Privacy Notice

v1.0 - Version as of February 23, 2024

Atelier Kroll (hereinafter “AK”, “we” or “us”) undertakes to process all personal data (hereinafter “personal data”) collected via the portal in accordance with the applicable data protection law and to take appropriate security measures to protect it from unauthorized access. In this data protection declaration, we inform you in particular about which personal data is collected and processed in connection with the use of the portal, for what purposes it is used, to whom it may be passed on and what your rights are in connection with the use of your personal data by Atelier Kroll. Personal data is all information relating to an identified or identifiable natural or legal person, e.g. surname, first name, address, e-mail address, date of birth or telephone number.

By accessing the online portal (hereinafter “portal” or “website”), you declare that you have read this privacy policy carefully and agree to the data processing described. Any questions in connection with this privacy policy can be sent at any time by e-mail to michael@atelierkroll.art. If you do not agree with this declaration, you must refrain from accessing the portal.

1. Responsible

The controller within the meaning of data protection legislation is

Atelier Kroll
Michael Kroll
Gatterächerstrasse 16
5436 Würenlos
Schweiz

Phone: 078/7124770 E-Mail: michael@atelierkroll.art

Atelier Kroll determines the purposes and means of the processing of your Personal Data and is therefore responsible for the processing and use of your Personal Data in accordance with this Privacy Policy. If you have any questions or concerns about this Privacy Policy or the processing of your Personal Data, please contact us at any time by sending an email to michael@atelierkroll.art.

2. Data processing

All personal data collected via the website is processed in accordance with the Swiss Data Protection Act. We collect and process personal data carefully and for the purposes described in this Privacy Policy. In accordance with applicable law, we may also use your personal data in ways other than those described in this Privacy Policy. In this case, we will provide you with specific privacy statements or notices at the time of collection and, if necessary, obtain your consent. We always endeavour to collect information in anonymized or pseudonymized form within the bounds of what is reasonable, so that we cannot recognize your identity.

3. Collection of personal data and purposes of data processing

3.1 Personal data transmitted automatically via the use of the portal

Atelier Kroll collects and stores information that your browser automatically transmits to us in “server log files” when you visit our website. This personal data is collected automatically and includes, for example

• IP address used (possibly in anonymized, shortened form), date and time stamp, web browser and operating system used, language and version of the browser software, websites accessed, amount of personal data transferred in each case.

This personal data is not merged with other personal data and is stored separately from any other personal data transmitted by the user. It will be deleted by us after six months at the latest.

Atelier Kroll uses the automatically collected personal data to fulfill the following purposes:

• to enable the display, operation and functionality of the portal
• to ensure the stability and security of the system
• to improve and protect our services
• for statistical purposes in the event of attacks on the network infrastructure on which the website is made available

3.2 Personal data transmitted to us by the user

Atelier Kroll collects and processes personal data that the user voluntarily transmits to Atelier Kroll via our contact e-mail address, by telephone or in any other way. This information includes, for example, the following personal data

• Surnames, first names, postal addresses, e-mail address, telephone numbers and other information that you submit to us
• Your message or request

The provision of this personal data is expressly on a voluntary basis. Without this personal data, however, we will not be able to provide the services requested by the user.

Atelier Kroll uses the personal data provided by the user to fulfill the following purposes:

• communicate with you and provide you with the best possible and personalized information you need from us (e.g. about our products and services);
• to answer your questions or requests about our products or services in the best possible way, to ask you questions and to provide additional information tailored to your request or your interests in connection with our products or services;

3.3 Legal basis of data processing

The processing of this personal data is based on the following legal bases:

• Your consent, only if it can be withdrawn at any time (e.g. when you sign up for our newsletter and other marketing communications)

If the processing is based on your consent or our legitimate interests, you can withdraw consent or object to this processing at any time by contacting us directly at michael@atelierkroll.art. Please note, however, that the withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal.

4. Recipient of personal data

Atelier Kroll takes the necessary measures to ensure that only our authorized personnel and our auxiliary persons who have the necessary knowledge have access to your personal data in order to fulfill the purposes for which your personal data was collected.

We may disclose your personal data to the following possible categories of recipients in accordance with the purposes and legal bases of processing described above, insofar as this is necessary for the intended data processing:

• Experts and other service providers of Atelier Kroll in the context of a request
• Service providers who process the personal data on behalf of and on the instructions of Atelier Kroll (so-called contract processors such as in the area of IT, hosting and support)
• Service providers, other business partners and auxiliary persons (e.g. lawyers)
• Authorities, official bodies, courts or other state institutions social media
• other parties in potential or actual legal proceedings

We select our partners and processors carefully and only if we have sufficient guarantees that they have suitable technical and organizational measures in place in accordance with the legal requirements. Our processors may only process personal data on our documented instructions. They are all subject to confidentiality requirements and may only use your personal data to the extent necessary to fulfill the purpose for which your personal data was collected, unless otherwise required by law.

5. Transfer of personal data outside the EU/EEA

The personal data collected via our e-mail address is processed on the server side. The data is not stored on the server. The email account used to contact us is michael@atelierkroll.art and is provided as a service by Amazon Webserivces (AWS). In addition, we may transfer, store and process your personal data at data locations around the world, e.g. where our third-party providers or partners are located. Therefore, we may transfer your personal data outside the European Economic Area (EEA) if this is necessary for the data processing described in this Privacy Policy in accordance with applicable law.

Where data is transferred to countries that do not ensure an adequate level of protection, we ensure an adequate level of data protection by putting in place appropriate safeguards, such as contractual safeguards (e.g. based on EU standard clauses), based on binding corporate rules, the transfer of data in accordance with your explicit consent, for the conclusion or performance of a contract with you, or in connection with the establishment, exercise or enforcement of legal claims. For more information about our appropriate safeguards, please contact us by email at michael@atelierkorll.art.

6. Duration of storage of personal data

In principle, personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected, unless longer storage is necessary to fulfill legal obligations (e.g. storage and documentation obligations), contractual or pre-contractual obligations or our legitimate business interests (e.g. to assert, exercise or defend legal claims). On this basis, we generally process personal data in compliance with the following rules and obligations:

• The personal data automatically transmitted by you through the use of our portal (see point 3.1.) for the purpose of displaying, operating and ensuring the functionality of the portal will be deleted within three to six months.
• The personal data you transmit to us in connection with the use of our services and products offered on our portal or which you otherwise transmit to us via the e-mail contact address (see point 3.2.) will generally be stored by us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed).
• For contract-related personal data (including business documents and communications), we store personal data for as long as the contractual relationship exists and thereafter for a further ten years after termination of the contractual relationship, unless (i) a shorter or longer statutory retention obligation applies in individual cases, (ii) retention is required for reasons of proof or for another valid reason under applicable law, or (iii) deletion of the data is required earlier (e.g. because the data is no longer required or we have to delete the corresponding data).

7. Cookies

When you access or use the Website, we may place so-called cookies - small text files - or similar tools on your computer. We use these cookies to recognize you as a user of the website, to customize content, to improve the performance of the website and to make it more user-friendly.

7.1 Categories of cookies we use

Depending on their function and purpose, the cookies we use can be divided into the following categories: functional cookies, performance cookies and advertising cookies.

• Functional cookies: These cookies serve a variety of purposes for the presentation, functionality and performance of a website and, in particular, to improve the experience and enjoyment of visitors to the website. They allow a website to remember information already provided (e.g. user name, location or language selection) and offer visitors improved, more personalized features. Functional cookies are used, for example, to remember things like your login details. These cookies cannot track your movement on other websites.
• Performance cookies: These cookies are used to collect information about how a website is used - for example, how visitors arrived at our website, which pages a visitor opens most often, how you navigated our website during your visit and whether you receive error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, such as how many visitors have come to our website. These cookies are used to monitor the level of activity on the website and to improve the performance of the website.
• Advertising cookies allow us or a third party provider to serve ads on our website or on third party websites with products that the user likes, so that the ads the user sees may be more relevant to the user’s preferences or interests (sometimes referred to as “targeting cookies”). They can also be used to evaluate the effectiveness of advertising and promotions.

These cookies may be placed by us or by a third party on our behalf. You can find more information about cookies and their use at: http://www.allaboutcookies.org/.

The legal basis for data processing results from your consent (Art. 6 para. 1 lit. a GDPR) or our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR). Our legitimate interest follows from our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.

You can configure your browser settings so that no cookies are stored on your computer. If you deactivate cookies completely, you may not be able to use all the functions of our website. You can find out how to manage (including deactivating) cookies in the most important browsers by following the links below:

• Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Internet Explorer: https://support.microsoft.com/de-de/help/17442/- windows-internet-explorer-delete-manage-cookies
• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

By continuing to use our website and/or agreeing to this privacy policy, you consent to cookies being set by us and thus to personal usage data being collected, stored and used, even beyond the end of the browser session. You can revoke this consent at any time by activating the browser setting to refuse third-party cookies.

7.1.1 Google Analytics

Atelier Kroll uses the website analysis service of Google Analytics on its website, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The cookies used by Google Analytics are stored on your computer and enable your use of the website to be analyzed.

We use Google Analytics on the basis of our legitimate interests to analyze and regularly improve our website and to use the statistics obtained to regularly improve our offer and make it more interesting for you. Furthermore, the use of Google Analytics is based on your consent to the tracking of your surfing behavior on our websites and their analytical evaluation.

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. These cookies may contain the following information, for example IP address, number, date and time of the visit, duration of the visit, your access page from which you use the website (reference URL), the pages visited on our website, browser type/version and operating system used. Google will use this information on our behalf because we have a legitimate interest in the analysis of user behavior so that we can optimize the offer on our website as well as our advertising. Google uses this information to evaluate the use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Pseudonymized user profiles can also be created from the processed personal data.

We have activated the IP anonymization function on this website, i.e. the “anonymizeIp = 1” switch is set on the Google Analytics API. See Google Analytics Help: https://support.google.com/analytics/answer/2763052?hl=de This means that your IP address will be shortened by Google within member states of the European Union, in other signatory states to the Agreement on the European Economic Area and in Switzerland before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of personal data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this personal data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, or within browsers on mobile devices, you can prevent the collection of your personal data by Google Analytics by clicking on the following link: Deactivate the collection of personal data by Google Analytics for this website. In this case, a special opt-out cookie will be placed on your device that prevents the future collection of your user data when you visit this website. If you delete your saved cookies, you must click this link again.

You can find further information on the handling of user personal data at Google Analytics in Google’s personal data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.

It is also possible that Google may check the use of the website by the user and possibly combine the personal data collected with other information about the user that Google has independently collected from other websites visited by the user and use this for its own purposes (e.g. to control advertising) on its own responsibility on the basis of its own privacy policy. Further information on this and how Google processes personal data can be found in Google’s privacy policy: https://policies.google.com/?hl=de; https://policies.google.com/technologies/partner-sites.

Below you will find a complete list of the cookies we use or will use on this website, including information about their use and expiry.

8. Social-Media-Plug-ins

We use the social plug-ins below on our website to make our company better known. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Responsibility for data protection-compliant operation must be guaranteed by the respective provider. Data processing in connection with these plug-ins takes place with your consent when you use these plug-ins. If you use the services of these social networks independently of or in connection with our website, the social networks will evaluate your use of the plug-in. In this case, information about the plug-in is forwarded to the social networks.

8.1 Youtube

Our website uses the plug-in of the social network YouTube, which is offered by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

Personal data (such as the IP address or browser type) is only sent to the social media provider when the user activates the social media plugin by clicking on the selected plugin. The user can therefore choose when to activate it. In this case, the social media provider can establish a direct connection to the user during the user’s visit to the website, which enables the provider to know the user’s visit and to analyze the corresponding information. The further processing of personal data is the responsibility of the social media provider in accordance with the data protection laws and the data protection guidelines published on its website at www.youtube.com or at https://policies.google.com/privacy?hl=de. Please read the social network’s privacy policy carefully for detailed information on the collection and transfer of personal data, your rights and how you can achieve satisfactory privacy settings.

10. Safety and security

Atelier Kroll has implemented organizational and technical measures to maintain the security of personal data and to protect it against unauthorized or unlawful processing, accidental loss, alteration, disclosure or access.

Atelier Kroll may use third parties as data processors to collect and process your personal data. The data processors we engage will only process your personal data in accordance with our instructions and are required by law to take strict security precautions when handling personal data.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. For this reason, you are always free to transmit your personal data to us by other means, e.g. by telephone. Once we have received your data, we apply strict procedures and stringent security measures to prevent unauthorized access.

11. Data protection declarations of third-party providers

Please note that if you click on the link to a third-party website (e.g. Google or social media or other websites), you will be redirected to a website that we do not control and our Privacy Policy will no longer apply.

Your browsing and interaction on another website is subject to the terms of use and privacy policies and notices of those third party websites. Furthermore, we cannot guarantee the accuracy and timeliness of these links.

We encourage you to carefully read the terms of use and privacy policies and notices of other websites before submitting any personal data through this website. We are not responsible or liable for the information content and data processing of such third-party websites.

12. Children

Our website is not intended for children and we do not knowingly collect personal data from children under the age of 16 unless we have the express consent of their parents. If we are notified or otherwise learn that personal information of a child under the age of 16 has been improperly collected, we will take all reasonable steps to delete that personal information.

13. Your rights

You have the right to assert your data protection rights at any time and to obtain information about your stored personal data, to correct or supplement it, to object to the processing of your personal data or to request the deletion of your personal data, providing proof of your identity. To do so, please send an e-mail to michael@atelierkroll.art.

Please note that even after a request to delete your personal data, we must retain all or part of it within the scope of the statutory and contractual retention obligations. The deletion of your personal data may mean that you can no longer use our services.

14. Changes to the data privacy statement

Atelier Kroll reserves the right to adapt, supplement or otherwise change this personal data protection declaration at any time and without giving reasons. The current personal data protection declaration as published on the portal shall apply.