Data protection
The SWISS CLASSIC WORLD RALLYE is a trademark of MARKETINGLINK GmbH, Lidostrasse 5, CH-6006 Lucerne (hereinafter SCWR) and author of the present privacy policy. This privacy policy applies to all users if personal data is processed. This includes customers who have entered into a contract with SCWR, their employees, as well as website visitors. Additionally, SCWR may declare the privacy policy applicable to other contractual partners on a contractual basis. For simplicity, all individuals affected by data processing are referred to as "customers" below. Personal data or "data" refers to all information relating to a specific or identifiable person. SCWR is committed to handling its customers' personal information carefully and conscientiously and is responsible for collecting, processing, disclosing, storing, and protecting personal information, ensuring compliance with applicable data protection laws. If you provide us with the personal data of other individuals, make sure that these individuals are aware of this privacy policy and only provide us with their personal data if you are authorized to do so and if the personal data provided are correct.
1. Contact Details
Responsible for data processing is:
SWISS CLASSIC WORLD RALLYE
c//o MARKETINGLINK GmbH
Lidostrasse 5
CH-6006 Luzern
The data protection officer can be reached at rallye@swissclassicworld.ch.
2. Applicable Law
This privacy policy is designed to comply with the requirements of the Swiss Data Protection Act ("DSG") and the EU General Data Protection Regulation ("GDPR"). However, the applicability of these laws depends on the individual circumstances.
3. The type and scope of personal data collected
We primarily process personal data that we receive from our customers and other business partners in the course of our business relationship, as well as from other individuals involved. We also collect data from users of our websites, apps, and other applications. Where permitted, we may obtain data from publicly available sources (e.g., debt collection registers, land registries, commercial registers, press, internet) or from other companies, authorities, and third parties. In addition to the data you provide directly to us, the categories of personal data we receive from third parties about you include information from public registers, information obtained in connection with administrative and judicial proceedings, information related to your professional functions and activities (e.g., to conclude and process transactions with your employer), information about you in correspondence and meetings with third parties, credit reports (where we conduct business with you personally), information about you provided by individuals in your environment (family, advisors, legal representatives, etc.) to conclude or process contracts with you or involving you (e.g., references, delivery addresses, powers of attorney, compliance with legal requirements such as anti-money laundering and export restrictions), information from banks, insurers, distributors, and other contractual partners of ours for the provision or use of services by you (e.g., payments made, purchases made), information from media and the internet about you (where applicable, e.g., in the context of an application, press review, marketing/sales, etc.), your addresses and, if applicable, interests and other socio-demographic data (for marketing), data related to the use of the website (e.g., IP address, MAC address of the smartphone or computer, device and settings information, cookies, date and time of visit, pages and content accessed, features used, referring website, location data).
4. Purposes of data processing and legal basis
We primarily use the personal data we collect to conclude and fulfill our contracts with our customers and business partners. In addition, we process personal data from you and other individuals, as permitted and as appropriate, for the following purposes, in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:
-
Offer/development of our products and services
-
Advertising and marketing unless you have objected to the use of your data
-
Market research and opinion polling, media monitoring
If you have given us consent to process your personal data for specific purposes (for example, when signing up to receive newsletters), we process your personal data within the scope and based on this consent, provided we do not have another legal basis and we need one. A given consent can be revoked at any time, but this does not affect the legality of any processing done prior to the revocation.
5. Transfer of personal data
We disclose personal data to third parties within the scope of our business activities and for the purposes outlined above, to the extent permitted and as deemed appropriate. This may involve sharing data with third parties either because they process it on our behalf or because they intend to use it for their own purposes. These recipients may include:
-
Service providers (internal/external, e.g., payment processors), including subcontractors;
-
Retailers, suppliers, subcontractors, and other business partners;
-
Other parties involved in potential or actual legal proceedings;
-
Other companies as per Chapter 6;
These recipients are primarily located domestically but may also be located abroad. You must expect your data to be transmitted to all countries in Europe and the USA, where the service providers we use are located (such as Google Drive, Zoom, etc.). SCWR particularly engages certain data processing activities through service providers compliant with data protection laws, located within the EU or Switzerland. These include companies in categories such as IT services, payment processing, printing services, billing, debt collection, consulting, distribution, and marketing, as well as subcontractors used in processing agreements. If a recipient is located in a country without adequate legal data protection, we contractually obligate the recipient to comply with applicable data protection laws (for this, we use the revised standard contractual clauses of the European Commission, available here: eur-lex.europa.eu/eli/dec_impl/2021/914/oj?), unless it is already subject to a legally recognized framework for data protection, and we cannot rely on an exemption clause. An exception may apply, especially in foreign legal proceedings, cases of overriding public interest, or when contractual processing requires disclosure, if you have consented, or if it concerns data made generally accessible by you, for which you have not objected to processing.
6. Data exchange within the SCWR group and involved partners.
By accepting this privacy policy, the customer expressly consents to the disclosure of their data to the involved partners of SCWR as well as affiliated companies. SCWR is obligated to process all data it becomes aware of exclusively within the framework of data protection legislation and to comply with data protection regulations. SCWR is obliged to maintain the confidentiality of the data it becomes aware of.
7. Cookies
Cookies help make the visit to the SCWR website easier, more enjoyable, and more meaningful. Cookies are information files that the web browser automatically stores on the computer's hard drive when the customer visits the SCWR website and uses its services. The customer can manage the security settings in the browser independently and thereby block or deactivate cookies used, although certain services of SCWR may then no longer be able to be used (fully).
Tracking- and Analysis-Tools / Social Media
The use of SCWR's digital offerings is measured and evaluated using various technical systems, predominantly from third-party providers such as Google Analytics. These measurements can be both anonymous and personally identifiable. It is possible that the data collected by SCWR or the third-party providers of such technical systems may be passed on to third parties in Switzerland and abroad for processing. The most commonly used and well-known analytics tool is Google Analytics, a service provided by Google Inc. This means that the data collected can be transmitted to a Google server in the United States (or a location designated by Google).
The SCWR website uses Google Analytics, a web analytics service provided by Google Inc., located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," which are text files stored on the customer's computer that allow an analysis of the website's usage by them. The information generated by the cookies about the use of the website (including the IP address, which is anonymized by Google before being stored so that it cannot be associated with the customer) is transmitted to a Google server in the USA (or another location determined by Google) and stored there. Google will use this information to evaluate the use of the website, to compile reports on website activity for SCWR, and to provide other services related to website usage and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate the customer's IP address with any other data held by Google under any circumstances.
The SCWR website uses the "demographic features" function of Google Analytics. This allows reports to be generated that contain information about the age, gender, and interests of customers. These data are derived from Google's interest-based advertising and visitor data from third-party providers. These data cannot be attributed to any specific individual. Customers can disable this function at any time through the ad settings in their Google account or by generally prohibiting the collection of their data by Google Analytics. Further information can be found in Google's Privacy Policy at support.google.com/analytics/answer/6004245?hl=en. If the customer does not want their website activities to be available to Google Analytics, they can install the Google Analytics opt-out browser add-on here support.google.com/analytics/answer/181881?hl=en. This prevents activity data from being shared with Google Analytics via JavaScript executed on websites (ga.js, analytics.js, and dc.js). The analysis of data by other tools of the website owner is not prevented if the customer uses the add-on. Data may still be sent to the website or to other web analysis services. Finally, SCWR collects certain information through its website in so-called server log files, which the customer's internet browser automatically transmits. These include, among other things, the user agent (browser type and version, operating system used), HTTP header information (referrer URL, IP address of the accessing computer), the time of the server request, and the login status. These server log files are only merged for error analysis with other data sources.
Technologies for Advertising Purposes
The website of SCWR uses the features of Google Analytics Remarketing in conjunction with the cross-device capabilities of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This feature allows the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device capabilities of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to the customer's previous usage and browsing behavior on one device (e.g., mobile phone) can also be displayed on another device (e.g., tablet or PC).
If the customer has given Google appropriate consent, Google links the web and app browsing history to the customer's Google account for this purpose. This allows the same personalized advertising messages to be displayed on every device where the customer logs in with their Google account.
To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to the SCWR's Google Analytics data, to define and create target audiences for cross-device advertising.
The website of SCWR also uses the online advertising program Google AdWords. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The customer can permanently opt out of cross-device remarketing by disabling personalized advertising in their Google account (www.google.com/settings/ads/onweb). For further information, refer to Google's Privacy Policy at www.google.com/policies/technologies/ads.
As part of Google AdWords, SCWR utilizes a feature called Conversion Tracking. When a customer clicks on an ad served by Google, a cookie for Conversion Tracking is set. Cookies are small text files that the internet browser stores on the customer's computer. These cookies expire after 30 days and are not used for identification purposes. If the customer visits our website before the cookie expires, both Google and SCWR can recognize that the customer clicked on the ad and was redirected to the site.
SCWR receives from Google the total number of users who clicked on its ad and were redirected to its website with a Conversion Tracking tag. However, SCWR does not receive any information that would allow it to personally identify the customer.
The customer can prevent the storage of cookies by adjusting their browser settings accordingly. However, SCWR advises the customer that they may not be able to fully utilize all functions of this website. The customer can also prevent tracking by disabling the Google Conversion Tracking cookie through their internet browser's user settings. For further information, please refer to Google's privacy policy (www.google.com/policies/privacy).
Integration of Third-party Services / Social Media
The SCWR website also employs Facebook's visitor action pixel, provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. This pixel allows tracking of website visitor behavior after they've been directed to SCWR's site by clicking on a Facebook ad. It helps evaluate the effectiveness of Facebook ads for statistical and market research purposes, optimizing future advertising efforts. While SCWR receives this data anonymously and cannot identify individual customers, Facebook stores and processes it, potentially linking it to user profiles for their own advertising use as outlined in the Facebook Data Policy. Facebook can display ads both on and off its platform based on this data, beyond SCWR's control. Customers can opt out of remarketing by disabling the "Custom Audiences" function via this link while logged into Facebook (www.facebook.com/ads/preferences/?entry_product=ad_settings_screen). For those without a Facebook account, they can opt out of interest-based ads through the European Interactive Digital Advertising Alliance's website at www.youronlinechoices.com/de/praferenzmanagement. Further details are available in Facebook's Data Policy at www.facebook.com/about/privacy.
SCWR's digital offerings are interconnected with various third-party functions and systems, including the integration of third-party social network plugins such as Facebook, Twitter, etc. If customers have user accounts with these third parties, they may also be able to measure and evaluate the use of SCWR's digital offerings. In this process, additional personal data such as IP addresses, browser settings, and other parameters may be transmitted to these third parties and stored there. SCWR does not control the use of such personally identifiable data by third parties and assumes no responsibility or liability for it. Additionally, SCWR does not have detailed knowledge of which data is transmitted to third-party providers, where it is transmitted, or whether it is anonymized.
On the SCWR website, plugins from YouTube are integrated. The provider is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The YouTube plugin establishes a connection to YouTube's servers, informing the YouTube server of which pages of SCWR the customer has visited. If the customer is logged into their YouTube account, YouTube can directly associate their browsing behavior with their personal profile. This can be prevented by logging out of YouTube. For further information, please refer to the Data Protection Declaration (www.google.de/intl/de/policies/privacy).
Other Tools
The SCWR website uses the Google Maps mapping service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When the customer uses the functions of Google Maps, Google stores the IP address and usually transfers it to a Google server in the USA. SCWR has no influence on this data transfer. For further information, please refer to Google's Privacy Policy (www.google.de/intl/de/policies/privacy).
8. Data protection
SCWR employs technical and organizational security measures according to recognized market standards to protect stored personal data against accidental, unlawful, or unauthorized manipulation, deletion, alteration, access, disclosure, or use, as well as against partial or total loss. SCWR's servers are located in Switzerland and other countries with an adequate level of data protection, ensuring compliance with the requirements of the Swiss Federal Data Protection Act (DSG) and the EU General Data Protection Regulation (GDPR) at all times. Connections to the servers are encrypted using SSL encryption. SCWR regularly backs up customer data to prevent data loss in extreme cases, such as the destruction of a data center by an earthquake. Security measures are continuously adjusted and improved in line with technological advancements. While SCWR cannot guarantee the security of data transmission over the internet, particularly when sent via email, measures like HTTPS are employed to protect access.
9. Communication via email and/or newsletter
If the customer wishes to subscribe to a newsletter offered on the SCWR website, SCWR requires an email address and other information to verify that the provided email address is correct and that the customer agrees to receive the newsletter ("double-opt-in" procedure). With the newsletter, the customer regularly receives recommendations and offers that may be of interest. To do this, SCWR collects and processes personal data regarding the customer's usage behavior on the website and regarding the use of the newsletter (e.g., whether the customer opens the newsletter or clicks on web URLs). SCWR analyzes this data for statistical purposes to better tailor the content of the newsletter to the interests of the customers. The processing of the personal data entered in the newsletter registration form is based on the customer's consent, which they can revoke at any time for the future. Revocation can be done via the "unsubscribe" link in the newsletter. The personal data collected for the purpose of newsletter subscription is used for the content creation and distribution of the newsletter. SCWR stores the personal data provided by customers for the purpose of newsletter subscription until the customer unsubscribes from the newsletter.
10. Duration of Storage
We process and store your personal data for as long as necessary to fulfil our contractual and legal obligations or other purposes pursued with the processing, meaning for the duration of the entire business relationship (from initiation, execution to termination of a contract), as well as in accordance with legal retention and documentation obligations. This may involve retaining personal data for the period during which claims can be asserted against our company and to the extent we are otherwise legally obliged to do so or legitimate business interests require it (e.g., for evidential and documentation purposes). Once your personal data is no longer required for the purposes mentioned above, it will be deleted or anonymized, as a general rule and to the extent possible. Operational data (e.g., system logs) are subject to shorter retention periods, typically twelve months or less.
11. Information, Correction, Deletion, Blocking, Consent
In relation to personal data, customers have the following rights according to the Swiss Federal Data Protection Act (DSG) (especially Art. 25 ff. DSG) or the General Data Protection Regulation (GDPR) (especially Art. 12-23 GDPR). In principle, SCWR grants the rights contained in the GDPR to Swiss customers as well. However, SCWR reserves the right to make a different assessment on a case-by-case basis.
-
The right to information;
-
the right to rectification;
-
the right to erasure;
-
the right to restriction of processing;
-
the right to data portability; and
-
the right to object.
Please note that we reserve the right to invoke the legally provided restrictions ourselves, for example, if we are obliged to retain or process certain data, have a predominant interest in doing so (to the extent that we are entitled to rely on it), or need them to assert claims. To assert your rights, you can contact us at the address provided in Section 1. Every affected person also has the right to enforce their claims in court or to submit a complaint to the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch). SCWR naturally welcomes questions and requests from customers before filing a complaint (see contact details in Section 1).
If the customer is asked to give consent in connection with SCWR's services, they give this consent by ticking the corresponding checkbox. Subsequently, SCWR is entitled to collect, process, use, and disclose the customer's personal data accordingly.
The customer can revoke their consent at any time, without affecting the lawfulness of processing based on the consent before its withdrawal. The revocation can be sent in writing to SCWR's address mentioned above. However, an email to the address in Section 1 is also sufficient. However, some of the services and features will no longer be available to the customer thereafter.
12. Links to other websites
The SCWR website contains hyperlinks to third-party websites that are not operated or controlled by SCWR. SCWR is not responsible for their content or privacy practices.
13. Changes
We reserve the right to adjust this privacy policy at any time without prior notice. The current version published on our website shall apply.
Version 1.0 | 12-23