Privacy

General Information / Introduction

The privacy policy of Pilatushof AG, Hirschmattstrasse 15, P.O. Box, 6002 Lucerne, Switzerland (hereinafter “pilatushof.ch”) applies to all users whose personal data is processed by pilatushof.ch. This applies to customers who have entered into a service contract with Pilatushof AG, its employees and website visitors. The privacy policy may also apply to other contractual partners on a contractual basis.

Pilatushof AG is responsible for the secure and responsible handling of its customers’ personal information. It ensures that data is protected and that the Swiss Data Protection Act (DSG) is complied with for data relating to Swiss customers, and the EU General Data Protection Regulation (GDPR) for data relating to customers from the EU. Customers have the right to withdraw their consent to this privacy policy at any time with future effect.

In accordance with Article 13 of the Swiss Federal Constitution and data protection regulations, you are entitled to the protection of your privacy and personal data. The operators of this website regard the protection of your personal data as extremely important. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Together with our hosting providers, we work to protect the databases as effectively as possible against unauthorised access, loss, misuse or manipulation.

Please note that there may be security risks associated with data transmission over the internet, for example when communicating via email or contact forms. It is not possible to completely protect data from access by third parties.

By using this website, you consent to the collection, processing and use of data in accordance with the description below. Generally, no registration is required to visit this website. Data such as pages visited or file names, date and time are stored on the server for statistical purposes without this data being directly linked to you personally. Where personal data (e.g. name, address or email addresses) is collected on our website, this is always done on a voluntary basis wherever possible. This data will not be passed on to third parties without your express consent.

1. Contact details

The data controller is:

Pilatushof AG
Hirschmattstrasse 15
P.O. Box
6002 Lucerne
Switzerland

The Data Protection Officer at Pilatushof AG is available to answer any questions regarding data protection.

2. Legal Basis

Data processing by pilatushof.ch is subject to the applicable legal provisions.

The processing of data relating to customers from Switzerland is carried out in accordance with Swiss data protection laws.

The processing of data relating to customers from Switzerland is governed exclusively by Swiss law, in particular the Federal Act on Data Protection (FADP, SR 235.1) and the associated Ordinance to the Federal Act on Data Protection (SR 235.11)
. The EU General Data Protection Regulation (GDPR) does not apply. However, the GDPR may apply in specific areas of this privacy policy where expressly provided for, and in special circumstances where it is mandatory for data relating to Swiss customers.

The processing of personal data of customers from the EU is subject to the provisions of the EU General Data Protection Regulation (GDPR).

In addition to the applicable Swiss law, the processing of personal data of customers from the EU also falls under the European Union’s General Data Protection Regulation (GDPR) in accordance with Regulation (EU) 2016/679. Further provisions for customers from the EU can be found in paragraph 13.

3. Collection of personal data when visiting our website (without logging in):

When visiting the website outside the protected login area, general technical visit information is automatically collected. This includes the IP address of the device used, which is anonymised by Google so that it cannot be linked to the customer. Google uses the method ‘_anonymizeIp()’ for this purpose. Information regarding the browser type, internet service provider and operating system is also collected.

When using pilatushof.ch (with login)

During the trial access and paid use of pilatushof.ch within the login area, all customer data entered or submitted during the registration and usage process is stored. This includes registration, orders, the completion of online forms, participation in surveys or competitions, and communication with the provider via social media, blogs or other interactive media. As a rule, personal data such as name, address and email address, as well as the settings required for the respective service, are collected. Further information on data processing and its purposes can be found in the data processing agreement. By providing the data, the customer consents to the processing, use and disclosure of personal data for the purposes described in this privacy policy.

Data sharing with third parties / data processors

The customer may share their data with third parties, such as their employees or partners, either directly or via pilatushof.ch. By granting access rights, the customer agrees that pilatushof.ch may make all of the customer’s data available to third parties (e.g. employees or partners) or grant them access to it. The customer retains full control over third parties’ access rights to their data at all times and may restrict or deny access at any time. In addition, pilatushof.ch offers the option for the third party (e.g. an employee or partner) to open an account as a customer themselves. In this case, the third party, employee or partner manages the access rights and may grant, restrict or deny them to other third parties. However, pilatushof.ch reserves the right to disclose certain data to authorised third parties in justified individual cases.

Consultancy services from third-party providers

pilatushof.ch offers customers consultancy services from third-party providers.
The following data is passed on to verify the customer’s authorisation and to provide the necessary contact information to the third-party providers: name/company name, address (street, postcode, town, additional address details), contracts concluded between pilatushof.ch and the customer, telephone numbers and email addresses. Please refer to the current version of the privacy policy of the respective third-party providers.

Additional partner functions

When using additional optional partner functions of pilatushof.ch or connecting one’s own account to a partner via the API, data is exchanged between pilatushof.ch and the relevant partner.

4. Data security

The provider implements technical and organisational security measures in accordance with recognised market standards to protect stored personal data from accidental, unlawful or unauthorised manipulation, deletion, alteration, access, disclosure, use or partial or complete loss. The provider’s servers are located in Switzerland. The connection to the servers is established via SSL encryption. The provider regularly backs up customer data to prevent data loss even in extreme cases. The requirements of the DSG and the GDPR are complied with in full at all times. Security measures are continuously adapted and improved in line with the latest technological standards. The provider accepts no liability for the loss of data or for its disclosure to and use by third parties. The provider cannot guarantee the security of data transmission over the internet. In particular, there is a risk of third-party access when data is transmitted via email. However, access is via HTTPS. If expressly requested, the customer may opt for two-factor authentication at any time.

5. Purposes of data processing / Data recipients

pilatushof.ch uses the data collected to continuously improve products and services, manage access to applications, information and products, maintain business relationships with customers, monitor and improve the performance of the service, detect, prevent or investigate illegal activities, and provide customers with offers, information or marketing material regarding potentially interesting products or services. The data may also be passed on to partner companies, service providers, selected third parties, institutions and/or legally authorised government authorities for these purposes. Where the processing or storage of personal data takes place in countries that do not guarantee an adequate level of data protection in comparison with Swiss data protection law, pilatushof.ch shall ensure contractually that the data processors comply with the relevant provisions of the Swiss Data Protection Act (DSG) or the General Data Protection Regulation (GDPR), insofar as this concerns the data of customers from the EU. pilatushof.ch commissions data protection-compliant service providers within the EU or Switzerland to carry out specific processes and services, particularly in the areas of IT services, payment transactions, printing services, billing, debt collection, consultancy, sales and marketing.

6. Processing of personal data

Personal data refers to any information relating to an identified or identifiable natural person. A data subject is a person whose personal data is being processed. Processing encompasses any handling of personal data, regardless of the means and methods used. This includes, in particular, the storage, disclosure, collection, erasure, retention, alteration, destruction and use of personal data.

We handle personal data in accordance with Swiss data protection laws. Where the EU GDPR applies, we also process personal data in accordance with the legal bases set out in Article 6(1) of the GDPR.

In general, we process your data for the following purposes:

• To fulfil and carry out obligations set out in a contract or by law.
• To inform you of updates or changes to our offers or events, as well as amendments to our Terms and Conditions, privacy policies and guidelines relating to how you may advertise on our portals and websites.
• To verify your access authorisation and to manage your user account (if applicable).
• To prevent fraud and misuse.
• To develop and maintain customer relationships.
• For marketing purposes by pilatushof.ch, which includes all sales promotion measures, such as newsletters, telephone, online advertising, SMS and push notifications. Your data is also used for market research, analysis, surveys and statistical purposes.
• To tailor offers to your needs and improve them.
• To analyse user behaviour.

Below, we have provided a detailed list of the data processed in connection with our services, the purposes for which we process it, and the legal basis for such processing.

6.1 Access to our services

When you use our services without providing any further details, general technical visit data is automatically collected and stored in log files. This technical information includes, amongst other things, the IP address of the device used to access the site, information on the browser type, internet service provider and operating system used, which pages on our website were accessed, referring and exit pages, as well as the duration and time of access.

General demographic data is collected to enable the use of our website (establishing a connection), to ensure the security and stability of our systems and services, and to analyse the use of our services and offerings. Furthermore, data is collected for internal statistical purposes, during which no personal data is recorded. The user is not identified. If you already have a registered user account or use certain functions as a guest, such as our contact form or enquiry functions, this automatically collected information and personal data may be linked to analyse the use of our services and to collect general demographic data, as well as to enable the optimisation of our website.

Messages that you send to third parties (e.g. advertisers) via a corresponding function on our portal may be stored by us, including their content. You may also use free services on our portal. Personal data disclosed when using a free service, such as an email address or telephone number, may be used by Pilatushof AG for marketing and analysis purposes, for example.

When you visit our services and personal data is processed for the purposes described above, this is done in our legitimate interest to facilitate the establishment of a connection and to ensure the security and stability of our systems and services. It also serves to analyse, statistically evaluate, adapt and improve the use of our services, as well as to optimise our website.

6.2 Creating a user account

First name, surname, email address and password. This data will be treated confidentially and used only for the stated purpose. You can change or delete your personal data at any time by accessing your user account. By registering, you agree to our Terms of Use and Privacy Policy.

In addition to the mandatory details required to use a specific service, you have the option to voluntarily enter and save further personal information. When registering, you must confirm that the details of your user account are correct.

We use your data for the administration and delivery of our digital services, as well as to verify the plausibility of information. The data is used for the establishment, management, amendment and fulfilment of contracts concluded via your user account, as well as for proper invoicing should you make use of paid services. We process your data in accordance with applicable data protection laws.

6.3 Services

We collect statistical data whilst registered users are using our service. This data is collected to ensure the smooth functioning of our platform and to analyse and optimise our services and offerings. The data collected includes, amongst other things, your use of our digital services as well as the features and advertising you engage with. Our aim is to further develop, optimise and improve our services in order to safeguard our legitimate interests in accordance with applicable data protection law.

Statistical data may be visible to other registered users when you use our service as a registered user. This data is only made available to other registered users in aggregated or anonymised form.

6.4 Paid Services

To purchase or receive a paid service, you must provide personal data such as your first and last names, full address (postal address, postcode and town), and possibly further details (e.g. delivery address, billing address, payment information, etc.). We require this data in accordance with applicable data protection regulations to fulfil the contract with you. If you choose an online payment option such as credit card, Stripe, TWINT or PayPal, payment is processed via the respective provider’s online payment system. Personal and payment data are processed directly by the payment system provider. We have no knowledge of your payment details and do not store them. The data protection regulations of the relevant online payment system also apply.

The data we collect from you for the purchase or receipt of a paid service may be used in your user account for future purchases or contract conclusions in accordance with our internal archiving and data protection guidelines or legal requirements.
We use this data to optimise, improve and further develop our offering, for marketing purposes and for statistical purposes. In this context, all information relating to your previous and current purchases and contracts (such as products, services, number of products and services per purchase, and payment amount) may be stored.

6.5 Contact via chat or contact form

If you contact our customer service team, we may process your contact details (such as title, first name and surname, telephone number, email address or postal address) and the content of the conversation in order to respond to your enquiry. This is done to provide you with an appropriate response and to process your enquiry correctly. We rely on our legitimate interest in accordance with applicable data protection law. If you have given your consent, consultations with customer service may be recorded and stored for training and quality assurance purposes.

If you fill in a contact form or use a chat function on our website, we will process the personal data you enter, such as title, first name and surname, telephone number, email address or postal address, as well as the content of your enquiry. This is done for the purpose of providing information and to process your enquiry appropriately, based on our legitimate interest and in accordance with applicable data protection law.

6.6 Competitions or prize draws

We use the data you have voluntarily provided, such as title, first name and surname, email address and postal address, to organise and run events, as well as to notify and/or publish winners, either directly or via social media. There is also a possibility that your data may be passed on to third parties, for example if the organisation or evaluation of the event has been commissioned by a third party or if the event is being handled by a third party via our services.

6.7 User surveys

If you voluntarily take part in a user survey conducted by us, we collect personal data from you, such as title, first name and surname, contact details and other information requested as part of the survey. We use the data you provide exclusively to improve the user experience and to further develop our products, which constitutes a legitimate interest on our part (in accordance with applicable data protection law). The results of the surveys consist exclusively of aggregated and anonymous data.

6.8 Analysis and Marketing

By registering, contacting us via a form on our website or placing an order as a guest, we may use your data for personalised advertising, including digital advertising across various channels. You may unsubscribe from our newsletter at any time, and we will only send you newsletters regarding similar offers or if you have expressly consented. We do not require separate consent for personalised advertising and content on our and affiliated websites, nor for the marketing of our products, as this is in our legitimate interest.

However, we will seek your consent before sharing data with affiliated companies or shareholders. We use various analytics tools to evaluate user data and analyse user behaviour. To do this, we use historical and future data and may draw on publicly available data as well as data from third-party providers to improve our database. The results of the analysis may also be used by other companies.

We automatically create user profiles to enable targeted communication, which we may share with other pilatushof.ch entities if you consent.

We use your data for analytical purposes to improve our digital offerings and make them more secure. In doing so, we aim to tailor our offerings to our customers’ needs, keep them competitive and ensure the security of our services. When you register for a user account, you are automatically subscribed to our newsletter and your email address may be used to promote similar offers until you unsubscribe. We may engage data processors to technically implement advertising measures and process data on our behalf. In doing so, the data will only be used for the purposes mentioned above.

6.9 Fraud prevention and legal disputes

We may process your collected data in our legitimate interest in accordance with applicable data protection law to protect our business and to enforce or assert our claims in the event of fraud or legal disputes. Furthermore, we may process your data to comply with our legal obligations under the relevant data protection law.

7. Cookies

Cookies help to make your visit to the pilatushof.ch website easier, more enjoyable and more meaningful. These are information files that are automatically stored by the web browser on your computer’s hard drive when you visit the pilatushof.ch website and use its services. You have the option to manage your browser’s security settings and thereby block or disable cookies. However, this may mean that certain services offered by pilatushof.ch can no longer be used to their full extent.

Tracking and analysis tools / Social media

Various technical systems, mainly from third-party providers such as Google Analytics, are used to measure and evaluate the use of pilatushof.ch’s digital offerings. These measurements may be carried out anonymously or on a personal basis. There is a possibility that the data collected by pilatushof.ch or the third-party providers of such technical systems may be passed on to third parties both domestically and abroad. The best-known and most frequently used analysis tool is Google Analytics, a service provided by Google Inc. In this context, the data collected may generally be transferred to a Google server in the USA or to another location designated by Google and stored there.

The pilatushof.ch website uses Google Analytics, a web analytics service provided by Google Inc., based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043). Google Analytics uses cookies, which are text files stored on the customer’s computer that enable an analysis of website usage. The information generated by the cookies regarding website usage (including the IP address, which is, however, anonymised by Google prior to storage) is transmitted to a Google server in the USA or to another location specified by Google and stored there. Google will use this information to evaluate website usage, compile reports on website activity for pilatushof.ch, and provide other services relating to website and internet usage. Google may also transfer this information to third parties where required by law or where such third parties process the data on Google’s behalf. Google will never associate the IP address with any other data.

The pilatushof.ch website also uses the “demographic features” of Google Analytics. This enables reports to be generated that contain information about the age, gender and interests of customers. This data is derived from Google’s interest-based advertising and visitor data from third-party providers. It cannot be attributed to any specific individual. Customers can disable this feature via the ad settings in their Google account or generally prohibit the collection of their data by Google Analytics. Further information on this can be found in Google’s privacy policy.

If a customer does not wish their website activity to be tracked by Google Analytics, they can install the browser add-on to disable Google Analytics. This prevents activity data from being shared with Google Analytics via the JavaScript (ga.js, analytics.js and dc.js) executed on websites. The use of the add-on does not affect the analysis of data by other tools used by the website operator. Data may still be sent to the website or other web analytics services.

Finally, pilatushof.ch collects certain information via its website in server log files, which are automatically transmitted by the customer’s internet browser. This information includes the user agent (browser type and version, operating system used), HTTP header data (referrer URL, IP address of the accessing computer), time of the server request and login status. These server log files are used solely for error analysis in conjunction with other data sources.

Data collection and analysis for advertising purposes

The provider’s website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. Google Inc., with its registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), is the provider.

This feature enables the advertising target groups created by Google Analytics Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. This allows interest-based, personalised advertising messages, which have been tailored based on the customer’s previous usage and browsing behaviour on one device (e.g. mobile phone), to also be displayed on another device (e.g. tablet or PC).

Provided the customer has given Google their consent for this, Google links the web and app browsing history to the customer’s Google Account. This allows the same personalised advertising messages to be displayed on any device on which the customer logs in with their Google Account.

To support this function, Google Analytics collects authenticated user IDs, which are temporarily linked to data from pilatushof.ch in order to define and create audiences for cross-device advertising.

The customer can permanently opt out of cross-device remarketing by disabling personalised advertising in their Google account. Here is the link: https://www.google.com/settings/ads/onweb/

Further information can be found in Google’s privacy policy at: https://www.google.com/policies/technologies/ads/

The pilatushof.ch website also uses the online advertising programme Google AdWords. Google Inc., with its registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, is the provider.

As part of Google AdWords, pilatushof.ch uses what is known as conversion tracking. When a customer clicks on an advert placed by Google, a cookie for conversion tracking is set. These small text files are stored by the web browser on the customer’s computer. These cookies expire after 30 days at the latest and are not used for identification purposes. If the customer visits our website and the cookie has not yet expired, Google and pilatushof.ch can recognise that the customer clicked on the advert and was redirected to this page.

pilatushof.ch receives from Google only the total number of users who clicked on its advert and were redirected to its website, which is tagged with a conversion tracking tag. However, pilatushof.ch does not receive any information that would allow it to personally identify customers.

The customer can prevent the storage of cookies by adjusting the settings in their browser software. However, pilatushof.ch points out that in this case, it may not be possible to use all the functions of this website to their full extent. The customer also has the option of preventing tracking by deactivating the Google Conversion Tracking cookie via the user settings of their internet browser.

Further information can be found in Google’s privacy policy at: https://www.google.de/policies/privacy/

The pilatushof.ch website also uses Facebook’s visitor action pixel. The provider is Facebook Inc., based at 1601 S. California Ave, Palo Alto, CA 94304, USA.

The Facebook pixel makes it possible to track the behaviour of website visitors after they have been redirected to the pilatushof.ch website by clicking on a Facebook advertisement. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous to pilatushof.ch. pilatushof.ch cannot draw any conclusions regarding the identity of customers. However, the data is stored and processed by Facebook in such a way that a link to the respective user profile can be established. Facebook may use the data for its own advertising purposes in accordance with the Facebook Data Use Policy and enable the display of advertisements on Facebook pages and outside of Facebook. pilatushof.ch has no influence over the use of this data.

The customer can permanently opt out of remarketing by deactivating the ‘Custom Audiences’ remarketing function in their ad settings via the following link, provided they are logged into Facebook: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

If the customer does not have a Facebook account, they can disable Facebook’s usage-based advertising on the European Interactive Digital Advertising Alliance website via the following link: http://www.youronlinechoices.com/de/praferenzmanagement/

Further information can be found in Facebook’s privacy policy at: https://www.facebook.com/about/privacy/.

Integration of third-party services / social media

The digital services offered by pilatushof.ch are linked in various ways to third-party functions and systems. In particular, we integrate plug-ins from social networks such as Facebook and Twitter. If you, as a customer, have a user account with these third parties, it is possible that they may also measure and evaluate your use of our digital services. In doing so, further personal data, such as your IP address, browser settings and other parameters, may be transmitted to these third parties and stored there. It is beyond our control which personal data is collected by these third parties and whether they carry out anonymisation. We therefore accept no responsibility or liability for the use of such data by third parties.

YouTube plugins are also integrated into our website. The provider of these plugins is YouTube LLC, based at 901 Cherry Ave., San Bruno, CA 94066, USA. The YouTube plugin establishes a connection to YouTube’s servers. In doing so, YouTube is informed which pages of our site you have visited. If you are logged into your YouTube account at the time, YouTube can directly associate your browsing behaviour with your personal profile. To prevent this, please log out of your YouTube account.

For further information, please refer to YouTube’s privacy policy: https://www.google.de/intl/de/policies/privacy.

Other Tools

The pilatushof.ch website uses the Google Maps mapping service via an interface. The provider of this service is Google Inc., based at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When the customer uses the functions of Google Maps, their IP address is recorded by Google and is usually transmitted to a Google server in the USA. pilatushof.ch has no influence over this transmission of data. For detailed information, please refer to Google’s privacy policy at the following link: https://www.google.de/intl/de/policies/privacy/. Our website benefits from the integration with the renowned Google Maps service. This enables us to offer our customers a high-quality and user-friendly map function. To make this possible, we have opted to use the Google Maps API. Google Inc., based in Mountain View, California, is the provider of this comprehensive map and navigation service. The company is one of the world’s largest technology firms and is renowned for its innovative online solutions. When our customers use the functions of Google Maps, their IP address is recorded by Google. Generally, this data is stored and transferred to a server operated by Google Inc. in the United States of America. As pilatushof.ch, we have no direct influence over this data transfer. As you are aware, data transfers abroad involve certain risks, particularly with regard to data protection and data integrity.
However, Google has implemented extensive security measures to ensure that our customers’ personal data is adequately protected.

For more detailed information on how Google handles personal data and on data transfers to the USA, please refer to Google’s Privacy Policy. You can view this at the following link: https://www.google.de/intl/de/policies/privacy/ . We recommend that you read this privacy policy carefully to gain a comprehensive understanding of how your data is handled. Data protection and data security are our top priorities. Accordingly, we have chosen a reliable partner such as Google, which adheres to the highest standards of security and data protection. We always strive to ensure our customers can use our website in the best and safest way possible. However, should you have any concerns or questions regarding data protection, we are happy to assist you. Please do not hesitate to contact us. We will take your concerns seriously and help you with any questions you may have.

8. Profiling / Automated Decision-Making

Profiling refers to the automated process of analysing or predicting certain personal characteristics or behaviours based on personal data. This enables us to provide customers with more personalised support and advice, and to tailor our offers more effectively to their individual needs.

‘Automated individual decisions’ are defined as decisions that are made entirely automatically, without significant human intervention, and which may have adverse legal or similarly negative consequences for the customer. Pilatushof AG does not, as a rule, carry out automated individual decision-making. Should pilatushof.ch make automated individual decisions in specific cases, it will inform customers of this separately. In such a case, the customer has the option of having this decision manually reviewed by a member of staff at pilatushof.ch.

9. Communication via electronic mail (email) and/or newsletters is checked and corrected.

In order to subscribe to the newsletter offered by pilatushof.ch, pilatushof.ch requires the customer’s email address as well as further information to verify that the email address provided is correct and that the customer has consented to receiving the newsletter (double opt-in procedure). Through the newsletter, the customer receives regular recommendations and offers that may be of interest to them. For this purpose, personal data is collected and processed relating to the customer’s usage behaviour on the website, within Pilatushof AG and in relation to the newsletter (e.g. opening the newsletter, clicking on web URL links). pilatushof.ch analyses this data for statistical purposes in order to better tailor the content of the newsletter to customers’ interests.

The processing of the personal data that the customer enters when subscribing to the newsletter is based on their consent, which they may withdraw at any time with future effect. Withdrawal can be effected via the “Unsubscribe” link in the newsletter. The personal data collected is used for the content design and dispatch of the newsletter. pilatushof.ch stores the personal data provided by the customer when registering for the newsletter until the customer unsubscribes from the newsletter.

10. Retention period for personal data

pilatushof.ch stores and processes the personal data collected from the customer for as long as the customer uses the service. It should be noted that the contractual relationship between Pilatushof AG and the customer is long-term. Upon termination of the contractual relationship, pilatushof.ch is generally not obliged to retain the customer’s data. Therefore, data no longer required is regularly deleted. However, certain data may continue to be retained due to legal requirements or for internal purposes.

11. Links to external websites

The pilatushof.ch website contains links to third-party websites that are not under the control or responsibility of pilatushof.ch. Pilatushof AG accepts no responsibility for the content and data protection practices of these websites.

12. Access, rectification, erasure, restriction, declaration of consent

In accordance with the General Data Protection Regulation (GDPR) and the relevant provisions of the Swiss Data Protection Act, the right to carry out a further assessment applies where necessary.

• The right to erasure of data (based on Art. 17 GDPR) is reviewed and corrected.
• The right to rectification of inaccurate data (based on Art. 5(2) DSG or Art. 16 GDPR) is reviewed and corrected.
• The right to access personal data (based on Art. 8 FADP and Art. 15 GDPR) is reviewed and corrected.
• The right to object to the processing of data (based on Art. 21 GDPR) is reviewed and corrected.
• The right to restrict the processing of data (based on Art. 18 GDPR) is reviewed and corrected.
• The right to data portability (based on Art. 20 GDPR) is reviewed and corrected.

Please note that these rights may be subject to restrictions and may be supplemented by national data protection law or other legal provisions.

If the customer is asked to give their consent in connection with the services of pilatushof.ch, they may grant this consent by ticking the relevant checkbox. Pilatushof AG is entitled to collect, process, use and disclose the customer’s personal data in accordance with their consent. The customer may withdraw their consent at any time without this affecting the lawfulness of the data processing carried out prior to the withdrawal. The withdrawal may be sent in writing to the address of pilatushof.ch stated in the legal notice. However, please note that withdrawal may result in restricted access to certain services and functions.

13. Additional provisions for customers from the EU

These provisions apply exclusively to customers from the EU and do not apply to customers from Switzerland.

Legal basis for data processing

Processing for the stated purposes is carried out on the basis of the GDPR for the performance of a contract. The subject matter of the contract comprises the services mentioned above.
Data processing to protect the legitimate interests of pilatushof.ch is also carried out in accordance with the methods described above for the improvement of products and services, for monitoring and improving performance, and for the detection, prevention or investigation of unlawful activities. Data processing to fulfil legal obligations (GDPR) includes, in particular, the processing of master data. If the customer considers that the stated purposes are not covered by the stated legal bases, they may request that their personal data no longer be processed for specific purposes (opt-out). However, such an opt-out does not affect the continued use of the services of pilatushof.ch, unless such use strictly requires corresponding data processing. The customer may submit an opt-out request in writing to the address of pilatushof.ch specified in the document.

14. Security measures

14.1. Pilatushof AG implements security measures to prevent the loss, misuse or unauthorised alteration of information and personal data.

14.2. The customer is aware that transmissions over the internet are not secure. Once Pilatushof AG has received the transmitted information, it secures it appropriately within its systems.

15. Amendments to the Privacy Policy

Pilatushof AG reserves the right to amend this Privacy Policy at any time in accordance with legal requirements.

16. Disclaimer

The content available on this website is for information purposes only and does not constitute legal advice. Any liability for potential damages arising from the use of the website or the information available on it is excluded. In particular, we accept no liability for the timeliness, completeness or accuracy of the content.

Right to lodge a complaint with a supervisory authority

If the customer believes that their personal data is being processed in accordance with the GDPR, they have the right, pursuant to Article 77 of the GDPR, to lodge a complaint with a competent supervisory authority. Pilatushof AG is available to the customer to address any questions or concerns prior to lodging a complaint. The customer may contact Pilatushof AG in writing or by email.

Last updated: 20 April 2026