Personal data (hereinafter referred to as “data”) are processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there by AppArranger.

Pursuant to Art. 4 no. 1. of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing. In addition, we inform you below about the third-party components used by us for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as the responsible party
II. Rights of users and data subjects
III. Information on data processing

I. Information about us as the responsible party

The responsible provider of this service in the sense of data protection law is:

AppArranger AG
Lerchenfeldstrasse 3
9014 St. Gallen
Switzerland

Phone: +41 44 515 95 01

Email: [email protected]

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right to

• to confirmation as to whether data concerning them are being processed, to information about the data being processed, to further information about the data processing and to copies of the data (cf. also Art. 15 DSGVO);
• to correct or complete incorrect or incomplete data (cf. also Art. 16 DSGVO);
• to the immediate erasure of the data concerning them (cf. also Art. 17 DSGVO), or, alternatively, insofar as further processing pursuant to Art. 17 para. 3 DSGVO is necessary, to restriction of processing in accordance with Art. 18 DSGVO;
• to receive the data concerning them and provided by them and to transfer this data to other providers/controllers (cf. also Art. 20 DSGVO);
• to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection provisions (cf. also Art. 77 DSGVO).

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or restriction of processing that may be necessary on the basis of Articles 16, 17 (2) and (3) of the Data Protection Act. 1, 18 DSGVO takes place. However, this obligation shall not apply if such notification is impossible or would involve a disproportionate effort. Without prejudice to this, the user has a right to information about these recipients.

Likewise, according to Art. 21 DSGVO, users and data subjects have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Art. 6 para. 1 lit. (f) DSGVO are processed. In particular, an objection to the processing of data for the purpose of direct marketing is admissible.

III. Information on data processing

Your data processed during the use of our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any statutory retention obligations and no other information on individual processing procedures is provided below.

Server data

For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted by your Internet browser to us or to our web space provider. With these so-called server log files, among other things, the type and version of your Internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access, as well as the IP address of the Internet connection from which the use of our website takes place, are collected.

The data collected in this way is stored temporarily, but not together with other data about you.

This storage takes place on the legal basis of Art. 6 para. 1 lit. (f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our Internet presence.

The data will be deleted after one year at the latest, unless further storage for evidence purposes is required. Otherwise, all or part of the data shall be exempt from deletion until an incident is finally resolved.

Contract processing

The data transmitted by you for the use of our service offer are processed by us for the purpose of the contract winding up and are necessary in this respect. Conclusion and processing of the contract are not possible without the provision of your data. 

The legal basis for the processing is Art. 6 para. 1 lit. (b) GDPR.

We delete the data when the contract has been fully processed, but in doing so we must observe the retention periods under tax and commercial law.

Within the scope of contract processing, we pass on your data to the company or person commissioned with the service, insofar as the transfer is necessary for the fulfilment of the service or for payment purposes.

The legal basis for the transfer of the data is then Art. 6 para. 1 lit. (b) GDPR.

Customer account / registration function

If you create a customer account with us via our website, we will collect and store the data you enter during registration (e.g. your name, address or e-mail address) exclusively for pre-contractual services, for the fulfilment of the contract or for the purpose of customer care (e.g. in order to provide you with an overview of your previous orders with us or in order to be able to offer you the so-called notepad function). At the same time we store the IP address and the date of your registration together with the time. Of course, this data will not be passed on to third parties.

As part of the further registration process, your consent to this processing will be obtained and reference will be made to this privacy policy. The data collected by us in this process is used exclusively for the provision of the customer account and for the provision of our services. 

Insofar as you consent to this processing, Art. 6 para. 1 lit. (a) GDPR Legal basis for processing.

If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 Para. 1 lit. (b) GDPR.

The consent given to us for the opening and maintenance of the customer account can be revoked in accordance with Art. 7 Para. 3 DSGVO at any time with effect for the future. For this purpose you only have to inform us about your revocation.

The data collected in this respect shall be deleted as soon as processing is no longer necessary. In doing so, however, we must observe retention periods under tax and commercial law.

Newsletter

If you register for our free newsletter, the data you requested for this purpose, i.e. your e-mail address and – optionally – your name and address, will be transmitted to us. At the same time, we store the IP address of the Internet connection from which you access our website as well as the date and time of your registration. During the further registration process, we will ask for your consent to send you the newsletter, describe the content in detail and refer to this privacy policy. We use the data collected in the process exclusively for sending the newsletter – in particular, it is therefore not passed on to third parties.

The legal basis for this is Art. 6 para. 1 lit. (a) GDPR.

You can withdraw your consent to the sending of newsletters in accordance with Art. 7 para. 3 DSGVO at any time with effect for the future. To do this, you simply need to inform us of your revocation or click on the unsubscribe link contained in every newsletter.

Contact requests / contact possibility

If you contact us via contact form or e-mail, the data you provide will be used to process your request. The specification of the data is necessary for the processing and answering of your inquiry – without their provision we cannot answer your inquiry or at best only to a limited extent.

The legal basis for this processing is Art. 6 para. 1 lit. (b) GDPR.

Your data will be deleted as soon as your inquiry has been finally answered and there are no legal obligations to retain data, such as e.g. the obligation to store data. in the event of any subsequent processing of the contract.

Google Analytics

We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.

Through certification under the EU-US Privacy Shield (“EU-US Privacy Shield”)

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.

The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 para. 1 lit. (f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our Internet presence.

Usage- and user-related information, such as e.g. IP-address, place, time or frequency of the visit of our website will be transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. Through this function, Google already shortens the IP address within the EU or EEA.

The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and of the usage activities there. This data may also be used to provide other services related to the use of our website and the use of the Internet.

Google states that it does not associate your IP address with any other data. In addition, Google holds under

https://www.google.com/intl/de/policies/privacy/partners

further data protection information is available for you, e.g. also on the possibilities to prevent the use of data.

In addition Google offers under

https://tools.google.com/dlpage/gaoptout?hl=de

a so-called deactivation add-on together with further information on this. This add-on can be installed with the most common Internet browsers and offers you further control over the data that Google collects when you visit our website. In doing so, the add-on tells the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. This does not prevent information from being transmitted to us or to other web analytics services. If and which other web analytics services are used by us, you will of course also find out in this privacy policy.

Sub-processor

We engage the following trusted sub-processors to provide portions of the Service on behalf of AppArranger in connection with the processing of Personal Data:

Microsoft (Azure)- Location: Switzerland – Service: Data processing and hosting

Twilio (SendGrind)- Location: San Francisco USA – Service: Cloud communication platform

SIX Payment Services Ltd – Location: Hardturmstrasse 201, CH-8021 Zurich

Data processing when registering as a mobile app user (appointment booker)

To use the features of the AppArranger app, you must register. When registering, you must enter your e-mail address, mobile phone number, address data and any other data. You will receive a verification code by email or on your phone number to unlock your user profile. From this point on, you can use all the functions provided in the app.

We do not pass on your personal data to third parties. This does not include professional service providers with whom we work now or in the future, for example, to provide support requests and support functions of the App. This is especially true in the context of future developments and innovations of the app to improve our service.

Data processing during registration as a service provider (appointment provider)

To use the features of the AppArranger app, you must register. When registering, you must enter your e-mail address, mobile phone number, address data and any other data. You will receive a verification code by email or on your phone number to unlock your user profile. From this point on, you can use all the functions provided in the app. You can use your service provider account to create your profile, enter services, employee data and employee profiles, as well as all appointment-relevant information.

We do not pass on your personal data to third parties. This does not include professional service providers with whom we work now or in the future, for example, to provide support requests and support functions of the App. This is especially true in the context of future developments and innovations of the app to improve the service.

Use of the service provider support

In order to be able to process your requests and inquiries quickly and efficiently, a support contact is available in the app. The information transmitted to us in this context will only be used to process your request and to contact you.

Communication and marketing

If AppArranger’s services are used, AppArranger has the right to use this information for direct contact and direct marketing, subject to your written revocation of this consent.

Changes to this privacy policy

This privacy policy changes from time to time. We will not restrict your rights without your express consent. We will clearly indicate any significant changes.