Skip to content

Privacy Policy

This is a translation for convenience. Only the German version is legally binding.

This privacy and security policy governs and explains how Oceanleaf GmbH, hereinafter Oceanleaf, manages the personal information and data of its valued customers and website visitors.

Oceanleaf GmbH
Data protection officer: Niklas Tinner
Email: niklas@oceanleaf.ch
Website: https://oceanleaf.ch

General Information

Based on Article 13 of the Swiss Federal Constitution and the federal data protection provisions (Federal Act on Data Protection, FADP), every person has the right to protection of their privacy and to protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

In cooperation with our hosting providers, we strive to protect the databases as well as possible against unauthorized access, loss, misuse or falsification.

Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

By using this website, you consent to the collection, processing and use of data as described below. This website can generally be visited without registration. Data such as pages accessed or names of files retrieved, date and time are stored on the server for statistical purposes, without this data being directly related to you as a person. Personal data, in particular name, address or email address, is collected on a voluntary basis wherever possible. Data is not disclosed to third parties without your consent.

Processing of Personal Data

Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, irrespective of the means and procedures used, in particular the retention, disclosure, collection, erasure, storage, modification, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. In addition, to the extent and insofar as the EU GDPR is applicable, we process personal data on the basis of the following legal grounds in connection with Art. 6 para. 1 GDPR:

  • lit. a) Processing of personal data with the consent of the data subject.
  • lit. b) Processing of personal data for the performance of a contract with the data subject and for the implementation of corresponding pre-contractual measures.
  • lit. c) Processing of personal data for compliance with a legal obligation to which we are subject under any applicable law of the EU or under any applicable law of a country in which the GDPR is applicable in whole or in part.
  • lit. d) Processing of personal data in order to protect the vital interests of the data subject or of another natural person.
  • lit. f) Processing of personal data in order to safeguard the legitimate interests of us or of third parties, unless the fundamental freedoms and fundamental rights and interests of the data subject prevail. Legitimate interests are in particular our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for the period required for the respective purpose or purposes. In the case of longer retention obligations due to statutory and other obligations to which we are subject, we restrict processing accordingly.

Privacy Policy for Cookies

This website uses cookies. These are small text files that make it possible to store specific information relating to the user on the user’s device while they use the website. Cookies make it possible, in particular, to determine the frequency of use and number of users of the pages, to analyze patterns of page usage, but also to make our offering more customer-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved again on a subsequent visit to the site. If you do not want this, you should set your internet browser to refuse the acceptance of cookies.

A general objection to the use of cookies employed for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site https://www.aboutads.info/choices/ or the EU site https://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by disabling them in the browser settings. Please note that in this case not all functions of this online offering may be usable.

Privacy Policy for SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock symbol in your browser bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Privacy Policy for Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request

This data cannot be attributed to specific persons. This data is not merged with other data sources. We reserve the right to review this data retrospectively if we become aware of specific indications of unlawful use.

Privacy Policy for Contact Form

If you send us inquiries via the contact or registration form, the information you provide in the form, including the contact details you enter there, is transmitted to us by email and stored in our contact management for the purpose of processing the inquiry and in case of follow-up questions. The form data is not stored on our web server. For delivery, we use the Web3Forms service, and for contact management, the Notion service (see the sections “Form Delivery with Web3Forms” and “Contact Management with Notion”). Beyond this, we do not disclose this data without your consent.

To protect against spam and abusive inquiries, we use Cloudflare Turnstile (see the section “Spam Protection with Cloudflare Turnstile”).

Privacy Policy for Newsletter Data

If you would like to receive the newsletter offered on this website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not disclose it to third parties.

You can revoke at any time the consent you have given to the storage of the data and the email address and to their use for sending the newsletter, for example via the “unsubscribe link” in the newsletter.

Rights of Data Subjects

Right to confirmation

Every data subject has the right to request confirmation from the operator of the website as to whether personal data concerning them is being processed. If you wish to exercise this right to confirmation, you can contact the data protection officer at any time.

Right of access

Every data subject whose personal data is processed has the right to obtain from the operator of this website, at any time and free of charge, information about the personal data stored about them and a copy of this information. Furthermore, information may be provided, where applicable, about the following:

  • the purposes of the processing
  • the categories of personal data that are processed
  • the recipients to whom the personal data has been or will be disclosed
  • where possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period
  • the existence of a right to rectification or erasure of the personal data concerning them, or to restriction of processing by the controller, or of a right to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • where the personal data is not collected from the data subject: all available information about the source of the data

Furthermore, the data subject has a right to information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.

If you wish to exercise this right of access, you can contact our data protection officer at any time.

Right to rectification

Every data subject affected by the processing of personal data has the right to request the rectification without undue delay of inaccurate personal data concerning them. Furthermore, taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary statement.

If you wish to exercise this right to rectification, you can contact our data protection officer at any time.

Right to erasure (right to be forgotten)

Every data subject affected by the processing of personal data has the right to request from the controller of this website that the personal data concerning them be erased without undue delay, provided that one of the following grounds applies and insofar as the processing is not necessary:

  • The personal data was collected or otherwise processed for purposes for which it is no longer necessary
  • The data subject withdraws the consent on which the processing was based, and there is no other legal ground for the processing
  • The data subject objects to the processing on grounds relating to their particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and related profiling
  • The personal data has been processed unlawfully
  • The erasure of the personal data is required for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject
  • The personal data was collected in relation to the offer of information society services made directly to a child

If one of the above grounds applies and you wish to request the erasure of personal data stored by the operator of this website, you can contact our data protection officer at any time. The data protection officer of this website will ensure that the request for erasure is complied with without undue delay.

Right to restriction of processing

Every data subject affected by the processing of personal data has the right to request from the controller of this website the restriction of processing if one of the following conditions is met:

  • The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data
  • The processing is unlawful, and the data subject opposes the erasure of the personal data and requests instead the restriction of use of the personal data
  • The controller no longer needs the personal data for the purposes of the processing, but the data subject requires it for the establishment, exercise or defense of legal claims
  • The data subject has objected to the processing on grounds relating to their particular situation, and it has not yet been established whether the legitimate grounds of the controller override those of the data subject

If one of the above conditions is met and you wish to request the restriction of personal data stored by the operator of this website, you can contact our data protection officer at any time. The data protection officer of this website will arrange for the restriction of processing.

Right to data portability

Every data subject affected by the processing of personal data has the right to receive the personal data concerning them in a structured, commonly used and machine-readable format. They also have the right to have this data transmitted to another controller, provided that the statutory requirements are met.

Furthermore, the data subject has the right to have the personal data transmitted directly from one controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

To assert the right to data portability, you can contact the data protection officer appointed by the operator of this website at any time.

Right to object

Every data subject affected by the processing of personal data has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them.

In the event of an objection, the operator of this website will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.

To exercise the right to object, you can contact the data protection officer of this website directly.

Right to withdraw consent under data protection law

Every data subject affected by the processing of personal data has the right to withdraw at any time any consent given to the processing of personal data.

If you wish to exercise your right to withdraw consent, you can contact our data protection officer at any time.

Privacy Policy for Objection to Advertising Emails

The use of contact details published under the legal notice (imprint) obligation for sending advertising and information materials that have not been expressly requested is hereby objected to. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example through spam emails.

This website uses Google conversion tracking. If you have reached our website via an ad placed by Google, Google Ads will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Every Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page provided with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this purpose, for example via a browser setting that generally disables the automatic setting of cookies, or by setting your browser to block cookies from the domain “googleleadservices.com”.

Please note that you must not delete the opt-out cookies as long as you do not wish measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

Hosting & Content Delivery Network

Cloudflare

For hosting our website, delivering the page content via a content delivery network and the security check of our forms, we use the services of the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver page content, graphics and scripts quickly and securely via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability, security and functionality of our website pursuant to Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Spam Protection with Cloudflare Turnstile

To protect our forms against automated requests, we use Cloudflare Turnstile from the above-mentioned provider Cloudflare Inc. Turnstile uses technical characteristics of your browser to check whether a request comes from a human. No cookies are set for advertising purposes. The processing is carried out to safeguard our legitimate interest in the security of our website pursuant to Art. 6 para. 1 lit. f GDPR.

Form Delivery with Web3Forms

To deliver form submissions by email, we use the Web3Forms service (web3forms.com) of the provider Web3Creative, based in Kerala, India. When you submit a form, your information and, for technical reasons, your IP address are transmitted to Web3Forms and forwarded from there to us as an email. According to the provider, the servers are located in the USA. According to the provider, the contents of the forms are not stored, and server logs are deleted regularly.

Contact Management with Notion

We store inquiries from our forms in a database of the Notion service (Notion Labs, Inc., San Francisco, USA) in order to process and follow up on them. The data stored is your name, email address, company, your message, the time of the inquiry and your consent. The provider may also process data in the USA.

Web Analytics with Seline

For the statistical evaluation of the use of our website, we use the analytics service Seline (seline.com). Seline works without cookies and without cross-device tracking. Only anonymized usage data such as pages accessed, referral sources, device type and approximate origin (country) is collected. It is not possible to draw conclusions about individual persons. The processing is carried out to safeguard our legitimate interest in improving our offering pursuant to Art. 6 para. 1 lit. f GDPR.

Web Analytics with Cloudflare Web Analytics

In addition, we use Cloudflare Web Analytics from the above-mentioned provider Cloudflare Inc. When a page is accessed, your browser loads a small script from Cloudflare for this purpose and transmits technical information about the page view: page accessed, referral source, browser, operating system, device type, approximate origin (country) and page load times. For technical reasons, your IP address is transmitted to Cloudflare in the process. Cloudflare Web Analytics does not set cookies, does not store any data on your device and does not create profiles or fingerprints of individual visitors. We receive only aggregated statistics; it is not possible for us to draw conclusions about individual persons. The processing is carried out to safeguard our legitimate interest in improving our offering pursuant to Art. 6 para. 1 lit. f GDPR.

Usage Analysis with Microsoft Clarity

To understand how our website is used, we use Microsoft Clarity from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Clarity records how visitors interact with a page, such as clicks, mouse movements and scrolling, and presents this to us as heatmaps and as recordings of individual page views. In the process, technical information such as browser, operating system, device type, screen size, approximate origin (country) and the referral source is processed, and for technical reasons your IP address is transmitted to Microsoft. Clarity does not set any cookies on our website, and no recognition across multiple page views or visits takes place. Entries and contents of our forms are not transmitted to Microsoft. Microsoft may also process the data in the USA. The processing is carried out to safeguard our legitimate interest in a user-friendly design of our website pursuant to Art. 6 para. 1 lit. f GDPR. Further information can be found in the Microsoft privacy statement.

Orders and Payment Processing via Digistore24

Subscriptions to Oceanleaf Learn are processed via the reseller Digistore24 GmbH, Germany. If you click on an order link on our website, you will be redirected to the Digistore24 order page. Digistore24 collects the data required for ordering, payment and provision of access under its own responsibility. The Digistore24 privacy policy applies.

Community Leaderboard

On the “Leaderboard” page, we embed a ranking of our community, which is operated as a separate application on Microsoft Azure. The name, level and points of members who have consented to publication are displayed. When the page is accessed, your browser establishes a connection to the Microsoft Azure servers, and your IP address is transmitted in the process.

The copyright and all other rights to content, images, photos or other files on the website belong exclusively to the operator of this website or to the specifically named rights holders. The written consent of the copyright holder must be obtained in advance for the reproduction of any files.

Anyone who commits a copyright infringement without the consent of the respective rights holder may be liable to prosecution and possibly to damages.

General Disclaimer

All information on our website has been carefully checked. We strive to provide our information in an up-to-date, accurate and complete manner. Nevertheless, the occurrence of errors cannot be completely ruled out, and we therefore cannot guarantee the completeness, accuracy and timeliness of information, including information of a journalistic or editorial nature. Liability claims for damages of a material or non-material nature caused by the use of the information provided are excluded, unless there is demonstrably intentional or grossly negligent fault.

The publisher may, at its own discretion and without notice, change or delete texts and is not obliged to update the contents of this website. The use of or access to this website is at the visitor’s own risk. The publisher, its clients or partners are not responsible for damages, such as direct, indirect, incidental, specifically determinable in advance or consequential damages, allegedly caused by visiting this website, and consequently accept no liability for them.

The publisher likewise assumes no responsibility or liability for the content and availability of third-party websites that can be reached via external links on this website. The operators of the linked pages are solely responsible for their content. The publisher therefore expressly distances itself from all third-party content that may be relevant under criminal or liability law or that violates public decency.

Changes

We may amend this privacy policy at any time without prior notice. The current version published on our website applies. Insofar as the privacy policy is part of an agreement with you, we will inform you of the change by email or in another suitable manner in the event of an update.

Questions to the Data Protection Officer

If you have any questions about data protection, please send us an email or contact directly the person responsible for data protection in our organization listed at the beginning of this privacy policy.

Last updated: 12 May 2024
Source:Swissanwalt