Privacy policy, M2 Digital GmbH

This is a summary in English. The binding version is the German Datenschutzerklärung, which is more detailed. Where the two differ, the German text applies.

Controller

M2 Digital GmbH, Stationsstrasse 4, 8274 Tägerwilen, Switzerland.
Managing director: Benjamin Münkel.
Phone +41 (0) 79 819 56 78, email info@m2-digital.ch.

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

Hosting

We host this website with Alfahosting GmbH, Edmund-von-Lippmann-Straße 13-15, 06112 Halle (Saale), Germany. The provider processes the data that arises when you visit the site on our behalf, under a data processing agreement. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in presenting this website reliably. Details are in the Alfahosting privacy policy.

What we collect

Server log files

The provider of this site automatically records and stores information in server log files, which your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the request and IP address. This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR; we have a legitimate interest in the technically error-free presentation and optimisation of our website.

Contact form

If you send us an enquiry through the form, the details you give there, including the contact data you provide, are stored with us in order to process the enquiry and in case of follow-up questions. We do not pass this data on without your consent.

The processing is based on Art. 6(1)(b) GDPR where your request relates to the performance of a contract or to pre-contractual measures. In all other cases it rests on our legitimate interest in the effective handling of enquiries, Art. 6(1)(f) GDPR, or on your consent, Art. 6(1)(a) GDPR, where this was asked for.

The data stays with us until you ask us to erase it, withdraw your consent, or the purpose for storing it no longer applies. Mandatory statutory retention periods remain unaffected.

Enquiries by email or telephone

If you contact us by email or telephone, your enquiry including all resulting personal data is stored and processed by us for the purpose of dealing with your request. The legal bases are the same as for the contact form.

Google reCAPTCHA

On our contact page and on the sign-in page we use Google reCAPTCHA. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA checks whether an entry is made by a human or by an automated program, by analysing the visitor's behaviour from various characteristics. The analysis starts automatically as soon as you enter the page. In the course of it, various information is transmitted to Google, including your IP address.

The legal basis is Art. 6(1)(f) GDPR: we have a legitimate interest in protecting our web offering against abusive automated access and against spam. Where consent was asked for, the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; consent can be withdrawn at any time.

Calendly

You can book an appointment with us through the tool Calendly. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA. The data you enter for the booking is used to plan, hold and where necessary follow up the appointment, and is stored on Calendly servers. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in offering appointments as simply as possible, or Art. 6(1)(a) GDPR where consent was asked for. Data transfer to the USA is based on the EU standard contractual clauses.

To send our newsletter we use Rapidmail. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg im Breisgau, Germany. The data you provide for the purpose of receiving the newsletter is stored on Rapidmail servers in Germany. The newsletters contain a tracking pixel that allows a statistical evaluation of whether a campaign was opened and which links were clicked.

The processing takes place on the basis of your consent, Art. 6(1)(a) GDPR. You can withdraw that consent at any time, for example through the unsubscribe link in every newsletter. The lawfulness of the processing carried out before the withdrawal is not affected. After you unsubscribe, your address is deleted from our distribution list.

Fonts

This website uses the fonts Archivo and IBM Plex Mono. Both are stored on our own server and delivered from there. No connection to Google or any other third party is made for the fonts, and your IP address is not transmitted to anyone for that purpose.

Cookies

This website sets only those cookies that are technically necessary for it to function, for example the session cookie of the customer portal. They are stored on the basis of Art. 6(1)(f) GDPR. We do not use cookies for analysis or advertising.

Storage period

Unless a more specific storage period is named above, your personal data stays with us until the purpose for processing it no longer applies. If you make a justified request for erasure or withdraw your consent, your data is deleted, unless we have other legally permissible reasons for storing it, such as retention periods under tax or commercial law. In the latter case the data is deleted once those reasons cease to apply.

Your rights

You have the following rights in relation to your personal data:

Information. Free information at any time about the origin, recipients and purpose of your stored personal data.
Rectification and erasure. The correction or deletion of that data.
Restriction of processing. Art. 18 GDPR, which you can invoke at any time.
Data portability. Data we process automatically on the basis of your consent or in performance of a contract, handed to you or to a third party in a common, machine-readable format.
Objection. Where processing rests on Art. 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. Where your data is processed for direct marketing, you may object at any time without giving reasons.
Withdrawal of consent. Many processing operations are only possible with your express consent. You can withdraw it at any time with effect for the future. The lawfulness of the processing carried out until then remains unaffected.
Complaint. A right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.

For any of these, and for other questions about data protection, you can contact us at any time at info@m2-digital.ch.

Transfers to the USA and other third countries

Among other things we use tools from companies based in the USA or other third countries that are not secure under data protection law. When these tools are active, your personal data may be transferred to and processed in those countries. We point out that in these countries no level of data protection comparable to the EU can be guaranteed. Where legally permitted, such transfers are based on the EU standard contractual clauses.

SSL and TLS encryption

For security reasons, and to protect the transmission of confidential content such as enquiries you send to us, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of your browser changing from „http://“ to „https://“ and by the padlock symbol. When it is active, the data you transmit to us cannot be read by third parties.

Objection to advertising emails

We hereby object to the use of the contact data published in the legal notice for sending advertising and information material that has not been expressly requested. We expressly reserve the right to take legal action in the event of unsolicited advertising being sent, for example by spam email.

Privacy policy