Countdown 2030 Association
The person responsible within the meaning of the DSG is:

Countdown 2030 Association

4000 Basel
Switzerland

Founded on December 13, 2019, without commercial register entry.
The current statutes are available here: Download statutes

Bank details
Countdown 2030, 4057 Basel
IBAN: CH14 0839 0036 9151 1000 1
BIC (SWIFT code): ABSOCH22

Imprint
Design: Début Début with Bosco Ferreira
Technical implementation: Bosco Ferreira
Content: Countdown 2030

© Countdown 2030, 2024. All rights reserved.

Privacy Policy (version from August 1, 2024)
In this privacy policy, we, the Countdown 2030 association (hereinafter Countdown 2030, we or us), explain how we collect and otherwise process personal data. This is not an exhaustive description; other privacy policies may regulate specific issues. Personal data is understood to mean all information that relates to a specific or identifiable person.

If you provide us with personal data of other people (e.g. family members, data of work colleagues), please ensure that these people are aware of this privacy policy and only provide us with their personal data if you are permitted to do so and if this personal data is correct.

This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation («GDPR»), the Swiss Data Protection Act («DSG») and the revised Swiss Data Protection Act («revDSG»). However, whether and to what extent these laws are applicable depends on the individual case.

Responsible person / data protection officer / representative
The Countdown 2030 Association is responsible for the data processing that we describe here. If you have any concerns about data protection, you can let us know at the following contact address:
Countdown 2030 Association
4000 Basel
Switzerland

Our representative in the EEA according to Art. 27 GDPR is:
Countdown 2030 Association
4000 Basel
Switzerland

Collection and processing of personal data
We primarily process the personal data that we receive from our customers and other business partners and other people involved in the context of our business relationship with them or that we collect from their users when operating our websites, apps and other applications.

To the extent permitted, we also obtain certain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, press, Internet) or receive such data from other companies within the XXX Group, from authorities and other third parties. In addition to the data you provide to us directly, the categories of personal data that we receive about you from third parties include, in particular, information from public registers, information that we learn in connection with official and judicial proceedings, information in connection with your professional functions and activities (so that we can, for example, conclude and process business with your employer with your help), information about you in correspondence and meetings with third parties, credit reports (insofar as we conduct business with you personally), information about you that people from your environment (family, advisors, legal representatives, etc.) give us so that we can conclude or process contracts with you or with your involvement (e.g. references, your address for deliveries, powers of attorney, information on compliance with legal requirements such as anti-money laundering and export restrictions, information from banks, insurance companies, sales and other contractual partners of ours for the use or provision of services by you (e.g. made payments, purchases made), information from the media and the Internet about you (if this is appropriate in the specific case, e.g. in the context of an application, press review, marketing/sales, etc.), your addresses and, if applicable, interests and other socio-demographic data (for marketing), data in connection with the use of the website (e.g. IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of visit, pages and content accessed, functions used, referring website, location information).

Cookies / tracking and other technologies in connection with the use of our website
We typically use "cookies" and similar technologies on our websites that can be used to identify your browser or device. A cookie is a small file that is sent to your computer or automatically saved on your computer or mobile device by the web browser you use when you visit our website. When you visit this website again, we can recognize you, even if we do not know who you are. In addition to cookies that are only used during a session and deleted after your visit to the website ("session cookies"), cookies can also be used to save user settings and other information for a certain period of time (e.g. two years) ("permanent cookies"). However, you can set your browser to reject cookies, only save them for one session or otherwise delete them early. Most browsers are preset to accept cookies. We use permanent cookies so that you can save user settings (e.g. language, auto login). If you block cookies, certain functions (such as language selection, shopping cart, ordering processes) may no longer work.

We sometimes and where permitted also include visible and invisible image elements in our newsletters and other marketing emails, which we can retrieve from our servers to determine whether and when you opened the email, so that we can measure and better understand how you use our offers and tailor them to you. You can block this in your email program; most are preset to do this.

By using our websites and agreeing to receive newsletters and other marketing emails, you agree to the use of these technologies. If you do not want this, you must set your browser or email program accordingly.

Data sharing and data transfer abroad
As part of our business activities and the purposes according to section 3, we also disclose data to third parties, as far as permitted and we think it appropriate, either because they process it for us or because they want to use it for their own purposes. This applies in particular to the following places:

Customers;
domestic and foreign authorities, offices or courts;
media;
Public, including visitors to websites and social media

If a recipient is located in a country without adequate legal data protection, we will contractually oblige the recipient to comply with the applicable data protection (for this purpose we use the revised standard contractual clauses of the European Commission, which can be accessed here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?), unless they are already subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exception. An exception may apply in particular in legal proceedings abroad, but also in cases of overriding public interests or if the execution of a contract requires such disclosure, if you have consented or if the data is data that you have made generally available and whose processing you have not objected to.

Duration of storage of personal data
We process and store your personal data as long as it is necessary to fulfill our contractual and legal obligations or for the purposes pursued with the processing, i.e. for example for the duration of the entire business relationship (from initiation, processing to termination of a contract) and beyond that in accordance with the statutory retention and documentation obligations. It is possible that personal data will be retained for the period in which claims can be asserted against our company and to the extent that we are otherwise legally obliged to do so or legitimate business interests require it (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the purposes mentioned above, it will generally be deleted or anonymized as far as possible. For operational data (e.g. system protocols, logs), shorter retention periods of twelve months or less generally apply.

Data security
We take appropriate technical and organizational security precautions to protect your personal data from unauthorized access and misuse, such as training, IT and network security solutions, access controls and restrictions, and encryption of data media and transmissions.

Obligation to provide personal data
As part of our business relationship, you must provide the personal data that is necessary for establishing and conducting a business relationship and fulfilling the associated contractual obligations (you generally have no legal obligation to provide us with data). Without this data, we will generally not be able to conclude or process a contract with you (or the body or person you represent). The website cannot be used if certain information to ensure data traffic (such as IP address) is not disclosed.

Rights of the data subject
Within the scope of the data protection law applicable to you and to the extent provided for therein (such as in the case of the GDPR), you have the right to information, rectification, erasure, the right to restrict data processing and otherwise to object to our data processing, in particular that for the purposes of direct marketing, profiling for direct advertising and other legitimate interests in processing as well as to the release of certain personal data for the purpose of transferring it to another location (so-called data portability). Please note, however, that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are entitled to rely on it) or need it to assert claims. If you incur costs, we will inform you in advance. We have already informed you about the possibility of revoking your consent in section 3. Please note that the exercise of these rights may conflict with contractual agreements and this may have consequences such as early termination of the contract or cost consequences. We will inform you in advance of this if this has not already been contractually agreed.

The exercise of such rights generally requires that you clearly prove your identity (e.g. by providing a copy of your ID card if your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address given in section 1.

Every person affected also has the right to enforce their claims in court or to file a complaint with the responsible data protection authority. The responsible data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

Changes
We can amend this privacy policy at any time without prior notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you of the change by email or in another appropriate manner in the event of an update.