recognised in advance, or
- Binding corporate internal data protection regulations that have been approved in advance by the FDPIC or by a data protection authority of a country that guarantees adequate protection
If such guarantees do not exist, your data may only be disclosed if you have given your consent to this, the disclosure is directly related to the conclusion or execution of a contract, or the disclosure is necessary for the enforcement of claims before courts and authorities or for the protection of public interests. The transfer of personal data also takes place in the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer.
The legal basis for the transfer of personal data is our legitimate interest in processing pursuant to Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.
Cloudflare is a so-called Content Delivery Network, which, in addition to distributing the website across multiple servers, also provides security functions. In addition, Cloudflare functions as a reverse proxy for our website.
You can access the provider's certification within the framework of the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
With regard to processing, you have the right to object listed in Art. 21 GDPR. You can find more information at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.cloudflare.com/privacypolicy/.
Google Cloud APIs
We use the Google Cloud APIs service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, E-mail: support-deutschland@google.com, website: https://www.google.com/.
Processing takes place in secure third countries according to the assessment of Swiss authorities. You can find the list of countries of Switzerland and further information under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer.The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.
We use Google APIs to be able to reload further services from Google on the website. Google Apis is a collection of interfaces for communication between the various Google services that are used on your website. The service is used in particular to display the Google Fonts and to provide the Google Maps map.
The service or we collect the following data for processing: IP address
If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Cloud, Google Maps, Google Ads and Google Fonts in accordance with the Google data protection declaration under the data protection responsibility of Google. You can access the provider's certification within the framework of the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can revoke your consent at any time. You can find more information on how to revoke your consent either in the consent itself or at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Google Fonts
We use the Google Fonts service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, E-mail: support-deutschland@google.com, website: https://www.google.com/.
Processing takes place in secure third countries according to the assessment of Swiss authorities. You can find the list of countries of Switzerland and further information under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer.The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.
We use the Google Fonts service to integrate attractive fonts on our site so that we can show you our website in a visually better version. The service may also be used on our website if other Google services are reloaded on our website that require Google Fonts fonts for execution. This is the case, for example, if our website uses Google services that absolutely require Google Fonts for execution.
The service or we collect the following data for processing: Data on fonts, IP address of the page visitor, statistics on the use of fonts and other data from Google services related to our website.
If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Google Cloud and Google Ads in accordance with the Google data protection declaration. You can access the provider's certification within the framework of the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can revoke your consent at any time. You can find more information on how to revoke your consent either in the consent itself or at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Google reCaptcha
We use the Google reCaptcha service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: on our website. support-deutschland@google.com, website: https://www.google.com/.
Processing takes place in secure third countries according to the assessment of Swiss authorities. You can find the list of countries of Switzerland and further information under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer.The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.
If Google reCaptcha is activated on our website, the data determined by Google reCaptcha will be transmitted to servers of Google Ireland Limited. As part of the order processing, personal data may also be transferred to the servers of the parent company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Based on specific characteristics and an analysis of the page behavior, the service recognizes whether the entries made are automated entries by means of a program (so-called bot) or by a human. The service has three different levels. Either the service automatically recognizes that the input is not automated by a bot, or it lets the user select a captcha checkbox. A third possibility is the display of small image or voice tasks / text tasks that must be solved by the site visitor. Google reCaptcha is a Capcha service that is used on our website for security reasons in order to exclude that bots (robot programs) can perform interactions on our website. Google reCaptcha verifies on our behalf that only humans and no bots can use our website. In particular, we can protect the special functions of our website (e.g. contact forms or other input options such as the login area) from abusive page access.
For processing itself, the service or we collect the following data: User behavior (e.g. mouse gestures or input behavior), IP address, browser data, computer information.
If you would like to use the input options of our website protected by Google reCaptcha, you must allow the use of Google reCaptcha and, if necessary, solve the corresponding captchas. If you do not fill out the captcha or do not allow the use of Google reCaptcha, you cannot use the form protected by the captcha. Alternatively, you can use our other contact options (e.g. post or e-mail) at any time. You can access the provider's certification within the framework of the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can revoke your consent at any time. You can find more information on how to revoke your consent either in the consent itself or at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
Legally ok
We use the Legally ok service of Legally ok GmbH, Schochenmühlestrasse 6, 6340 Baar, Switzerland, e-mail: hello@legally-ok.com, website: https://www.legally-ok.com/. Processing takes place exclusively in Switzerland in accordance with the data protection legislation applicable there. Processing also takes place in a third country outside the EU. There is an adequacy decision by the Commission for this third country. You can find an up-to-date list of all adequacy decisions on the EU Commission's website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de).
The legal basis for the transmission and processing is Art. 31 para. 1 DSG and Art. 6 para. 1 lit. c GDPR. The use of the service supports us in fulfilling our legal obligations.
With the help of the service, contents of our legal texts are reloaded on our website. The respectively current legal texts are reloaded via the integration on our site. Via this integration, further technical modules may also be reloaded with regard to the legal texts or legally necessary elements.
You can find out what rights you have with regard to the processing at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://www.legally-ok.com/datenschutz/.
SQUARESPACE
We use the SQUARESPACE service from Squarespace Ireland Ltd., Le Pole House, Ship Street Great, 8 Dublin, Ireland, email: on our website. privacy@squarespace.com, website: https://de.squarespace.com/.
Processing takes place in secure third countries according to the assessment of Swiss authorities. You can find the list of countries of Switzerland and further information under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer.The legal basis for the transfer of personal data is our legitimate interest in processing pursuant to Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.
The service is the technical system behind our website for operating our website. We need the integration so that we can display our website to you.
You can access the provider's certification within the framework of the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
With regard to processing, you have the right to object listed in Art. 21 GDPR. You can find more information at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://de.squarespace.com/privacy/.
Stripe
We use the Stripe service from Stripe Payments Europe Limited, The One Building, 1, Grand Canal Street Lower , D02 HD59 Dublin, Ireland, email: on our website. privacy@stripe.com, website: https://stripe.com/.
Processing takes place in secure third countries according to the assessment of Swiss authorities. You can find the list of countries of Switzerland and further information under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer.The legal basis for the transmission of personal data is Art. 31 para. 2 letter a DSG and Art. 6 para. 1 lit. b GDPR, the contract already concluded or yet to be concluded between you and us.
With the plugin, we can implement the services of Stripe, an online payment service provider that enables companies and individuals to accept payments over the Internet, on our website. This simplifies and automates payment processes.
You can access the certification of the parent company within the framework of the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can find out what rights you have with regard to the processing at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://stripe.com/de/privacy.
hcaptcha
We use the hcaptcha service from Intuition Machines, Inc., 2211 Selig Drive, 90026 Los Angeles, United States, email: on our website. support@imachines.com, website: https://www.hcaptcha.com/.
Your personal data will be transferred to so-called insecure third countries, which do not guarantee adequate data protection through their legislation. Your data will only be disclosed if adequate data protection is guaranteed. This can be guaranteed in particular by: - international treaties
- Data protection clauses in a contract between the controller or the processor and its contractual partner, which have been notified to the FDPIC in advance
- Specific guarantees that the responsible federal body has developed and notified to the FDPIC in advance
- Standard data protection clauses that the FDPIC has approved, issued or recognised in advance, or
- Binding corporate internal data protection regulations that have been approved in advance by the FDPIC or by a data protection authority of a country that guarantees adequate protection
If such guarantees do not exist, your data may only be disclosed if you have given your consent to this, the disclosure is directly related to the conclusion or execution of a contract, or the disclosure is necessary for the enforcement of claims before courts and authorities or for the protection of public interests. The transfer of personal data also takes place in the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer.
The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 2 DSG and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.
Through the hcaptcha service, we protect our website and in particular the input options on our website such as contact forms from bots and cyber attacks. For this purpose, the customer must solve a captcha to verify his authenticity before using our input options or is automatically checked.
You can revoke your consent at any time. You can find more information on how to revoke your consent either in the consent itself or at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider's data protection declaration at https://www.hcaptcha.com/terms.
Data security and data protection, communication by e-mail
Your personal data is protected by technical and organizational measures during collection, storage and processing in such a way that it is not accessible to third parties. In the case of unencrypted communication by e-mail, complete data security on the transmission path to our IT systems cannot be guaranteed by us, so we recommend encrypted communication or postal delivery for information requiring a high level of confidentiality.
Duration of data storage and rights of the data subject
Duration of storage
We only store personal data to the extent and for as long as this is necessary to fulfill the purposes for which the personal data was collected, we have a legitimate overriding interest in retaining it, or we are legally obliged to do so.
Right to information
You have the right to request confirmation as to whether we are processing personal data about you. If this is the case, you have a right to information about the information specified in 25 ff. DSG or Art. 15 para. 1 GDPR, insofar as the information cannot be refused, restricted or postponed by the owner of the data collection (cf. Art. 26 f. DSG or Art. 15 para. 4 GDPR). We would also be happy to provide you with a copy of the data.
Right to rectification
According to Art. 32 Para. 1 DSG or Art. 16 GDPR, you have the right to request that incorrectly stored personal data (such as address, name, etc.) be corrected, provided that there is no legal obligation to the contrary. You can also request that the data stored by us be completed at any time. A corresponding adjustment will be made immediately.
Right to erasure
You have the right under Art. 17 Para. 1 GDPR to have the personal data collected about you deleted if
- the data is no longer required;
- the legal basis for processing has ceased to exist without replacement due to the revocation of your consent;
- there are no longer any legitimate reasons for processing;
- your data is being processed unlawfully;
- a legal obligation requires this.
The right does not exist according to Art. 17 Para. 3 GDPR if
- the processing is necessary to exercise the right to freedom of expression and information;
- your data has been collected on the basis of a legal obligation;
- the processing is necessary for reasons of public interest;
- the data is required to assert, exercise or defend legal claims.
Right to restriction of processing
According to Art. 18 Para. 1 GDPR, you have the right in individual cases to request that the processing of your personal data be restricted.
This is the case if
- the accuracy of the personal data is disputed by you;
- the processing is unlawful and you do not consent to deletion;
- the data is no longer required for the processing purpose, but the data collected is used to assert, exercise or defend legal claims;
- an objection to the processing pursuant to Art. 21 para. 1 GDPR has been lodged and it is still unclear which interests prevail.
Right to revoke
If you have given us your express consent to the processing of your personal data (Art. 6 para. 6 DSG and Art. 31 para. 1 DSG; Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), you can revoke this at any time. Please note that the lawfulness of the processing carried out on the basis of the consent until revocation is not affected by this. Information for which we are legally obliged to retain will be deleted after the deadline.
Right to object
According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6 para. 1 lit. f GDPR (within the framework of a legitimate interest). If you have given us your express consent to the processing of your personal data (Art. 6 para. 6 DSG and Art. 31 para. 1 DSG), you can revoke this at any time. Please note that the lawfulness of the processing carried out on the basis of the consent until revocation is not affected by this. You are only entitled to this right if there are special circumstances against the storage and processing. Information for which we are legally obliged to retain will be deleted after the deadline.
How do you exercise your rights?
You can exercise your rights at any time by contacting us using the contact details below:
Löwe Apartment GmbH
Spinnereistrasse 12
8192 Glattfelden
Switzerland
E-Mail: info@loeweapartments.ch
Phone: +41765363300
Right to data portability
According to Art. 20 GDPR, you have the right to have the personal data concerning you transmitted. The data will be provided by us in a structured, common and machine-readable format. The data can either be sent to you or to a controller named by you.
Upon request, we will provide you with the following data:
- Data collected on the basis of consent (Art. 31 para. 1 DSG and Art. 6 para. 1 letter a GDPR);
- Data that we have received from you within the framework of existing contracts (Art. 31 para. 2 letter a DSG and Art. 6 para. 1 letter b GDPR and Art. 9 para. 2 letter a GDPR);
- Data that has been processed using an automated process.
We will transmit the personal data directly to a controller of your choice, provided this is technically feasible. Please note that we may not or may only partially transfer data that interferes with the overriding interests of third parties in accordance with Art. 26 para. 1 letter b DSG or Art. 20 para. 4 GDPR.
Notifications to the FDPIC and possibility of legal action
In accordance with Art. 49 DSG, data subjects can report to the supervisory authority if there are sufficient indications that data processing could violate data protection regulations. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
For further information, please refer to the FDPIC contact form: https://www.edoeb.admin.ch/edoeb/de/home/deredoeb/kontakt.html
If you suspect that your data is being processed unlawfully on our site, you can bring about a judicial clarification of the issue in accordance with Art. 32 DSG. As a rule, an action must be brought under Art. 28 ff. ZGB. If you are affected by the processing of data by federal bodies, the procedure is governed by Art. 41 DSG. In this case, too, you can contact the FDPIC (see the reference to the contact form above).
Right to lodge a complaint with the supervisory authority pursuant to Art. 77 para. 1 GDPR
If you suspect that your data is being processed unlawfully on our site, you can of course bring about a judicial clarification of the issue at any time. In addition, you have every other legal option open to you. Regardless of this, according to Art. 77 para. 1 GDPR, you have the option of contacting a supervisory authority. The right to lodge a complaint according to Art. 77 GDPR is available to you in the EU member state of your place of residence, your workplace and/or the place of the alleged violation, i.e. you can choose the supervisory authority to which you are обращаться from the places mentioned above. The supervisory authority with which the complaint was lodged will then inform you of the status and results of your submission, including the possibility of a judicial remedy under Art. 78 GDPR.