Privacy

Our privacy Policy and How we use Data

Privacy is important to us, so we explain below how we collect data and what we do with it. In principle, we use general data, such as access, origin, or language selection, to analyze our customers, enabling us to strategically plan new products or marketing measures. We only use detailed data, such as addresses or birth dates, when we need them for a specific purpose (registrations, newsletters, competition participation). We do not share any of this data with third parties unless necessary for the intended purpose, such as sending out a list of winners in a competition. We transparently inform wherever we collect or store data.

1. General Data Protection

Based on Art. 13 of the Swiss Federal Constitution and the federal data protection provisions, every person is entitled to the protection of their privacy and protection against the misuse of their personal data. At the cantonal level, the Information, Data Protection, and Archives Act (IDAG) of October 24, 2006, and the related ordinance (VIDAG) of September 26, 2007, govern data protection. In the city of Baden, the ordinance on information, data protection, and archives (VIDA) has been in effect since January 1, 2009. It contains supplementary and implementing provisions to cantonal law. TourismusRegion Baden AG complies with the applicable data protection regulations of the city of Baden and the relevant data protection provisions. Personal data is treated with strict confidentiality and is neither sold nor shared with third parties.

2. Technical Data Protection

In close collaboration with our hosting providers, we protect databases from unauthorized access, loss, misuse, or falsification with the utmost care. Systems for detecting intrusion attempts are also used to better protect the integrity of published data and the data transferred between users and the website. The guarantee for the integrity and confidentiality of the data is excluded as far as legally permissible. When accessing websites of TourismusRegion Baden AG, the following data is stored in log files: IP address, date, time, browser request, and general information about the operating system or the browser used by the device. This usage data forms the basis for statistical, anonymous evaluations, so that trends can be identified and the online offers of TourismusRegion Baden AG can be optimized accordingly. At the same time, the data is used for the further development and expansion of city marketing.

3. Plugins

3.1 Metaverse-Plugins

Facebook-Plugins

Websites of TourismusRegion Baden AG integrate plugins of the social network Metaverse. Facebook plugins are recognizable by the Facebook logo or the "Like" button ("Gefällt mir"). An overview of the Facebook plugins used can be found at developers.facebook.com/docs/plugins/.

When you visit our websites, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives the information that you have visited websites on www.deinbaden.ch with your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate the visit to www.deinbaden.ch with your user account. We point out that TourismusRegion Baden AG has no knowledge of the content of the transmitted data nor its use by Facebook. Further information can be found in Facebook's privacy policy at www.facebook.com/about/privacy/. If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

Instagram-Plugins

Functions of the Instagram service are integrated into our pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We point out that we, as the providers of the pages, have no knowledge of the content of the transmitted data nor its use by Instagram. Further information can be found in Instagram's privacy policy: instagram.com/about/legal/privacy/.

3.2 Elfsight-Plugins

Our provider Elfsight creates various plugins and widgets for the website (sliders, pop-ups). Only the number of accesses and the operating system are recorded. In the case of forms, the corresponding fields are additionally collected and stored. This data is not shared and is not used in detail by Elfsight for its own purposes but is only available to TourismusRegion Baden AG. More information can be found at https://elfsight.com/privacy-policy/.

3.3 Airtable

The website uses forms from the provider Airtable, which complies with GDPR standards and is ISO/IEC 27001 and SOC 2 certified. Data from the forms is used for the intended purpose and regularly deleted. Airtable does not use or share data or information collected from the forms. More information can be found at https://support.airtable.com/docs/gdpr-at-airtable.

4. Analysis Tools

4.1 Plausible Analytics

We use the analytics software Plausible Analytics ("Plausible") on our own servers to continuously optimize our offer, both technically and content-wise. Plausible is a GDPR-compliant open-source software from Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia. By using Plausible on our servers, we follow a particularly data-friendly approach to analyze your visit. Plausible collects the following information:

- Date and time of the visit
- Incoming links
- Title and URL of the visited pages
- Country in which you are located
- User Agent of your browser software

Plausible does not use or store cookies on your device. All personal data (e.g., your IP address) is fully anonymized and stored as a so-called hash. A hash is an encryption of data that is not reversible, meaning it cannot be decrypted. This way, we can analyze your visit without storing personal data in a form that would be readable by us or others. The legal basis for this processing is your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future.

4.2 Until the end of 2023: Google Analytics

General

The websites of TourismusRegion Baden AG use functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there anonymously.

IP Anonymization

We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website use and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin

You can prevent the storage of cookies by setting your browser software accordingly. However, we point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout?hl=de.

Objection to Data Collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data on future visits to this website: Disable Google Analytics. More information on how Google Analytics handles user data can be found in Google's privacy policy: support.google.com/analytics/answer/6004245?hl=de.

Demographic Characteristics with Google Analytics

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be created that contain statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This data cannot be assigned to a specific person. This function can be deactivated at any time via the ad settings in your Google account or you can generally prohibit the collection of your data by Google Analytics as described in the section "Objection to Data Collection"

5. Newsletter Brevo

If you subscribe to our newsletter, we need an email address from you as well as information that allows us to verify that you are the owner of the provided email address and agree to receive the newsletter. Additional data is not collected or is only collected on a voluntary basis. We use this data exclusively for sending the requested information and do not share it with third parties.

For sending our newsletter, we use the newsletter tool Brevo (formerly Sendinblue), operated by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Brevo offers extensive analysis options on how the newsletters are opened and used. These analyses are group-related and are not used by us for individual evaluations. More information can be found in Brevo's privacy policy.

Data Processing

The processing of the data entered into the newsletter registration form is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of data, the email address, and its use for sending the newsletter at any time, for example, via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

Storage Duration

The data you provide to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe. Data stored by us for other purposes remains unaffected.

6. Online Shop

6.1 Peppershop E-Commerce

Our online shop is implemented with the Peppershop E-Commerce product from Glarotech in 9500 Wil and is a certified Trusted Shop. Derived values such as price calculations are not transmitted via forms but are always recalculated from the data changeable by the customer. Furthermore, identifications from a value range with sufficiently high entropy are chosen for accesses (customer identification, session identification, etc.), so they are not guessable. PepperShop has been available internationally since 2001 and has been continuously adapted to comply with current legal frameworks, adhering to the EU General Data Protection Regulation (GDPR).
We collect, store, and process data in the online shop that is necessary for the processing of the purchase and any subsequent warranty processing as well as for the transmission of information about offers, updates, etc. Personal data is collected when it is voluntarily provided to us as part of the order of goods or services or when opening a customer account. Personal data is only shared by us with the service providers involved in the execution of the order, such as SIX, PostFinance, the Swiss Post, Datatrans. If the payment conditions are not met (delay in payment of an invoice issued by us), the order-related data will be passed on to the corresponding debt collection company to initiate the collection process. Payment data is encrypted over the Internet during the order process to the payment provider. More information can be found at https://www.peppershop.com/de/datenschutz/.

7. Online Payments

We use specialized service providers to process payments securely and reliably for our customers. For payment processing, the terms and conditions and privacy policies of the individual service providers apply in addition to our own.

- Payment processing in Switzerland; provider: TWINT AG (Switzerland); privacy information: "Privacy with TWINT Apps", "Privacy Policy Website", "General Terms and Conditions for the Use of TWINT" including section "Data Protection". Worldline (formerly SIX Payment Services)
- Processing of mobile and online payments; providers: Worldline Schweiz AG (Switzerland) / Worldline Financial Services (Europe) S.A. (Luxembourg) / Worldline Payment Services (Germany) GmbH (Germany) / Worldline Financial Services (Europe) S.A., Branch Office Austria; privacy information: Privacy Policy, "Customer Information on Data Protection".

 

8. Inquiries and Questions

For questions about the collection, processing, or use of personal data, for information, correction, blocking, or deletion of data as well as the revocation of given consents, we are reachable as follows:

TourismusRegion Baden AG
Badstrasse 31
5400 Baden
Phone: 056 200 15 30
E-Mail: info@deinbaden.ch

Updated: July 2024