Data Protection

Privacy Policy Zulauf Consulting & Trading Ltd.

We, at Zulauf Consulting & Trading Ltd., take the protection of your personal data particularly seriously. Below we provide you with an overview of the processing of your personal data and your rights. How and which specific personal data we process and in what way it is used, depends primarily on the concrete legal and contractual relationship. When processing personal data, we comply with the requirements of the applicable data protection laws. Please contact us if you have any questions or concerns, we are happy to help!

Table of Contents

Responsible body
Scope and data
Used sources and data
Purpose of the data processing
Disclosure of personal data
Storage of personal data
Confidentiality/security
Your rights
Duty to provide personal data
Cookies and social media
Web analysis/Google Analytics
Plugins
Changes to the privacy policy

1. Responsible body

The responsible body for the collection, processing, and use of your personal data, in the sense of data protection law, is Zulauf Consulting & Trading Ltd. Please direct any enquiries about this statement or data protection concerns you may have to the following address:

Zulauf Consulting & Trading GmbH
Brigitte Zulauf
Lahnstrasse 31
8200 Schaffhausen
info@zulaufgmbh.ch

2. Scope and data

This privacy policy covers the personal data of the following natural persons:

Customers of Zulauf Consulting & Trading Ltd.
All other natural persons who are in contact with Zulauf Consulting & Trading Ltd., e.g., service providers, representatives and employees of legal entities, visitors to our website, etc.

Until the amendment of the privacy policy and/or a change in the legal situation, these indications also apply to legal entities as far as the Swiss Federal Act on Data Protection (FADP) is applicable.

Personal data is subject to data protection. This is any information that relates to an identified or identifiable individual. Personal data can be, for example, personal details (including surname, first name, date of birth, address, e-mail address, account number/account details, telephone number, etc.). In addition, order data, data for the fulfilment of contractual obligations, documentation data and any other data comparable to the categories mentioned, may also be considered as personal data. We only process your personal data if legally permitted to do so, respectively where there is a legal basis for doing so, or if you have given us your consent in this regard.

3. Used sources and data

Zulauf Consulting & Trading Ltd. collects your personal data when you use our services and products as a customer. However, personal data may also be collected if you contact us as a potential customer, service provider, interested party, website user or in any other capacity. Furthermore, we also process personal data during our other business activities. Moreover, we process personal data that we legitimately obtain from publicly accessible sources in connection with the provision of our services. We also process data that is generated in the course of using our website or data that you provide there (e.g., by filling out the contact form).

4. Purpose of the data processing

Personal data is processed for the following purposes:

a) To fulfil our contractual obligations/provide our services

Zulauf Consulting & Trading Ltd. stores and processes your personal data, for the purpose for which you have voluntarily made it available to us, i.e., in particular to provide fiduciary and consulting services in the field of HR and payroll.

Zulauf Consulting & Trading Ltd. also stores and processes personal data for the provision, administration, and execution of customer communication by telephone and via electronic means of communication, as well as for communication with the users of our website. Additionally, data processing is carried out for executing pre-contractual measures (e.g., prior clarifications with customers, service providers and suppliers), which are carried out upon request.

b) In the context of weighing up interests

Where necessary, we process your data beyond the actual delivery of our services to protect our legitimate interests or those of third parties. Examples of this are:

Assertion of legal claims and defence in legal disputes.
Ensuring IT security and IT operations.
Business management measures and information about our services.
Analysis of internet traffic on our website to improve its functionality.
Prevention and investigation of criminal offences.

c) Based on your consent

As far as you have given us consent to process personal data for certain purposes, the legality of these processing operations is given based on your consent – besides other possible reasons for a lawful processing. A given consent may be revoked at any time. The revocation of consent does not affect the legality of the data processing until the time of revocation.

d) Due to legal requirements or to public interest

Data processing or disclosure may also take place, if this is required by law and due to a public interest.

5. Disclosure of personal data

Personal data will only be disclosed to third parties if this is in accordance with the legal provisions or if a sufficient legal basis for this (e.g., contract fulfilling purposes, a legitimate interest, or your consent) exists. Furthermore, data may be transferred to other responsible parties if we are bound to do so by legal provisions or by an enforceable official or judicial order. In the context of our business activities personal data may, in compliance with the legal requirements on data disclosure, also be transferred to recipients who have their registered office outside Switzerland, the EU or the EEA, in so-called third countries.

Service providers we use also may receive data, in compliance with the legal requirements on data disclosure, if they maintain the appropriate level of confidentiality. These include companies in the categories of IT services, services on our website, telecommunications, payment services, as well as legal and tax advice, accounting, CRM (Customer-Relationship-Management-System), sales and marketing. We have carefully selected these service providers and oblige them to handle the respective data with care and to safeguard it.

We offer payment on our website using the payment service “TWINT”. The provider of this payment service is TWINT AG, Stauffacherstrasse 41, CH-8004 Zurich. Data is disclosed for contract fulfilment purpose. TWINT works together with your chosen bank. Cashless payment is possible through scanning the QR code on the card terminal or in the plug-in on the website. Customers scan the QR code via their respective application with TWINT and use it to pay us the respective amount.

Further information may be found in the TWINT data protection guideline:

https://www.twint.ch/en/data-privacy/

https://www.twint.ch/en/app-conditions-use/

6. Storage of personal data

We process and store your personal data, as long as it is necessary for the fulfilment of our contractual and legal obligations or other purposes pursued with the processing, and as long as we have a legitimate interest in retaining the respective personal data.

Moreover, we store personal data that is subject to legal storage periods, or that is still required for criminal prosecution, or for securing, asserting, or enforcing legal claims.

The – temporary – further processing of personal data is necessary for the following purposes, among others:

Fulfilment of retention obligations under commercial and tax law, e.g., under the Swiss Code of Obligations (OR) and tax laws. The periods specified there for retention or documentation are usually ten years.
Preservation of evidence within the framework of the legal prescription provisions under Art. 127 et seq. of the Swiss Code of Obligations (CO).

7. Confidentiality/security

All collected, processed, and stored personal data will be treated confidentially by Zulauf Consulting & Trading Ltd. To adequately protect this data from unauthorised access and misuse, we have implemented technical and organisational measures (e.g., controlled access and access restrictions to data, IT security applications and measures, etc.). In addition, electronic data is retained with all due care and stored on servers in Switzerland.

We would like to point out that in the event of data being sent by e-mail, data is transmitted unencrypted. Therefore, it cannot be ruled out that data may be lost during transmission or may be viewed by third parties. Such online transmission of personal data is therefore at your own risk.

8. Your rights

You are entitled to assert the right to information, the right to rectification, the right to erasure and the right to restriction of data processing as well as the right to data portability. Furthermore, you are entitled to object to the processing of data by us. You can assert your rights at the contact address given above (under point 1).

Furthermore, you can revoke any consent you have given us to process your personal data. Please note that the revocation is only effective for the future. Data processing that took place before the revocation is thereby not affected.

Any data subject shall have the right to file a complaint with the competent data protection authority, without prejudice to any other administrative or judicial remedy.

9. Duty to provide personal data

In the context of our business and customer relationship, you must provide the personal data that is required for the establishment, execution and fulfilment of the business and customer relationship, so that we can fulfil our contractual obligations and collect or process the data that we are legally obliged to. Without this data, we will generally not be able to enter a business and customer relationship with you or execute a relevant contract.

10. Cookies and social media

a) Cookies

We use so-called cookies on our website. This is a technology with which your browser or device can be identified. These are small text files that are filed and stored on the computer system via an internet browser. When a user visits a website, a cookie may be stored on the user’s operating system. A cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is visited again.

As a data subject, you can prevent the storage of cookies by our website at any time through an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, you can delete cookies that have already been set at any time via an internet browser or other software programmes.

The respective browser can be set in such a way that information is provided about the setting of cookies and thus it can be decided individually whether the respective cookie is desired, or not desired. The corresponding cookie setting differs depending on the browser used. An explanation on how to change the respective cookie setting can usually be found in the browser’s help menu. For the following browsers, the help menu can be found under the following links:

Internet Explorer: https://support.microsoft.com/en-gb/windows/delete-and-manage-cookies

Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop

Chrome: https://support.google.com/chrome/answer/95647?hl=en

Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/12.0/mac/10.14

Opera: https://help.opera.com/en/latest/web-preferences/

If the user does not accept a cookie for application, the presentation of the usability of our website may be restricted for the respective user.

b) LinkedIn

Our website also contains a link to a presence page on the LinkedIn network. The LinkedIn network is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA. Maude Avenue, Sunnyvale, CA 94085 USA.

The linking is done via the integration of a graphic from the LinkedIn network on our website. The use of the linked graphic prevents a simultaneous connection to LinkedIn or to its servers from being established, by simply accessing our website. A connection to LinkedIn is only established independently when the respective user clicks on the graphic. Only then is the user connected to the LinkedIn network. If a redirection to LinkedIn has taken place, information about the user (e.g., IP address, date, time) is collected by LinkedIn.

If you, as a LinkedIn user, are also logged into LinkedIn at the time of accessing our LinkedIn page, LinkedIn can associate the data with your user account. If you as a user click the “Like” button or the “Share” button or use other functions for interaction in the LinkedIn network, this information is stored in the respective user account and, depending on the form of interaction, also published. If you would like to prevent a corresponding collection and assignment of information, it is necessary that you log out of your LinkedIn user account before clicking on the LinkedIn graphic on our website. Furthermore, there is the possibility to configure settings regarding the collection, use and sharing of data in the respective user account, see LinkedIn Privacy Policy:

https://www.linkedin.com/legal/privacy-policy#choices

If you contact us via our LinkedIn page, the data you enter will be used to process the contact. After processing your contact, we will delete the corresponding data, unless there is a legal retention obligation.

The collection and processing of your personal data is based on a legitimate interest in processing this data. The legitimate interest on our side, is the evaluation of the collected data and the corresponding communication with customers, potential customers, and users, as well as the advertising, offer and distribution of our services in the marketing area.

Regarding the processing of your data when visiting our LinkedIn page, we have a joint responsibility with LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Use of Conversion-Tracking

We use so-called conversion tracking on our website in connection with the use of LinkedIn, which records what happens after an internet user/prospective customer has interacted with a placed advertisement.

The evaluation of the Internet user’s/ prospective customer’s behaviour is carried out for analysis purpose, optimisation and the economic operation of our online offer and thereby serves our legitimate interest.

If the internet user/prospective customer accesses or clicks on an advertisement placed on LinkedIn, a cookie is stored on the end device used by the conversion tracking. This cookie is valid for 30 days.

If our website is accessed by the internet user/prospective customer within the period of validity of the cookie, an evaluation is carried out by us and LinkedIn, in which LinkedIn creates statistics about the views of our online offering in this context, the number of internet users/prospective customers, who have accessed/clicked our advertisement and which pages of our online offering were subsequently accessed, is mapped. This does not allow us to personally identify the internet user/prospective customer.

Further information in connection with the processing of data by LinkedIn can be found in the LinkedIn privacy policy:

https://www.linkedin.com/legal/privacy-policy

Further information relating to cookies can be found in the Cookie Policy:

https://www.linkedin.com/legal/cookie_policy

An objection option (opt-out): exists under the following link:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

If a redirection to LinkedIn has taken place, information about the user (e.g., IP address, date, time) is collected by LinkedIn. The information collected may be processed in the USA.

We therefore advise you to use our LinkedIn page and its functions at your own responsibility. This applies in particular to the use of the interactive functions (e.g., commenting, sharing, rating).

c) XING

Our website contains a link to a Corporate Presence GCP on the XING network. The LinkedIn network is operated by XING SE, Dammtorstrasse 30, 20354 Hamburg.

The linking is done via the integration of a graphic from the XING network on our website. The use of the linked graphic prevents a simultaneous connection to XING or to its servers from being established, by simply accessing our website. A connection to XING is only established independently when the respective user clicks on the graphic. Only then is the user connected to the XING network.

If a redirection to XING has taken place, information about the user (e.g., IP address, date, time) is collected by XING. This information is used, amongst other purposes, to provide us, as the operator of the XING presence, with statistical information about the use of the XING page. Further information can be found on the following XING page:

https://www.xing.com/terms

Data collected in this context may, where applicable, be transferred to countries outside Switzerland, the EEA, and the European Union. Further information relating to XING’s data processing can be found in the XING Privacy Policy under Section 5, Third Countries:

https://privacy.xing.com/en/privacy-policy/who-may-receive-information-about-you/third-countries

Further information relating to XING’s data processing can be found in the XING Privacy Policy:

https://privacy.xing.com/en/privacy-policy

The way in which XING uses the data for its own purposes when the XING presence is called up, the extent to which activities on the XING page are assigned to individual users, how long the data is stored and whether the data is disclosed to third parties is not exhaustively specified by XING and is not known to us. The use of the XING network and its functions are therefore the responsibility of the user.

If you, as a XING user, are also logged into XING at the time of accessing our XING page, XING can associate the data with your user account. If you as a user click the “Like” button or the “Share” button or use other functions for interaction in the XING network, this information is stored in the respective user account and, depending on the form of interaction, also published. If you would like to prevent a corresponding collection and assignment of information, it is necessary that you log out of your XING user account before clicking on the XING graphic on our website.

Information on how to manage or delete information concerning yourself can be found on the following XING page:

https://privacy.xing.com/en

If you contact us via our XING page, the data you enter will be used to process the contact. After processing your contact, we will delete the corresponding data, unless there is a legal retention obligation.

d) Links to social media platforms and external websites/content

If links and/or other content are integrated by users or customers when using social media platforms (such as LinkedIn or XING), responsibility for this always lies with the respective person. Under no circumstances does this imply any approval of the contents, representations, etc. of third-party websites by Zulauf Consulting & Trading Ltd. Zulauf Consulting & Trading Ltd. does not accept any responsibility for the availability or content of such external websites, nor does it accept any liability for damage or injury resulting from the use of external websites and their content.

If you have a user account on the respective social media platform and are logged in when clicking on the link, the respective social media platform can match the visit of our website to your user account. If you wish to avoid this, please log out of the respective social media platform before using the link (=activating the social plug-in).

11. Web analysis/Google Analytics

Zulauf Consulting & Trading Ltd uses Google Analytics as a so-called web analysis or tracking technology, in order to improve our internet offer constantly.

Google Analytics is a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics is used for market research, advertising, and marketing purposes as well as for analysis purpose, optimising and economically operating our online offering and serves our legitimate interest. Moreover, we obtain consent from our website users before using Google Analytics.

To disable Google Analytics, Google provides a browser add-on at http://tools.google.com/dlpage/gaoptout?hl=de. Google Analytics uses “cookies”, which are text files placed on your computer, enabling an analysis of how the website is being used (see above). The information generated by the cookie about the use you are making of the website (including your IP address), will be transmitted to, and stored by Google on servers in the United States.

Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services relating to website and internet usage. Google may also transfer this information to third parties if required to do so by law, or if third parties process this data on Google’s behalf. Google will not associate your IP address with any other data held by Google and will only disclose it to us in anonymised form.

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

Further information about Google Analytics and the Google Analytics privacy policy may be found here:

https://marketingplatform.google.com/intl/en_uk/about/analytics/

https://policies.google.com/privacy?hl=en-GB

12. Plugins

a) WooCommerce

Zulauf Consulting & Trading Ltd uses WooCommerce as a plugin on our website and in the online shop.

WooCommerce is an e-commerce shop system of Automattic Inc., 60 29th Street 343, San Francisco, CA 94110, USA. WooCommerce is used to optimise the product offering on our website, the economic operation of our online offering and thereby our legitimate interest.

On WooCommerce’s side, data that is entered in the online shop can be collected and stored. WooCommerce can use this data for marketing activities, for example. WooCommerce also collects data such as the IP address, browser information, language settings and access time. Thereby, a user-related identification takes place to create targeted advertising offers. Cookies are also used in this context.

Additionally, data is collected so the products that have been placed in the shopping basket on the online shop are not lost when you leave the website but remain in the shopping basket when you return there.

Further information on WooCommerce and the WooCommerce privacy policy can be found here:

https://woocommerce.com/de-de/about/

https://automattic.com/privacy/

b) MailPoet

Zulauf Consulting & Trading Ltd uses MailPoet as a plugin on our website.

MailPoet is a service for sending and analysing newsletters from Automattic Inc., 60 29th Street 343, San Francisco, CA 94110, USA. MailPoet is used to provide information about our products and services and for marketing purposes. Before sending a newsletter to you, we obtain your consent to do so.

MailPoet can be used to evaluate the newsletter dispatch. For example, it is evaluated whether a newsletter is opened, and which links are clicked in the newsletter. Furthermore, MailPoet also collects data such as the IP address or browser information. However, this information is only evaluated for statistical purposes and is not linked to a specific recipient of the newsletter.

If you do not wish to have your data analysed by MailPoet, you must unsubscribe from the newsletter. A corresponding link is available in the respective newsletter.

The privacy policy of MailPoet (corresponds to that of Automattic Inc.) can be found here:

https://automattic.com/privacy/

c) ManageWP

Zulauf Consulting & Trading Ltd uses ManageWP as a plugin on our website.

ManageWP is a website management and security tool (dashboard) from Go.Daddy.com LLC, 14455 N. Hayden Rd, Ste. Hayden Rd, Ste. 219, Scottsdale, AZ 85260, USA. ManageWP ensures the safe and effective operation of our website and thus serves our legitimate interest.

ManageWP is used, among other tools, to monitor the security and performance of our website. In addition, automatic backup copies are made.

The privacy policy of ManageWP can be found here:

https://managewp.com/privacy

d) Real Cookie Banner

Zulauf Consulting & Trading Ltd uses the Real Cookie Banner application as a plug-in on our website.

Real Cookie Banner is an application to obtain and document consent for the storage of certain cookies on the user’s device of devowl.io GmbH, Tannet 12, 94539 Grafling, Germany. The use of Real Cookie Banner serves the purpose of obtaining the necessary declarations of consent in a legally compliant manner.

Real Cookie Banner records the consent, the revocation of consent if applicable, the IP address, information on the browser and user device as well as the website access time. In addition, Real Cookie Banner sets a cookie in the user’s browser to identify the consent or revocation of consent.

Further information on Real Cookie Banner and its privacy policy can be found here:

https://devowl.io/de/wordpress-real-cookie-banner

https://devowl.io/de/datenschutzerklaerung/

13. Changes to the privacy policy

We reserve the right to change this privacy policy at any time. The current version that we publish on our website applies. The date of the last update can be found at the end of this privacy policy.

Status: February 2023