Privacy Policy

Last updated: March 13, 2024

We place great importance on the transparent handling of personal data. This privacy policy provides information about the personal data we collect, for what purpose, and to whom we disclose it. To ensure high transparency, this privacy policy is regularly reviewed and updated.

1. Services We Use

• Cloudflare CDN

2. Contact Information

For any questions or concerns about the protection of your data by us, you can contact us at any time by email at hello@layout.ch. Responsible for the data processing that takes place via this website is:

Layout.ch
Winterholzstrasse 55
3018 Bern
Switzerland

Data Protection Officer:
Layout.ch
hello@layout.ch

3. General Principles

3.1 What data do we collect from you and from whom do we receive this data

We primarily process personal data that you transmit to us or that we collect during the operation of our website. We may also receive personal data about you from third parties. This can include the following categories:

• Personal identification data (name, address, birth dates, etc.);
• Contact data (mobile number, email address, etc.);
• Financial data (e.g., account details);
• Online identifiers (e.g., cookie identifiers, IP addresses);
• Location and traffic data;
• Audio and video recordings;
• Particularly sensitive data (e.g., biometric data or information about your health).

3.2 Under what conditions do we process your data?

We treat your data confidentially and in accordance with the purposes set out in this privacy policy. We ensure that processing is transparent and proportionate.

If we are exceptionally unable to adhere to these principles, data processing may still be lawful because a justification exists. Specifically, this may include:

• Your consent;
• The performance of a contract or pre-contractual measures;
• Our legitimate interests, provided your interests do not prevail.

3.3 How can you withdraw your consent?

If you have given us consent to process your personal data for specific purposes, we process your data within the scope of this consent, unless we have another legal basis.

You have the possibility to withdraw your consent at any time by sending an email to the address mentioned in the legal notice. This does not affect the legality of the data processing carried out before the withdrawal.

3.4 In which cases can we disclose your data to third parties?

a. Principle

We may need to use the services of third parties or associated companies and entrust them with processing your data (sub-processors). The categories of recipients are specifically:

• Accounting, fiduciary, and audit firms;
• Consulting firms (legal, tax, etc.);
• IT service providers (web hosting, support, cloud services, website design, etc.);
• Payment service providers;
• Providers of tracking, conversion, and advertising services.

We ensure that these third parties and our associated companies comply with data protection requirements and treat your personal data confidentially.

We may also be required to disclose your personal data to authorities under certain circumstances.

b. Visit to our social media channels

We may have embedded links to our social media channels on our website. This is typically visible (typically via corresponding icons). If you click on these icons, you will be redirected to our social media channels.

The social media providers then know that you are accessing their platform from our website. The social media providers can use the collected data for their own purposes. We note that we have no knowledge of the content of the transmitted data or their use by the operators.

c. Transfer abroad

In the course of processing orders, it may be necessary to transfer your personal data to companies abroad. These companies are subject to the same data protection obligations as we are. The transfer can take place worldwide.

If the level of data protection does not correspond to that of Switzerland, we carry out a prior risk assessment and ensure contractually that the same protection as in Switzerland is guaranteed (e.g., by using the new standard contractual clauses of the European Commission or other legally prescribed measures). If our risk assessment is negative, we take additional technical measures to protect your data. You can access the standard contractual clauses of the European Commission via the following link: https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_en

3.5 How long do we store your data?

We only store personal data for as long as necessary to fulfill the various purposes for which the data was collected.

Data that we store during your visit to our website is retained for twelve months. An exception applies to analysis and tracking data, which can be stored for a longer period.

Contract data is stored longer because we are legally obligated to do so. We must keep business communication, concluded contracts, and booking documents for up to 10 years. As far as we no longer need such data for the performance of services, the data is blocked and we use it only for billing and tax purposes.

3.6 How do we protect your data?

We will keep your data secure and take all reasonable measures to protect your data from loss, access, misuse, or alteration.

Our contractual partners and employees who have access to your data are obliged to comply with data protection laws. In some cases, it may be necessary to forward your inquiries to associated companies. In these cases, too, your data is treated confidentially.

Within our website, we use the SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser.

3.7 What rights do you have?

a. Right of access

You have the right to request information about the data we store about you at any time. We ask you to send your request for information along with proof of identity to hello@layout.ch.

You also have the right to receive your data in a common file format if we process your data automatically, and if:

• You have given your consent for the processing of this data; or
• The data has been disclosed in the context of the conclusion or execution of a contract.

We may limit or refuse the provision of information or data if this contradicts our legal obligations, our legitimate own or public interests, or the interests of a third party.

The processing of your request is subject to the legal processing period of 30 days. However, this period may be extended due to a high volume of requests, for legal or technical reasons, or because we need more information from you. You will be informed of any extension of the deadline in a timely manner, at least in text form.

b. Deletion and correction

You have the possibility at any time to request the deletion or correction of your data. We may reject the request if legal provisions oblige us to keep the data for a longer period or unchanged, or if a justified reason opposes your request.

Please note that the exercise of your rights may conflict with contractual agreements and have corresponding effects on contract execution (e.g., early contract termination or financial consequences).

c. Legal recourse

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch

3.8 Changes to the Privacy Policy

We may change this privacy policy at any time. Changes will be published, you will not be separately informed.

4. Individual Data Processing Operations

4.1 Provision of the Website and Creation of Log Files

What information do we receive and how do we use it?

By visiting our website, certain data is automatically stored on our servers or on the servers of services and products we obtain and/or have installed, for purposes of system administration, for statistical, backup, or tracking purposes. This includes:

• the name of your Internet service provider;
• Your IP address (if applicable);
• the version of your browser software;
• the operating system of the computer from which access to the URL is made;
• the date and time of access;
• the website from which you visit the URL;
• the search words you used to find the URL.

Why are we allowed to process this data?

These data cannot be attributed to a specific person and there is no merging of these data with other data sources. The storage of log files is carried out to ensure the functionality of the website and to ensure the security of our information technology systems. This constitutes our legitimate interest.

How can you prevent data collection?

Data is only stored for as long as necessary to achieve the purpose of their collection. Accordingly, data is deleted at the end of each session. The storage of log files is essential for the operation of the website, therefore you have no possibility to object.

4.2 Cloudflare CDN

Our website uses the Content Delivery Network (CDN) service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). A CDN helps to deliver content from our website faster by distributing copies of the content to a network of fast-loading servers.

When you visit our website, your IP address is transmitted to Cloudflare and cookies may be set in your browser, which are necessary for the optimization and security of the service. Cloudflare uses this data to speed up the traffic between our web server and your device and to protect our website against attacks.

4.3 PostHog

Our website uses PostHog, a platform for product analytics and user feedback provided by PostHog, Inc., a company based in the USA. PostHog enables us to understand user behavior on our website in detail by capturing actions such as clicks, scrolling movements, and mouse interactions. This allows us to analyze and improve the user experience on our website.

PostHog uses cookies and other data collection technologies to gather information such as IP addresses (in anonymized form), browser type, operating system, visited pages, time spent on the page, and similar information. This information is processed anonymously to identify user trends and help us continuously optimize our website.

The data collected by PostHog is stored on servers that meet high security standards and are protected by appropriate data protection measures against unauthorized access. PostHog is designed to respect user privacy, and the data is not used to personally identify individual users.

For more information on PostHog’s data protection practices, you can view the PostHog Privacy Policy.

BrainBox Generators

BrainBox Generators is a service of BrainBox Solutions GmbH to detect all data protection-related services on a website and to help among other things with the drafting of the privacy policy. No personal data is collected or processed.