Privacy Statement
1 · Controller
The controller for the processing of personal data on www.weinherbst.ch is:
Verein Weindorf Salgesch
Sennereigasse 1
3970 Salgesch
Switzerland
Telephone 027 456 39 66
Email vereinsekretariat@salgesch.ch
Send any data protection matter and any request under section 13 to the same address.
2 · Scope
This statement applies to the website www.weinherbst.ch.
Separate statements apply to salgesch.ch and to the ticketing system. The controller in all cases remains Verein Weindorf Salgesch.
3 · Legal basis
Processing follows the Swiss Federal Act on Data Protection and its ordinance. For data subjects in the European Union, the General Data Protection Regulation applies in addition, insofar as it is applicable.
We process personal data for a defined purpose and limited to what is necessary. Processing follows the principle of good faith.
Use of the website and the purchase of tickets remain possible without consent to measurement and advertising.
4 · Processing when visiting the website
Accessing the website generates technical records. They arise in the operation of any website and are necessary for delivery.
The following are processed:
- IP address
- date and time of access
- resource requested and volume of data transferred
- browser identifier, operating system and language setting
- referring address, where transmitted
The purposes are secure operation, fault resolution and defence against abusive access. The basis is our overriding interest in the proper operation of the website.
Processor for operation and delivery
Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
Delivery runs through data centres located in Europe. [TO BE CONFIRMED] delivery region and retention period of the records.
Processor for domain, name resolution and email
Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil, Switzerland
[TO BE CONFIRMED] scope of services following a check of the DNS entries.
5 · Consent
On first access, consent to measurement and advertising is obtained. Refusal takes the same effort as acceptance.
Without consent, no third-party services are loaded.
Your decision is stored locally in your browser. It is revocable at any time, through the "Cookie settings" link in the footer.
[TO BE CONFIRMED] retention period of the consent record. Proposal: six months.
6 · Audience measurement
After consent is given, Google Analytics 4 is used. The purpose is the evaluation of usage and the assessment of how well our content works.
Provider
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Processed in particular are the shortened IP address, pages viewed, time spent, device characteristics and approximate location at regional level. Processing in the United States is possible.
The embedded services are controlled through Google Tag Manager. The Tag Manager itself collects no personal data. It loads downstream services only after consent is given.
[TO BE CONFIRMED] retention period in Google Analytics. Proposal: fourteen months.
7 · Advertising and performance measurement
After consent is given, we measure the effect of our advertising. The purpose is the attribution of ticket purchases to the advertisement that triggered them.
Google Ads
Google Ireland Limited, address as in section 6. Identifiers are set to link the advertising contact with the conclusion.
Meta pixel
Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. The pixel runs in the browser through the Tag Manager. The visit to our website is transmitted.
Where a session on Facebook or Instagram is open, attribution to that account is possible. You find the settings for this in your Meta account.
With both providers, processing in the United States is possible.
[TO BE CONFIRMED] retention period of the advertising identifiers. Commonly ninety days.
8 · Embedded map
The route map is supplied by a mapping service. It loads only after consent is given. Beforehand, a placeholder area with a button is shown.
On loading, the IP address and technical device characteristics are transmitted to the provider.
Provider: Atlist [TO BE CONFIRMED] full company name and registered office.
9 · Ticket purchase
Ticket purchase runs on a separate interface. On switching, you leave this website.
The controller there remains Verein Weindorf Salgesch. Processing on that interface follows the statement of the ticketing system. Required consents are obtained there separately.
10 · Contacting us
Where you contact us by email or telephone, we process the details submitted in order to handle the matter.
Retention lasts for the duration of the handling. The details are then deleted, unless statutory retention duties require otherwise.
11 · Disclosure abroad
Some of the services named process personal data outside Switzerland, in particular in the European Union and the United States.
The disclosure rests on the standard contractual clauses of the European Commission. They apply with the adaptations of the Federal Data Protection and Information Commissioner for Switzerland.
12 · Retention periods
Personal data are retained for as long as the respective purpose requires.
| Subject | Period |
|---|---|
| Technical records on access | [TO BE CONFIRMED] |
| Consent record in the browser | [TO BE CONFIRMED], proposal six months |
| Data in Google Analytics | [TO BE CONFIRMED], proposal fourteen months |
| Advertising identifiers from Google and Meta | [TO BE CONFIRMED], commonly ninety days |
| Details from contact requests | duration of the handling |
13 · Rights of the data subject
You hold the following rights:
- access to the processing of your personal data
- rectification of inaccurate personal data
- erasure or destruction of your personal data
- revocation of a consent given, with effect for the future
- release of your personal data in a common electronic format
- objection to a specific processing operation
Send requests to vereinsekretariat@salgesch.ch. To avoid disclosure to an unauthorised person, we require proof of identity.
Where our answer falls short, the route to the Federal Data Protection and Information Commissioner is open. Data subjects in the European Union turn to the supervisory authority responsible for them.
14 · Data security
We take appropriate technical and organisational measures to protect the personal data processed. Transmission is encrypted.
Complete security of transmission over the internet remains impossible to guarantee according to the state of the art.
15 · Changes
This statement is adapted where the services used or the legal position change. The version published on this page governs.
As at: [DATE OF PUBLICATION]