[![Kuvvu](https://www.kuvvu.ch/images/kuvvu-logo.svg)](https://www.kuvvu.ch/index.html#top) - [Über uns](https://www.kuvvu.ch/index.html#about) - [Digitalisierung](https://www.kuvvu.ch/index.html#%23digitization) - [Arbeiten](https://www.kuvvu.ch/index.html#works) - [Kontakt](https://www.kuvvu.ch/index.html#contact) - [Über uns](https://www.kuvvu.ch/index.html#about) - [Digitalisierung](https://www.kuvvu.ch/index.html#%23digitization) - [Arbeiten](https://www.kuvvu.ch/index.html#works) - [Kontakt](https://www.kuvvu.ch/index.html#contact) # Imprint & Privacy policy ## Imprint Company headquarters Kuvvu GmbH c/o Stieger Treuhand AG Neuhofstrasse 5 8645 Jona Switzerland Commercial register of the canton of St. Gallen UID CHE-253.377.875 Swiss VAT CHE-253.377.875 MWST Authorized representative managing director Simon Jenny Kuvvu GmbH is the owner and operator of this website. Kuvvu GmbH objects to the use of any contact addresses published on this website for advertising purposes. ### Privacy policy With this **privacy policy**, we inform you about the personal data we process in connection with our **activities and operations**, including our **kuvvu.ch website**. We specifically inform you about why, how, and where we process personal data. We also inform you about the rights of individuals whose data we process. For individual or additional activities and operations, additional privacy policies and other legal documents such as Terms and Conditions (AGB), Terms of Use, or Participation Terms may apply. 1\. Contact addresses Responsibility for processing personal data: **Simon Jenny** Kuvvu GmbH c/o Stieger Treuhand AG Neuhofstrasse 5 8645 Jona Switzerland [info@honeykuvvu.ch](https://www.kuvvu.ch/en/contact.html) In individual cases, there may be other data controllers responsible for processing personal data or joint responsibility with at least one other data controller. **Data protection officer** We have the following data protection officer as a point of contact for data subjects and authorities for inquiries related to data protection: **Simon Jenny** Kuvvu GmbH c/o Stieger Treuhand AG Neuhofstrasse 5 8645 Jona Switzerland [info@honeykuvvu.ch](https://www.kuvvu.ch/en/contact.html) 2\. Terms and legal basis 2.1 Terms **Personal data** is *any* information relating to an identified or identifiable natural person. An **affected person** is a person about whom we process personal data. **Processing** includes *any* handling of personal data, *regardless* of the means and methods used, such as querying, comparing, adapting, archiving, storing, extracting, disclosing, obtaining, capturing, collecting, deleting, disclosing, arranging, organizing, storing, altering, disseminating, linking, destroying, and using personal data. 2.2 Legal basis We process personal data in accordance with Swiss data protection law, in particular the [Federal Act on data protection](https://www.fedlex.admin.ch/eli/oc/2022/491/en) (Data Protection Act, DPA) and the [Ordinance on data protection](https://www.fedlex.admin.ch/eli/oc/2022/568/en) (Data Protection Ordinance, DPO). 3\. Type, scope and purpose We process those personal data which is *necessary* to be able to carry out our activities and operations permanently, user-friendly, securely and reliably. Such personal data may include categories of inventory and contact data, browser and device data, content data, meta or marginal data and usage data, location data, sales data as well as contract and payment data. We process personal data for the *duration* necessary for the respective purpose or purposes, or as required by law. Personal data that is no longer necessary for processing will be anonymized or deleted. We may have *third parties* process personal data. We may process or transfer personal data jointly with third parties. These third parties are in particular specialized providers whose services we use. We also ensure data protection with such third parties. We process personal data *in principle* only with the consent of the data subjects. If and to the extent that processing is permissible for other legal reasons, we may refrain from obtaining consent. For example, we may process personal data without consent to fulfill a contract, to comply with legal obligations, or to protect overriding interests. We also process personal data that we receive from third parties, obtain from publicly available sources, or collect in the course of our activities and operations, to the extent and insofar as such processing is permissible for legal reasons. 4\. Communication We process personal data to communicate with third parties. In this context, we particularly process data that a data subject provides when contacting us, for example by mail or email. We may store such data in an address book or similar tools. Third parties transmitting data about other individuals are required to ensure data protection for such affected persons. This includes ensuring the accuracy of the transmitted personal data. We use selected services from suitable providers to better communicate with third parties. We use in particular: - [**supporthub:**](https://www.supporthub.company/) Customer service; Provider: Kuvvu GmbH, supporthub by Kuvvu (Switzerland); Data protection information: [Privacy policy (Datenschutzerklärung)](https://www.supporthub.company/privacy.html). - [**bexio:**](https://www.bexio.com/en-CH/) Customer-Relationship-Management (CRM); Provider: bexio AG (Switzerland); Data protection information: [Privacy Policy](https://www.bexio.com/en-CH/policies/privacy-policy), ["Cloud and data security"](https://www.bexio.com/en-CH/cloud), ["Data security - definition and measures for companies" («Datensicherheit – Definition und Massnahmen für Unternehmen»)](https://www.bexio.com/de-CH/blog/view/datensicherheit). - [**Formspark:**](https://formspark.io/) Forms service; Provider: Trampoline Software SRL (Belgium); Data protection information: [Privacy Policy](https://formspark.io/legal/privacy-policy/). 5\. Data security We take appropriate technical and organizational measures to ensure data security appropriate to the respective risk. With our measures, we ensure in particular the confidentiality, availability, traceability, and integrity of the processed personal data, but we cannot guarantee absolute data security. Access to our website and other online presence is done through transport encryption (SSL / TLS, particularly with Hypertext Transfer Protocol Secure, abbreviated HTTPS). Most browsers indicate transport encryption with a small padlock in the address bar. Our digital communication, like any digital communication *in general*, is subject to mass surveillance without cause or suspicion by security authorities in Switzerland, the rest of Europe, the United States of America (USA), and other countries. We cannot directly influence the processing of personal data by intelligence services, police agencies, and other security authorities. We also cannot rule out that individual affected persons are specifically monitored. 6\. Personal data abroad We process personal data *primarily* in Switzerland. However, we may also disclose or export personal data to other countries, especially to process or have them processed there. We may disclose personal data to all states and territories, provided that the local law ensures adequate data protection in accordance with the decision of the Swiss Federal Council. We may disclose personal data to countries whose law does not guarantee adequate data protection, provided that adequate data protection is ensured for other reasons. Adequate data protection can be ensured, for example, through appropriate contractual agreements, based on standard data protection clauses, or with other suitable guarantees. Exceptionally, we may export personal data to countries without adequate or suitable data protection if the special data protection requirements are met, such as the explicit consent of the data subjects or a direct connection to the conclusion or performance of a contract. Upon request, we will be happy to provide data subjects with information on any guarantees or provide a copy of guarantees. 7\. Rights of data subjects 7.1 Data protection claims We grant data subjects all rights in accordance with the applicable data protection law. Data subjects in particular have the following rights: - **Information:** Data subjects can request information on whether we process personal data about them, and if so, what personal data is involved. Data subjects also receive the information necessary to assert their data protection rights and ensure transparency. This includes the processed personal data itself, but also information on the purpose of processing, the duration of retention, any disclosure or transfer of data to other countries, and the origin of the personal data. - **Correction and restriction:** Data subjects can correct inaccurate personal data, complete incomplete data, and restrict the processing of their data. - **Deletion and objection:** Data subjects can have personal data deleted ("right to be forgotten") and object to the processing of their data with effect for the future. - **Data disclosure and data transfer:** Data subjects can request the disclosure of personal data or the transfer of their data to another controller. We may postpone, restrict, or deny the exercise of the rights of data subjects within the legally permissible framework. We may inform data subjects of any requirements they must fulfill to exercise their data protection rights. For example, we may refuse to provide information in whole or in part with reference to trade secrets or the protection of other individuals. For example, we may also refuse to delete personal data in whole or in part with reference to legal retention obligations. We may provide for the exercise of rights *exceptionally* costs. We inform affected persons in advance about any possible costs. We are obligated to identify data subjects who request information or assert other rights with appropriate measures. Data subjects are obligated to cooperate. 7.2 Legal protection Data subjects have the right to enforce their data protection claims through legal action or to file a complaint with the relevant data protection supervisory authority. The Data protection supervisory authority for complaints by data subjects against private controllers and federal bodies in Switzerland is the [Swiss Federal Data Protection and Information Commissioner](https://www.edoeb.admin.ch/edoeb/en/home.html) (FDPIC). 8\. Use of the website 8.1 Cookies We may use cookies. With cookies — both first-party cookies and third-party cookies from services we use — are data stored in the browser. Such stored data does not have to be limited to traditional text-form cookies. Cookies can be temporarily stored in the browser as “session cookies” or for a specific period of time as so-called permanent cookies. “Session cookies” are automatically deleted when the browser is closed. Permanent cookies have a specific storage duration. In particular, cookies allow a browser to be recognized again on the next visit to our website, and thus, for example, to measure the reach of our website. Permanent cookies can also be used for online marketing, for example. Cookies can be disabled or deleted entirely or partially at any time in the browser settings. Without cookies, our website may not be fully available. We request — at least if and to the extent necessary — active consent to the use of cookies. For cookies used for success and reach measurement or for advertising, a general objection ("opt-out") is possible for numerous services via [AdChoices](https://youradchoices.ca/) (Digital Advertising Alliance of Canada), [Network Advertising Initiative](https://optout.networkadvertising.org/) (NAI), [YourAdChoices](https://optout.aboutads.info/) (Digital Advertising Alliance) or [Your Online Choices](https://www.youronlinechoices.com/ch-de/praferenzmanagement) (European Interactive Digital Advertising Alliance, EDAA) möglich. 8.2 Logging We can log at least the following information for each access to our website and other online presence, provided that this information is transmitted to our digital infrastructure during such accesses: date and time including time zone, IP address, access status (HTTP status code), operating system including user interface and version, browser including language and version, accessed individual sub-page of our website including transferred data volume, last accessed website in the same browser window (referer or referrer). We log such information, which may also include personal data, in log files. The information is necessary to be able to provide our online presence permanently, user-friendly, and reliably. The information is also necessary to ensure data security — also by third parties or with the help of third parties. 8.3 Tracking pixels We may integrate tracking pixels into our online presence. Tracking pixels are also referred to as web beacons. Tracking pixels — including those from third parties whose services we use — are usually small, non-visible images or JavaScript-formulated scripts that are automatically retrieved when accessing our online presence. At least the same information as in log files can be recorded with tracking pixels. 9\. Social media We are present on social media platforms and other online platforms to be able to communicate with interested individuals and inform them about our activities and initiatives. In connection with such platforms, personal data may also be processed outside of Switzerland. The general terms and conditions (GTC) and terms of use, as well as privacy policies and other provisions of the individual operators of such platforms also apply in each case. These provisions in particular provide information on the rights of data subjects directly towards the respective platform, including the right to information, for example. 10\. Third party services We use services from specialized third parties to be able to carry out our activities and operations permanently, user-friendly, safely, and reliably. Such services allow us, among other things, to embed functions and content on our website. In the case of such embedding, the services used may collect the IP addresses of users at least temporarily for technically compelling reasons. For necessary security-related, statistical, and technical purposes, third parties whose services we use may process data related to our activities and operations in an aggregated, anonymized, or pseudonymized manner. This includes performance or usage data, in order to provide the respective service. 10.1 Digital infrastructure We use services from specialized third parties to access the necessary digital infrastructure related to our activities and operations. This includes hosting and storage services from selected providers. We use in particular: - [**Hetzner:**](https://www.hetzner.com/) Hosting and other infrastructure; Providers: Hetzner Online GmbH / Hetzner Cloud GmbH (both Germany); Data protection information: [Privacy Policy](https://www.hetzner.com/legal/privacy-policy/), ["Data Privacy FAQ"](https://docs.hetzner.com/general/general-terms-and-conditions/data-privacy-faq/). - [**DigitalOcean:**](https://www.digitalocean.com/) Digital infrastructure; Provider: DigitalOcean LLC (USA); Data protection information: [Privacy Policy](https://www.digitalocean.com/legal/privacy-policy/), ["Trust Platform"](https://www.digitalocean.com/trust/). 11\. Extensions for the website We use extensions for our website to be able to utilize additional features. We can use selected services from appropriate providers or use such extensions on our server infrastructure. We use in particular: - [**Botpoison:**](https://botpoison.com/) Spam protection (distinguishing between desired content from humans and unwanted content from bots and spam); Provider: Trampoline Software SRL (Belgium); Data protection information: [Privacy policy](https://botpoison.com/legal/privacy-policy/). 12\. Success and reach measurement We are trying to determine how our online offer is being used. In this context, for example, we can measure the success and reach of our activities and actions as well as the impact of third-party links to our website. For example, we can also experiment and compare how different parts or versions of our online offer are used ("A/B test" method). Based on the results of success and reach measurement, we can in particular fix errors, strengthen popular content, or make improvements to our online offer. For the purpose of measuring success and reach, in most cases, the IP addresses of individual users are stored. In this case, IP addresses are *generally* shortened ("IP masking") in order to follow the principle of data minimization through appropriate pseudonymization. BIn the case of success and reach measurement, cookies may be used, and user profiles may be created. Any user profiles that are potentially created may include information such as the individual pages visited or content viewed on our website, details about screen size or browser window size, and the — at least approximate — location. Possible user profiles are *generally* exclusively in pseudonymized form and are not used to identify individual users. Individual third-party services, where users are logged in, may be able to assign the use of our online offering to the user account or user profile of the respective service. We use in particular: - [**Trustlytics:**](https://www.trustlytics.ch/en/index.html) Success and reach measurement; Provider: Kuvvu GmbH, Trustlytics by Kuvvu (Switzerland); Data protection information: Use on own server infrastructure as well as with pseudonymized IP addresses and no use of cookies, [Privacy Policy](https://www.trustlytics.ch/en/privacy-policy.html). 13\. Final provisions We may change and supplement this privacy policy at any time. We will inform you about such changes and supplements appropriately, in particular by publishing the current privacy policy on our website. Jona, March 2024 ![Kuvvu](https://www.kuvvu.ch/images/kuvvu-logo.svg) Do it right. Do it with Kuvvu. **Kuvvu GmbH** Neuhofstrasse 5 8645 Jona Switzerland [info@honeykuvvu.ch]() [+41 55 589 6771](tel:+41-55-589-6771) © 2014 - Kuvvu GmbH | [Imprint](https://www.kuvvu.ch/en/privacy-policy.html#Imprint) & [Privacy policy](https://www.kuvvu.ch/en/privacy-policy.html#datenschutz)