Privacy Policy

Read Privacy Policy on Radio Fondue

Kunsthaus GmbH
Rämistrasse 49
8001 Zürich

Version November 18, 2024. Valid up to revocation.

We collect and process personal data carefully and only to the extent permitted by law.

In the following, we set out the principles we follow and the purposes for which we collect and process personal data via this website and other websites and applications operated by us or affiliated companies.

1. Scope and purpose of the collection, processing and use of personal data

When you register and use our services, we collect certain personal data so that we can target our services to you. As part of our communications, data discovery and marketing efforts, we or third-party companies providing the relevant services collect the following data:

Registration and performance data, as well as data that you have released to social media services for sharing with the company, this includes in particular the following information:

As far as the data collection of implemented third-party tools is concerned, the respective privacy policies of these third-party providers are additionally authoritative. These are the following tools:

In the case of announcements related to contests, we may collect additional data, according to the corresponding announcement,

If you have signed up for a newsletter, we will use it to keep you informed about relevant developments and offers. If you are directed to our websites via a link in the newsletter, you also give us permission to process and use your IP address together with geodata, web beacons or similar technologies to check whether the offers made to you as part of this communication meet your requirements. In addition, we process and use the email address you provide to send you personalized offers in connection with the newsletter. If you no longer wish to receive the newsletter, you can unsubscribe at any time in the newsletter itself.

We do not collect any financial-related data from external service providers in the area of payments.

The purpose of these data collections is,

In this case, we base the processing of your personal data in particular on the fact that it is necessary for the protection of legitimate interests of us or of third parties, e.g., for communication with you or third parties, to operate our websites, to improve our electronic offers and registration for certain offers and services, for security purposes, for compliance with the law and internal regulations, for our risk management and corporate governance, and for other purposes such as training and education, administration, evidence and quality assurance, organization, implementation and follow-up of events and for the protection of other legitimate interests (art. 6 para. 1 lit. f GDPR).

In this case, we base the processing of your personal data in particular on the fact that it is necessary for the initiation, conclusion and performance of contracts and their administration and enforcement (art. 6 para. 1 lit. b GDPR).

In this case, we base the processing of your personal data in particular on the fact that you have separately consented to the processing, e.g., via a corresponding declaration on our websites (art. 6 para. 1 lit. a and art. 9 para. 2 lit. a GDPR) and we do have legitimate interest in the sense of art. 6 para. 1 lit. f GDPR.

In this case, we base the processing of your personal data in particular on the fact that it is required or permitted by law due to our mandate or position under the law of the EU or the EEA or an EU member state (art. 6 para. 1 lit. c GDPR) or is necessary to protect your vital interests or those of other natural persons (art. 6 para. 1 lit. d GDPR.

In this case, we base the processing of your personal data in particular on the fact that it is necessary for the initiation, conclusion and performance of contracts and their administration and enforcement (art. 6 para. 1 lit. b GDPR) or we based on the fact that it is necessary for the protection of legitimate interests of us or of third parties (art. 6 para. 1 lit. f GDPR).

In this case, we base the processing of your personal data in particular on the fact that you have separately consented to the processing, e.g., via a corresponding declaration on our websites (art. 6 para. 1 lit. a and art. 9 para. 2 lit. a GDPR).

In this case, we base the processing of your personal data in particular on the fact that it is necessary for the protection of legitimate interests of us or of third parties, e.g. to improve our electronic offers and registration for certain offers and services, for security purposes, for compliance with the law and internal regulations, for our risk management and corporate governance, and for other purposes such as training and education, administration, evidence and quality assurance, organization, implementation and follow-up of events and for the protection of other legitimate interests (art. 6 para. 1 lit. f GDPR)

In this case, we base the processing of your personal data in particular on the fact that it is required or permitted by law due to our mandate or position under the law of the EU or the EEA or an EU member state (art. 6 para. 1 lit. c GDPR).

In this case, we base the processing of your personal data in particular on the fact that it is necessary for the protection of legitimate interests of us or of third parties, e.g., for communication with you or third parties, to operate our websites, to improve our electronic offers and registration for certain offers and services, for security purposes, for compliance with the law and internal regulations, for our risk management and corporate governance, and for other purposes such as training and education, administration, evidence and quality assurance, organization, implementation and follow-up of events and for the protection of other legitimate interests (art. 6 para. 1 lit. f GDPR)

We would like to point out that we process your data for as long as it is necessary for our processing purposes, the legal retention periods and our legitimate interests, in particular for documentation and evidence purposes, or storage is technically required (e.g. in the case of backups or document management systems). If there are no legal or contractual obligations or technical reasons to the contrary, we generally delete or anonymize your data after the storage or processing period has expired as part of our usual processes and in accordance with our retention policy.

By using one of our Apps, our Websites and our Services, you consent to the data processing described above for the purposes mentioned.

Under the European General Data Protection Regulation (GDPR), regulations apply which may also be applicable to companies based in Switzerland. If a matter falls within the scope of the GDPR, we will comply with these provisions. The facts on which we base our processing are mentioned above.

If you do not disclose certain personal data to us, this may mean that it is not possible to provide the related services or conclude a contract. In principle, we indicate which personal data requested by us are mandatory.

The right to object to the processing of your data, described in Section 4, applies in particular to data processing for the purpose of direct marketing.

2. Cookies

In addition, we may use cookies and similar technologies (e.g. pixel tags or fingerprints) to recognize website visitors, evaluate their behavior and recognize preferences.

A cookie is a small file that is transmitted between your system and the server and enables the recognition of a specific device or browser.

You can set your browser to automatically reject, accept or delete cookies. You can also disable or delete cookies on a case-by-case basis. You can find out how to manage cookies in your browser in the help menu of your browser.

Both the technical data we collect and cookies generally do not contain any personal data.

However, personal data that we or third-party providers commissioned by us store from you (e.g. if you have a user account with us or these providers) may be linked to the technical data or to the information stored in and obtained from cookies and thus possibly to your person.

3. Social Media Plugins

We also use social media plug-ins, which are small pieces of software that create a connection between your visit to our website and a third-party provider. The social media plug-in tells the third-party provider that you have visited our website and may send the third-party provider cookies that the third-party provider has previously placed on your web browser. For more information about how these third-party providers use your personal data collected through their social media plug-ins, please see below.

There are links on the Website to our social media appearances on the following social networks:

If you click on the corresponding icons of the social networks, you will automatically be redirected to our profile of the respective social network. In order to use the functions of the respective network there, you must partially log into your user account for the respective network.

When you open a link to one of our social media profiles, a direct connection is established between your browser and the server of the social network in question. This provides the network with the information that you have visited our website with your IP address and accessed the link. If you access a link to a network while logged into your account on the network in question, the content of our site may be linked to your profile on the network, i.e. the network may link your visit to our website directly to your user account. If you want to prevent this, you should log out before clicking on the relevant links. An assignment is made in any case when you log into the relevant network after clicking on the link.

We thereby receive data from you (e.g., when you communicate with me or comment on our content) and from the platforms (e.g., statistics). The providers of the platforms may analyze your usage and process this data together with other data they have about you. They also process this data for their own purposes (e.g., marketing and market research purposes and to manage their platforms), and act as their own data controllers for this purpose. For more information on processing by the platform operators, please refer to the privacy statements of the respective platforms.

If you click on one of these links, you thereby give your consent to the following data processing.

4. Data subject rights

Right of information

Where personal data is collected, data subjects must be provided with a range of information regarding the collection of the data, including in particular notification of what data is being collected and for what purpose. You have the right to request at any time, free of charge, to inspect your personal data stored by us, if we process them. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with the applicable data protection regulations.

Right to rectification

The data subject has the right to obtain from the controller the rectification without undue delay of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data. This data subject right includes also the fact to be informed about the adjustments made, unless this is impossible or involves disproportionate effort.

Right to erasure (“right to be forgotten”)

The data subject has the right to request that personal data concerning him or her be erased without undue delay, and the personal data shall be erased without undue delay under certain circumstances, such as that the data is no longer necessary for the purpose for which it was collected. In individual cases, the right to erasure may be excluded.

Right to restriction of processing

The data subject has the right under certain circumstances to request the restriction of the processing of the data. Where you have obtained restriction of processing of your data, we will inform you before lifting the restriction.

Right to notification

According to the GDPR, all recipients to whom personal data have been disclosed must be notified of any rectification or erasure of personal data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

Right to data portability

The data subject has the right to receive the data he or she has provided in a structured, commonly used and machine-readable format and has the right to transfer this data free of charge to another data controller, for example, in order to change service providers.

Right to object

The data subject further has the right to object at any time, on grounds relating to his or her particular situation, to certain processing of personal data concerning him or her; this also applies to profiling based on these provisions. Subsequently, the data may no longer be processed, unless compelling legitimate grounds for the processing can be demonstrated by the data processor which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of asserting, exercising or defending legal claims. If personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing; this also applies to profiling insofar as it is related to such direct marketing.

Processing activities based on your consent in the past will not become unlawful as a result of your revocation.

Right to object to automated decision-making in individual cases

In addition, the data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a competent supervisory authority about the way in which your personal data is processed

Right to notification of data protection breaches

Should a personal data breach occur, the person affected by the breach will be informed, provided that it involves a high risk to personal rights and freedoms.

Special protection for children

Finally, the GDPR also provides for special protection for children. Thus, it provides that in the case of services offered directly to a child, consent to the processing of the child’s data must be given or authorized by the holder of parental responsibility, although the age limit in question may be defined differently in the various countries within the scope of the GDPR.

5. Retention period

We will only retain your personal data for as long as necessary to provide you with services you have requested or for purposes for which you have given your consent.

Please note that certain data may be subject to special legal retention periods. This data must be stored by us until the end of the retention period. After that, business communication or concluded contracts, for example, must be stored for up to 10 years. We use them exclusively to fulfill our legal obligations.

6. Technical measures for data security

We protect personal data through appropriate technical and organizational security measures and store them on secure servers. The website is secured against manipulation by customary state-of-the-art measures and against access, modification or dissemination by unauthorized persons. This includes taking data protection aspects into account as early as the planning phase of our services (“privacy by design”), and our new products or services are offered with data protection-friendly default settings (“privacy by default”).

7. Disclosure of data to third parties

We are entitled to pass on your personal data to service providers, also abroad to the Unites States, Canada, Germany, Hong-Kong and Poland, for the purposes covered by the contract. These are, for example, cloud service providers, other companies of the group of companies, other providers of services relevant to the provision of the company services, including, for example, IT service providers, business consultants and lawyers, as well as public authorities. These third parties are obliged to comply with the legal requirements on data protection as well. A complete list of the data contractors involved can be requested from the provider at any time.

All of these categories of recipients may in turn involve third parties, so that your data may also be made available to them. We can restrict the processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. authorities).

If a recipient is located in a country without adequate data protection, we contractually obligate the recipient to comply with an adequate level of data protection (for this purpose, we use the revised standard contractual clauses of the European Commission, which can be accessed via https://eur-lex.europa.eu/eli/..., if necessary, with the required adaptations for Switzerland), insofar as the recipient is not already subject to a legally recognized set of rules to ensure data protection. We may also disclose personal data to a country without adequate data protection without entering into a separate contract for this purpose if we can rely on an exception clause.

8. Links

We have no influence on the content of external websites that are accessible via links on our website. We therefore accept no responsibility for the content of these external websites. The respective provider or operator of the sites is always responsible for the content of the linked sites. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognizable at the time of linking. However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements, we will remove such links.

9. Contact

If you have any questions about data protection, if you would like information, or if you would like to request the deletion of your personal data, please contact us by email at [email protected] using the subject "Radio Fondue".