PRIVACY
This Privacy Policy applies to our information collection and use practices in connection with: (i) our website and online accounts ontoo.ch and @ontoo_jf as well as (ii) the information you provide to us offline, including, without limitation, via phone and email.
By visiting any of our websites, registering with us and purchasing a product or service, providing us information offline, you are agreeing to the terms of this Privacy Policy and the accompanying Terms.
Responsible person: Martina Baeriswyl m(at)ontoo.ch
Consent
By using our website, registering with us or purchasing a product, you hereby consent to our Privacy Policy and agree to its terms.
Consent through the website is obtained through a cookie and privacy terms pop-up when you visit the website.
If users want to withdraw consent, they can contact us to have all or partial contact info removed at hello(at)embodiments.ch.
1. INFORMATION WE COLLECT
In the course of operating the Websites and/or interacting with you, we will collect (and/or receive) the following types of information.
1.1 CONTACT, ORDER & BILLING INFORMATION
When you sign up to receive any of our newsletters, purchase any product or service, you will be required to provide certain information so we can fulfill the order. The Contact, Order or Billing Information collected is used to provide the requested product or service or information and to contact you for purposes of direct marketing of our current and future products and services.
Billing Information is collected and processed by our third-party payment processor operating as our agent (Stripe, Paypal, SumUp). We do not directly obtain or process any Billing Information.
1.2. COOKIES
Information that we collect using “cookie” technology. Cookies are small packets of data that a website stores on your computer’s or mobile device’s hard drive so that your computer will “remember” information about your visit. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to help us collect Other Information and to enhance your experience using the Websites. If you do not want us to place a cookie on your hard drive, you may be able to turn that feature off on your computer or mobile device. However, if you decide not to accept cookies from us, the Websites may not function properly.
1.3. FROM OTHER SOURCES
We also may collect or receive information from third parties, such as Facebook and/or other third-party social media sites.
Information Collected by or Through Third-Party Advertisers/Remarketers
We may share Other Information about you with third parties, including, but not limited to, advertising and remarketing providers, or other brand partners, for purposes of personalizing or otherwise understanding how you engage with ads or other content. These third parties may use cookies, pixel tags (also called web beacons or clear gifs), or other technologies to collect Other Information in furtherance of such purposes, including to tailor, target (i.e., behavioral, contextual, retargeting, and remarketing), analyze, report on, and/or manage advertising campaigns or other initiatives. For example, when a browser visits a site, pixel tags enable us and these third-parties to recognize certain cookies stored within the browser to learn which ads or other content bring a user to a given site. In addition, we may receive Other Information from these third parties, including through their service providers, such as advertising identifiers, IP addresses, and post-conversion data.
Below is a list of advertising/remarketing providers that we use; however, such list may be subject to change based on the campaigns that we run and we will endeavor to update it diligently. You may use the accompanying links to learn more about such providers and, if available, how to opt-out from their targeted ads or other personalization features. Please note you will not necessarily be opted-out of advertising or content generally; you may still receive generic ads or content.
For Facebook, please visit: http://www.facebook.com/about/privacy
For Google, please visit: https://support.google.com/ads/answer/2662922?hl=en
2. HOW WE USE YOUR INFORMATION
- Help you efficiently access your information after you sign in
- Remember information so you will not have to re-enter it during your visit or the next time you visit the Service
- Provide personalized content and information to you and others, which could include online ads or other forms of marketing
- Monitor metrics such as total number of visitors, traffic, and demographic patterns
- Improve communication to you
- Process your purchases with us
2.1. DATA PROCESSING OPERATIONS
In the course of operating our website and providing our services, we engage with various third-party companies and utilize specific platforms to process and manage data. We value your privacy and have outlined below the key entities and tools involved in these data processing operations:
1. Google Analytics
Service Provider: Google Ireland Ltd, Google LLC
How Google Analytics Works: Our website uses Google Analytics, provided by Google Ireland Ltd and Google LLC. Google Analytics employs cookies stored on your device to analyze website usage. Data generated by these cookies is transmitted to and stored on Google's servers in the United States. We have enabled the "anonymizeIP" feature to collect data anonymously. In exceptional cases, the full IP address may be transferred to a Google server in the USA and shortened.
Purpose of Google Analytics: Google Analytics helps us understand website visits and user behavior, enabling us to improve our services and website content.
Opting Out: You can prevent Google Analytics from collecting your data by adjusting your browser settings or by downloading and installing the Google browser add-on.
2. WIX Website builder
Service Provider: WIX
About Wix: Our website is built and hosted using Wix, a website builder that allows us to create and maintain our online presence. Wix offers a range of tools and features that enable us to provide you with a seamless browsing experience. Additionally, Wix provides various apps that enhance the functionality of our website, such as enabling us to run an online store, publish blogs, and manage email marketing campaigns.
3. Bexio Accounting System
Service Provider: Bexio
About Bexio: We utilize Bexio, a trusted Swiss accounting system, to manage and maintain our financial records and client data. Bexio provides us with secure and efficient accounting solutions to ensure accurate financial management.
6. Mailchimp
Service Provider: Mailchimp
About Mailchimp: We utilize Mailchimp, a reputable email marketing platform, to facilitate our email communications with you. Mailchimp helps us efficiently manage and deliver emails, including newsletters, updates, and promotional content.
5. Stripe
Service Provider: Stripe
About Stripe: Stripe is a payment processing platform we use to securely handle payment transactions on our website.
6. Third-Party Service Providers
In order to efficiently manage and operate our business, we may engage with third-party service providers, including individuals or companies located abroad. These service providers may have access to certain customer data, including but not limited to our crm, for the purpose of assisting us with various tasks.
We want to assure you that any third-party service provider we engage with is carefully selected and bound by strict contractual obligations to handle your data with the utmost care and in compliance with applicable data protection laws. This includes maintaining the confidentiality and security of your information.
We may share data with third-party service providers for tasks such as:
· Customer support and assistance.
· CRM management and maintenance.
· Technical support and website maintenance.
· Marketing and communication activities.
We continually monitor and assess the data handling practices of our third-party service providers to ensure the protection of your data and compliance with our privacy standards.
It's important to note that while we do not control how our third-parties processes or uses your data. We recommend reviewing their individual Privacy Policy to understand how they handle your information.
If you have any questions or concerns regarding the involvement of third-party service providers in the handling of your data, please do not hesitate to contact us at m(at)ontoo.ch
2.2. SHARING OF YOUR INFORMATION
Your information will not be resold to third parties outside Ontoo without your consent, except as noted in this Policy.
The only data transfer that happens is through third-party interfaces such as Mailchimp, Bexio, Google, etc. Please see Section 2.1. Data Processing Operations.
No specific data transfer is conducted otherwise.
Data might be shared if we are required to disclose your information without your prior consent by law for the following reasons:
- Comply with law or legal process
- Protect and defend our rights and property, or the rights and property of a third party
- Protect us against misuse or unauthorized use of any of Ontoos’ products, services, or other proprietary materials
- Prevent death or imminent bodily harm. prevent and address fraud and other illegal activity
2.3 TRANSFERRING DATA ABROAD
As a part of our data processing operations, there may be occasions when we need to transfer your personal information to companies located outside your country of residence. We want to assure you that these companies are held to the same stringent data protection standards as we uphold. These data transfers may occur on a global scale.
In cases where the level of data protection in the recipient country does not match that of the European Economic Area (EEA), we conduct a thorough risk assessment. We then establish contractual agreements to ensure that your data receives an equivalent level of protection as it would within the EEA. This may involve using the latest standard contractual clauses provided by the European Commission or other legally mandated measures. Should our risk assessment indicate a potential shortfall in data protection, we implement additional technical safeguards to secure your information. For your convenience, you can access the European Commission's standard contractual clauses here.
2.3 DATA RETENTION
Our data retention policy is designed to maintain personal data only for the duration required to fulfill the specific purposes for which it was collected.
Data generated during your interaction with our website is typically retained for a period of twelve months. However, this policy differs for analytics and tracking data, which may be retained for extended periods to enhance our services.
Contractual data is subject to more extended retention periods, in compliance with legal requirements. This category includes business communications, finalized contracts, and booking records, which are retained for up to ten years. If we no longer require such data from you to provide our services, it will be securely blocked and used solely for invoicing and tax-related purposes.
2.4 DATA PROTECTION
Safeguarding your data is of utmost importance to us. We employ robust security measures to protect your information from potential threats such as loss, unauthorized access, misuse, or alterations.
Our contractual partners and employees who have access to your data are contractually bound to uphold data protection regulations. In certain cases, it may be necessary for us to share your inquiries with affiliated companies. Even in such instances, rest assured that your data will remain handled with the strictest confidentiality.
Within our website, we employ the SSL (Secure Socket Layer) protocol, using the highest level of encryption supported by your browser, to ensure your data's security.
3. RIGHTS OVER YOUR DATA
If you have purchased from us, you may request to receive an exported file of the personal data we hold about you or that we erase any personal data of yours. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Newsletter mailings can be unsubscribed at any time; the link is provided in each email. Unsubscribing makes users inactive in the database. However, data is still stored.
If users want to be fully deleted, please contact us at contact(at)ontoo.ch
4. YOUR DATA PROTECTION RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATION (GDPR)
You have the following data protection rights:
- If you wish to access, correct, update, or request deletion of your personal information, you can do so at any time at contact(at)ontoo.ch
- You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you.
- Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
- You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.
5. CHANGES TO OUR PRIVACY POLICY
Ontoo may modify or update this Privacy Policy from time to time, so please review it periodically. Your continued use of Ontoo or the Service after any modification to this Privacy Policy will constitute your acceptance of such modification.
Last update: September 2023
HOW TO CONTACT US
If you have questions about this Privacy Policy, please contact us via email: contact(at)ontoo.ch