1. What do we do?

BlueMilk Studio GmbH (Kappelstrasse 3, 5432 Neuenhof) operates the website www.bluemilk.ch (hereinafter referred to as "we"). On this website you can find out about our organisation, use our online services and contact us.

The protection of your personal data is very important to us. In this privacy policy, we inform you in a transparent and understandable way about the data we collect via our website and how we handle it. For this reason, we use the icons of the PRIVACY ICONS association. They are intended to help you quickly gain an overview of how we process your data.

2. What do we inform about?

  • What data is collected on www.bluemilk.ch;
  • Under what circumstances we process your data and for what purpose;
  • How long we keep your data;
  • When disclosure to third parties is permissible;
  • How we process your data ("individual data processing operations");
  • When and how you can object to data processing;
  • What rights you have and how you can assert them.

3. Definition of terms

3.1 What is personal data?

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, name, address, date of birth, email address or telephone number. Data about personal preferences such as leisure activities or memberships also count as personal data.

3.2 What are personal data requiring special protection?

Data on religious, ideological, political or trade union views or activities; data on health and, where applicable, information on administrative or criminal prosecutions and sanctions as well as data on social assistance measures are considered particularly sensitive personal data. Where necessary and appropriate, we may request and process sensitive personal data. In this case, their processing is subject to stricter confidentiality.

3.3 What is the processing of personal data?

Processing is any handling of personal data, regardless of the means and procedures used, in particular the acquisition, storage, keeping, use, modification, disclosure, archiving, deletion or destruction of data.

3.4 What is the disclosure of personal data?

This is the transmission or making available of personal data, e.g. publication or disclosure to a third party.

4. How can you get in touch with us?

If you have any questions or concerns about how we protect your data, you can contact us at any time by email at info@bluemilk.ch. Responsible for the data processing carried out via this website is:

BlueMilk Studio GmbH
Giuseppe Turiello
Kappelstrasse 3
5432 Neuenhof

5. Does our privacy policy always remain the same?

We may change this privacy policy at any time. The changes will be published on www.bluemilk.ch, you will not be informed separately.

6 General principles

6.1 What data do we collect from you and from whom do we receive this data?

First and foremost, we process personal data that you provide to us or that we collect when operating our website. We may also receive personal data about you from third parties. This may include the following categories:

  • Personal master data (name, address, dates of birth, etc.);
  • Contact details (mobile phone number, e-mail address, etc.);
  • Financial data (e.g. account details);
  • Online identifiers (e.g. cookie identifier, IP addresses);
  • Location and traffic data;
  • Sound and image recordings;
  • particularly sensitive data (e.g. biometric data or information about your health).

6.2 Under what conditions do we process your data?

We process your data in good faith and for the purposes set out in this privacy policy. In doing so, we ensure transparent and proportionate processing.

If, in exceptional cases, we are unable to comply with these principles, the data processing may still be lawful because there is a justification. One possible justification is the following:

  • Your consent;
  • the performance of a contract or pre-contractual measures;
  • our legitimate interests, unless your interests are overridden.

6.3 How can you withdraw consent?

If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent unless we have another justification.

You can revoke your consent at any time by sending an e-mail to the address given in the imprint. Data processing that has already taken place is not affected by this.

If you have subscribed to our newsletter, you can click on the link provided in the newsletter to unsubscribe.

6.4 In which cases can we pass on your data to third parties?

Principle
We may need to use the services of third parties or affiliates to process your data. We contractually ensure that third parties and affiliated companies comply with the requirements of data protection. We may also be obliged to disclose your data to authorities. We will only share your personal data if:

  • you have consented;
  • this is necessary for the performance of the contract or the implementation of pre-contractual measures as well as for the enforcement of our rights;
  • there is a legal obligation to do so;
  • we have a legitimate interest in doing so and your contrary interests do not outweigh this.

Transfer abroad
Under certain circumstances, your personal data may be transferred to companies abroad within the scope of commissioned processing. These companies are obligated to data protection to the same extent as we are. The transfer may take place worldwide.

If the level of data protection does not correspond to that in the EEA area, we carry out a prior risk assessment and ensure contractually that the same level of protection is guaranteed as in the EEA area (e.g. by means of the new standard contractual clauses of the EU Commission or other measures prescribed by law). If our risk assessment is negative, we will take additional technical measures to protect your data. You can access the EU Commission's standard contractual clauses here.

6.5 How long do we keep your data?

We only store personal data for as long as is necessary to fulfil the individual purposes for which the data was collected.

Data that we store when you visit our website is kept for twelve months. An exception is made for analytics and tracking data, which may be retained for longer.

We store contract data for longer, as we are obliged to do so by legal regulations. In particular, we have to keep business communication, concluded contracts and accounting vouchers for up to 10 years. As far as we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.

6.6 How do we protect your data?

We will keep your data secure and take all reasonable steps to protect your data from loss, access, misuse or alteration.

Our contractual partners and employees who have access to your data are obliged to comply with the provisions of data protection law. In some cases it will be necessary for us to pass on your enquiries to companies associated with us. In these cases, too, your data will be treated confidentially.

Within our website, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser.

6.7 What rights do you have?

a. Right to information
You can request information about the data we hold about you at any time. We ask you to send your request for information together with proof of identity to turiello@bluemilk.ch.

You also have the right to receive your data in a commonly used file format if we process your data automatically and if

  • you have given your consent for the processing of this data; or
  • you have disclosed data in connection with the conclusion or performance of a contract.

We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests or the interests of a third party.

The processing of your application is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of enquiries, for legal or technical reasons or because we need more detailed information from you. You will be informed of the extension of the deadline in good time, at least in text form.

b. Deletion and rectification
You can request the deletion or correction of your data at any time. We can refuse the request if legal regulations oblige us to keep the data longer or unchanged or if a legal ground opposes your request.

Please note that the exercise of your rights may, under certain circumstances, conflict with contractual agreements and have corresponding effects on the implementation of the contract (e.g. premature termination of the contract or cost consequences).

c. Legal action
If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a report with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: http://www.edoeb.admin.ch.

7. Individual data processing operations

7.1 Provision of the website and creation of log files

What information do we receive and how do we use it?
When you visit www.bluemilk.ch, certain data is automatically stored on our servers or on servers of services and products that we obtain and/or have installed for system administration, statistical or backup purposes or for tracking purposes. These are:

  • the name of your internet service provider;
  • Your IP address (in some circumstances);
  • the version of your browser software;
  • the operating system of the computer used to access the URL;
  • the date and time of access;
  • the website from which you are visiting URL;
  • the search words you used to find URL.

Why are we allowed to process this data?
This data cannot be assigned to a specific person and this data is not merged with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.

How can you prevent data collection?
The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after the end of each session. The storage of the log files is absolutely necessary for the operation of the website, you therefore have no possibility to object to this.

7.2 Tracking pixel

How do tracking pixels work?
We may use tracking pixels on our website. Tracking pixels are also known as web beacons. Tracking pixels - also from third parties whose services we use - are small, usually invisible images that are automatically retrieved when you visit our website. Pixel counters can be used to collect the same information as server log files. We use them for the same purposes as log files - you cannot prevent the data collection.

7.3 Evaluations

In some cases, your personal data is processed automatically in order to evaluate certain personal aspects.

We use such evaluations in particular to inform and advise you in a targeted manner about certain of our services or products. For this purpose, we use evaluation tools thanks to which we can communicate in a needs-based manner and take appropriate advertising measures, including market and opinion research.

7.4 Contact

Contact form
What information do we receive and how do we use it?
On our website you can contact us via an electronic contact form. The data you enter in the input mask, such as name, e-mail address, etc., will be transmitted to us and stored.

The data you provide will be used to process your request.

Why are we allowed to process this data?
The justification is the implementation of pre-contractual measures as well as our legitimate interests in the completion of the request.

E-Mail
What information do we receive and how do we use it?
You have the option of contacting us by e-mail. If you contact us by e-mail, the following data will be processed:

  • E-mail address;
  • Content, subject and date of your email;
  • contact details provided by you (e.g. name, telephone number if applicable, address).

Why are we allowed to process this data?
Your details will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. The justification for this is pre-contractual measures or our legitimate interests in processing the enquiry.

Safety notice
We would like to point out that e-mails can be read or changed unauthorised and unnoticed during transmission. The spam filter can reject e-mails if they are identified as spam by certain characteristics.

7.5 Success and reach measurement

How does performance and reach measurement work?
Our notifications and communications may contain web links or tracking pixels that record whether an individual communication has been opened and which web links have been clicked on. Such web links and tracking pixels may also track the use of notifications and communications on a personal basis.

Why are we allowed to process this data?
We require this statistical recording of usage for success and reach measurement in order to be able to offer notifications and communications based on the needs and reading habits of the recipients in an effective and user-friendly manner as well as permanently, securely and reliably.

7.6 Blog

What information do we receive and how do we use it?
You have the possibility to comment on our blog posts. To publish a comment, you must provide us with the following information:

  • Name
  • E-mail address (will not be published)

Why are we allowed to process this data?
By posting the comment, you agree to your name being published. If you do not want this, we ask you to use an alias name.Furthermore, you consent to us using your email address to verify your identity or to contact you if your comment is responded to.

7.7 Newsletter

How does the newsletter work?
Our website gives you the opportunity to subscribe to our free newsletter. With the newsletter you will receive information about new contributions, events and offers.

What information do we receive and how do we use it?
When you register for the newsletter, we collect your e-mail address and any other contact details. We need this for the dispatch and for verification.

We are entitled to pass on your data to third parties for the purpose of the technical processing of the newsletter.

We store your data for the duration during which you are registered for the newsletter. If you unsubscribe, your data will remain stored for as long as is necessary for the registration of your unsubscription.

Why may we send you the newsletter?
By sending the newsletter registration, you give your consent to the data processing. You agree to receive our newsletter regularly and that, if necessary, your usage behaviour will be statistically evaluated to optimise the newsletter.

7.8 Cookies

How do cookies work?
Our website uses cookies. Cookies are data records that are stored on the operating system of your device with the help of the browser when you access our website. Cookies do not cause any damage to your computer and do not contain viruses.

What information do we receive and how do we use it?
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit. This allows us to save certain settings (such as language settings or location information) so that you do not have to re-enter them when you call up the website again.

Why may we use cookies?
We use cookies so that we can make our website more user-friendly, effective and secure. The use of cookies and the processing of your data in this regard is based on our legitimate interests in the aforementioned purposes.

How can you prevent data collection via cookies?
The cookies are stored on your computer. You therefore have full control over the use of the cookies. You can delete them completely or deactivate or restrict their transmission by changing the settings in your browser. If cookies for our website are deactivated, it may no longer be possible to use all the functions of the website to their full extent.

7.9 Google Remarketing

Our website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google Ad-Words and Google DoubleClick. For this purpose, we work together with Google Ireland Ltd, Google Building Gordon House, Barrow St, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; both together "Google", with Google Ireland Ltd being responsible for the processing of personal data.

How does Google Remarketing work?
With this function, the advertising target groups created with Google Analytics can be linked with the cross-device functions of Google Ad-Words and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC). A link between your web and app browsing history and your Google account is only made for this purpose if you have given the corresponding consent. To support this feature, Google Analytics collects Google-authenticated IDs of users, which are temporarily linked to our Google Analytics data. This allows us to define and create target groups for cross-device ad advertising.

Why might we use Google Remarketing?
The aggregation of the collected data in your Google account is based on your consent, which you can give or revoke at Google. In the case of data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merger), the collection of data is based on our legitimate interest in acquiring new customers via advertising and using our website profitably.

How can you prevent the collection of your data via Google Remarketing?
You can object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account under the following link (https://www.google.com/settings/ads/onweb/). Further information and the data protection provisions can be found in Google's data protection declaration at https://www.google.com/policies/technologies/ads/.

7.10 Google AdSense

Our website uses the functions of Google AdSense. For this purpose, we work together with Google Ireland Ltd, Google Building Gordon House, Barrow St, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; both together "Google", with Google Ireland Ltd being responsible for the processing of personal data.

How does Google AdSense work?
This feature allows Google to serve personalised ads on our website. For the purpose of personalised advertising, Google AdSense uses cookies and web beacons to collect the following information:

The user's reaction to the ad (clicks, mouse movements, impression)How often the ad has already been shown to the user. This means that the ad is not shown more than once if there is no reaction.

Google analyses the data collected and your IP address. Google uses the data primarily to display advertisements as effectively as possible. If you have a Google account, the data will be merged with your Google account.

Why are we allowed to use Google AdSense?
This aggregation is based on your consent, which you can give or withdraw at Google. In the case of data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of data is based on our legitimate interest in acquiring new customers via advertising and using our website profitably.This aggregation is based on your consent, which you can give or withdraw at Google. In the case of data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of data is based on our legitimate interest in acquiring new customers via advertising and using our website profitably.

How can you prevent the collection of your data via Google AdSense?
You can prevent the storage of cookies by adjusting the settings in your browser accordingly. In addition, you can object to cross-device personalised ads by deactivating personalised advertising in your Google account under the following link (https://www.google.com/settings/ads/onweb/). Further information and the data protection provisions can be found in Google's data protection declaration at https://www.google.com/policies/technologies/ads/.

7.11 Google Analytics

How does Google Analytics work?
Our website uses Google Analytics, a service provided by Google Ireland Ltd, Google Building Gordon House, Barrow St, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; both together "Google", whereby Google Ireland Ltd is responsible for the processing of personal data. Google uses cookies, which are stored on your device and enable an analysis of the website by you. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. We have added the code "anonymizeIP" to Google Analytics. This ensures that all data is collected anonymously. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

Why may we use Google Analytics?
Google evaluates the collected data on our behalf so that we can get a picture of the visits and user behaviour on our website. This enables us to improve our services and the website content and design.

How can you prevent the collection of your data via Google Analytics?
You can prevent cookies from being stored by adjusting the settings in your browser accordingly (see our comments on cookies). You can deactivate Google Analytics by downloading and installing the Google browser add-on.

7.12 Google Tag Manager

We use the Google Tag Manager on our website. This collects data about user behaviour on our website and forwards it to our analysis tools. Google Tag Manager does not have access to the data, it only collects the data. Since the Google Tag Manager does not process any personal data, please refer to the explanations on the respective tracking services and the usage guidelines of Google Tag Manager. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.

7.13 Vimeo

We embed videos from Vimeo on our website.

How does the integration work?
The integration takes place via a plug-in. As soon as you visit one of our pages equipped with a plug-in, a connection to the Vimdeo servers is established. The servers are informed which of our sub-pages you have visited. For more information, see the Vimeo privacy policy: https://vimeo.zendesk.com/hc/de/sections/203915088-Datenschutz.

Why are we allowed to embed this content?
We include content via Vimeo in order to make our offer accessible to a wider audience. This is our legitimate interest.

What information do you share with providers?
If you are logged into a user account of a provider, you would enable this provider to assign your surfing behaviour directly to your personal profile. We would like to point out that we have no knowledge of the specific content of the transmitted data or its use. If you do not want these providers to be able to assign your visit to our pages to your user account, please log out of your respective user account before using our website.

7.14 Google Conversion Linker

We use Google Conversion Linker to prevent the cookies set by Google Conversion Tracking from being stored for longer than 24 hours if cross-site tracking is prevented.

7.15 Google Web Fonts

How does Google Web Fonts work?
We use so-called web fonts on our website for the uniform display of fonts, which are provided by Google. When you call up one of our pages, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

What information do you share with us and how is it used?
The browser you use establishes a connection to Google's servers. This informs Google that our website has been accessed via your IP address. If your browser does not support web fonts, a standard font will be used by your computer.

Why may we use Google Web Fonts?
The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. For more information on Google Web Fonts, see the Google Web Fonts FAQs: https://developers.google.com/fonts/faq.

7.16 Adobe Fonts (Typekit)

How does Adobe Fonts work?
We use so-called web fonts on our website for the uniform display of fonts, which are provided by Adobe (Adobe Inc., Adobe 345 Park Avenue, San Jose, CA 95110-2704, USA). When you call up one of our pages, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

What information do you share with us and how is it used?
The browser you use establishes a connection to Adobe's servers. This enables Adobe to know that our website has been accessed via your IP address. If your browser does not support web fonts, a standard font is used by your computer.

Why are we allowed to use Adobe Fonts?
The use of Adobe Fonts is in the interest of a uniform and appealing presentation of our online offers. For more information on Adobe Fonts, see the Adobe Fonts FAQ.

7.17 Fastly

Fastly is a content delivery network (CDN) that speeds up content loading and web page delivery on a global scale. It is used to minimise web page loading time and improve performance by providing cache memory and fast servers for the page.

7.18 YourAdChoices.com

YourAdChoices.com is a free tool developed by the Digital Advertising Alliance (DAA) to give consumers more control over the online advertising they see. It allows users to choose the type of advertising they want to see by visiting pages on the YourAdChoices portal and changing settings. It can also serve as a source of information for consumers who want to learn more about online advertising, privacy and data protection policies.

7.19 US Privacy User Signal Mechanism

The US Privacy User Signal Mechanism is used on a website to allow the user to give or withhold consent for the processing of their personal data. This mechanism can be implemented in different ways, e.g. through an opt-in or opt-out system that allows the user to choose which data may be processed and which may not.

7.20 Global Site Tag

Global Site Tag (gtag.js) is a tag management system developed by Google. It is used to track and manage data such as traffic, sales, conversions and more through a single line of code. It allows businesses to implement tracking tags for various purposes, such as Google Ads, Google Analytics and more.