Privacy policy

Thank you for visiting our website bikeplan.swiss and for your interest in our company.

Protecting your personal data, such as your date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy policy is to inform you about the processing of the personal data we collect from you when you visit our website. Our data protection practices comply with the legal provisions of the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR). The following privacy policy fulfills the information obligations under the FADP and the GDPR. These can be found, for example, in Art. 8 et seq. FADP and Art. 13 et seq. GDPR.

Data file owner or controller

The data file owner or controller within the meaning of Art. 3 letter i FADP or Art. 4(7) GDPR is the person who, alone or jointly with others, determines the purposes and means of processing personal data. The controller under Art. 4(7) GDPR is also the recipient of personal data within the meaning of Art. 4(9) GDPR. Any third-party recipient is identified separately.

The data file owner or controller for our website is:

Bike Plan AG
Marktgasse 50
3011 Bern
Switzerland
Email: contact@bikeplan.swiss
Tel.: +41 31 521 68 00

Providing the website and creating log files

Whenever our website is accessed, our system automatically records data and information about the device accessing it (e.g., computer, cell phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

Information about the browser type and version used;
The operating system of the accessing device;
The hostname of the accessing computer;
The IP address of the accessing device;
The date and time of access;
Websites and resources (images, files, other page content) accessed on our website;
Websites from which the user’s system reached our website (referrer tracking);
A message indicating whether the request was successful;
The volume of data transferred

This data is stored in our system’s log files. This data is not stored together with the personal data of a specific user, so individual website visitors are not identified.

Legal basis for processing personal data

Personal data is processed in accordance with the principle of lawfulness (Art. 4 FADP), the principle of good faith (Art. 2 Swiss Civil Code), and Art. 6(1)(f) GDPR (legitimate interest).

Purpose of data processing

The temporary (automated) storage of data is necessary during a website visit to enable the website to be delivered. Personal data is also stored and processed to maintain our website’s compatibility for as many visitors as possible and to combat misuse and resolve technical issues. This requires logging the technical data of the accessing computer so that we can respond as early as possible to display errors, attacks on our IT systems, and/or errors in our website’s functionality. We also use the data to optimize the website and to ensure the general security of our information technology systems.

Retention period

The technical data described above is deleted as soon as it is no longer needed to ensure that the website is compatible for all visitors, but no later than 3 months after our website is accessed.

Options for objection and erasure

You may object to processing at any time under Art. 21 GDPR and request the erasure of data under Art. 17 GDPR. Information about your rights and how to exercise them can be found at the end of this privacy policy.

Special website features

Our website offers various features that involve us collecting, processing, and storing personal data when you use them. Below, we explain what happens to this data:

Application form

What personal data is collected and to what extent is it processed?

The data you enter in the application form fields and any data you upload is processed for the purpose specified below.

Legal basis for processing personal data

Personal data is processed in accordance with the principle of lawfulness (Art. 4 FADP), the principle of good faith (Art. 2 Swiss Civil Code), and Art. 6(1)(b) GDPR (taking precontractual or contractual measures).

Purpose of data processing

The purpose of data processing is to review and process the application documents you upload through the form.

Retention period

The data is deleted as soon as the application has been processed and there is no longer a legitimate interest in retaining the application data. If no employment relationship is established, your application documents will therefore be deleted after no more than 6 months.

Options for objection and erasure

Requirement to provide personal data

The information in the application form is required to submit and process the application. If you do not complete the required fields, or do not complete them in full, the application you wish to submit cannot be sent or processed.

Contact form(s)

What personal data is collected and to what extent is it processed?

Legal basis for processing personal data

Personal data is processed in accordance with the principle of lawfulness (Art. 4 FADP), the principle of good faith (Art. 2 Swiss Civil Code), and Art. 6(1)(a) GDPR (consent through a clear affirmative act or conduct).

Purpose of data processing

We will use the data collected through our contact form or contact forms only to process the specific inquiry submitted through the contact form. Please note that, to respond to your inquiry, we may also send emails to the address you provide. This allows you to receive confirmation from us that your inquiry has been forwarded to us correctly. However, we are not required to send this confirmation email; it is provided for your information only.

Retention period

Once your inquiry has been processed, the data collected will be deleted without delay, unless statutory retention periods apply.

Options for objection and erasure

Requirement to provide personal data

Use of the contact forms is voluntary. You are not required to contact us through the contact form and may instead use the other contact options listed on our website. If you wish to use our contact form, you must complete the fields marked as required. If you do not provide the required information in the contact form, you will either be unable to submit the inquiry or we will be unable to process it due to the missing information.

Newsletter signup form

What personal data is collected and to what extent is it processed?

When you sign up for the newsletter on our website, we receive the email address you enter in the signup field and any other contact details you provide through the newsletter signup form.

Legal basis for processing personal data

Purpose of data processing

We use the data collected through our newsletter signup form exclusively to send our newsletter, which provides information about all our services and news. After you sign up, we will send you a confirmation email containing a link that you must click to complete your newsletter subscription (double opt-in).

Retention period

You may unsubscribe from our newsletter at any time by clicking the unsubscribe link included in every newsletter. We will delete your data without delay after you unsubscribe, unless statutory retention obligations apply. We will also delete your data without delay if the signup process is not completed. We reserve the right to delete data without giving reasons and without prior or subsequent notice.

Options for objection and erasure

Requirement to provide personal data

If you wish to subscribe to our newsletter, you must complete the fields marked as required and confirm your email address by clicking the double opt-in link. The newsletter signup details are necessary to use the newsletter service. The information is used exclusively to send our newsletter. If you do not complete the required fields, we cannot provide you with our newsletter service.

Disclosure of information to third parties

Personal data is processed in accordance with the principle of lawfulness (Art. 4 FADP) and the principle of good faith (Art. 2 Swiss Civil Code).

The disclosure of information to third parties depends on the scope of the activities or offerings of our website or business model described below.

As a rule, we retain your information only for as long as necessary and treat it confidentially. Exceptions include the transfer of personal data to debt collection service providers, public bodies and authorities, and private individuals entitled to receive it under statutory provisions, court decisions, or official orders, as well as transfers to authorities for the purpose of initiating legal proceedings or criminal prosecution if our legally protected rights are infringed.

Statistical analysis of visits to this website – web trackers

When this website or individual files on the website are accessed, we collect, process, and store the following data: IP address, the website from which the file was accessed, file name, date and time of access, volume of data transferred, and a message indicating whether the request was successful (a web log). We use this access data exclusively in a nonpersonalized form to continuously improve our online offering and for statistical purposes.

Any personal data is processed in accordance with the principle of lawfulness (Art. 4 FADP) and the principle of good faith (Art. 2 Swiss Civil Code). We also use the following web trackers to analyze visits to this website:

Google

We use the Google service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: http://www.google.com/, on our website. According to the assessment of the Swiss authorities, processing takes place in safe third countries. Switzerland’s list of countries is available at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins- ausland.html. Personal data is also transferred to the USA. For transfers of personal data to the USA, the EU Commission has issued an adequacy decision regarding the EU-US Data Privacy Framework within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d- 4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, so the usual level of protection under the GDPR applies to the transfer.

The legal basis for transferring personal data is the consent you provided on our website under Art. 4(5) FADP or Art. 13(2) FADP and Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR.

We use Google to load additional Google services on our website. The service is used to provide other Google services, such as the data processing required to deliver streams and fonts, and relevant content from Google Search. It is technically necessary to exchange information about the website visitor that Google already holds between Google services and to provide the visitor with personalized content tailored to their Google account.

For this processing, the service or we collect the following data: background data stored about the website visitor in their Google user account or in other Google services; background data for providing Google services, such as streaming data or advertising data; data about the website user’s interactions with Google Search; information about the user’s device, IP address, and browser; and other data from Google services for providing Google services in connection with our website.

If the service is enabled on our website, our website connects to the servers of Google Ireland Limited and transfers the required data. As part of processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When the Google service is used on our website, Google may transfer and process information from other Google services to provide background services for displaying and processing data for the services provided by Google. This may also involve transferring data to Google Apis, Doubleclick, Google Cloud, Google Ads, and Google Fonts in accordance with Google’s privacy policy. You can view the EU-US Data Privacy Framework certification at https://www.dataprivacyframework.gov/s/participant-search/participant-detail? id=a2zt000000001L5AAI&status=Active.
You may withdraw your consent at any time. Further information about withdrawing your consent can be found either with the consent itself or at the end of this privacy policy.

Further information about the handling of transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

Google Ads

We use the Google Ads service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: http://www.google.com/, on our website. According to the assessment of the Swiss authorities, processing takes place in safe third countries. Switzerland’s list of countries is available at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins- ausland.html. Personal data is also transferred to the USA. For transfers of personal data to the USA, the EU Commission has issued an adequacy decision regarding the EU-US Data Privacy Framework within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d- 4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, so the usual level of protection under the GDPR applies to the transfer.

The legal basis for transferring personal data is the consent you provided on our website under Art. 4(5) FADP or Art. 13(2) FADP and Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR.

Google Ads is an advertising system that allows us to place advertisements on external websites to inform our customers about our services. Based on parameters we specify, Google Ads displays advertising on external websites tailored to our customer base and linking to our website. If a website visitor clicks a Google Ads advertisement, they are directed to our website. To measure the success of Google Ads advertisements and the associated compensation, Google Ads measures the success of the advertising activity when our website is accessed. Our website processes the data provided by Google Ads to analyze and improve our advertising activities and calculate any compensation that may be due.

For this processing, the service or we collect the following data: data about website visitors’ advertising interests; visitors’ interactions with advertisements relating to our website; data about visits to our website by visitors who previously clicked a Google Ads advertisement and reached our website; data about the user’s device, IP address, and browser; and other data from Google services for delivering and refining Google advertising relating to our website.

If the service is enabled on our website, our website connects to the servers of Google Ireland Limited and transfers the required data. As part of processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When Google Ads is used on our website, Google may transfer and process information from other Google services to provide background services for improving and personalizing Google advertising. This may also involve processing data through other Google services such as Google Apis, Google Cloud, Google Ads, Google Analytics, Google Tag Manager, Google Marketing Plattform, and Google Fonts in accordance with Google’s privacy policy, with Google acting as an independent data controller. You can view the EU-US Data Privacy Framework certification at https://www.dataprivacyframework.gov/s/participant-search/participant- detail?id=a2zt000000001L5AAI&status=Active.

You may withdraw your consent at any time. Further information about withdrawing your consent can be found either with the consent itself or at the end of this privacy policy.

Gstatic

We use the Gstatic service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: http://www.google.com/, on our website. According to the assessment of the Swiss authorities, processing takes place in safe third countries. Switzerland’s list of countries is available at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins- ausland.html. Personal data is also transferred to the USA. For transfers of personal data to the USA, the EU Commission has issued an adequacy decision regarding the EU-US Data Privacy Framework within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d- 4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, so the usual level of protection under the GDPR applies to the transfer.

The legal basis for transferring personal data is the consent you provided on our website under Art. 4(5) FADP or Art. 13(2) FADP and Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR.

Gstatic is a background service used by Google to retrieve static content, reduce bandwidth usage, and preload required catalog files. In particular, the service loads background data for Google Fonts and Google Maps.

As part of processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. You can view the EU-US Data Privacy Framework certification at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

You may withdraw your consent at any time. Further information about withdrawing your consent can be found either with the consent itself or at the end of this privacy policy.

Further information about the handling of transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

Youtube

We use the Youtube service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: http://www.google.com/, on our website. According to the assessment of the Swiss authorities, processing takes place in safe third countries. Switzerland’s list of countries is available at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins- ausland.html. Personal data is also transferred to the USA. For transfers of personal data to the USA, the EU Commission has issued an adequacy decision regarding the EU-US Data Privacy Framework within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d- 4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, so the usual level of protection under the GDPR applies to the transfer.

The legal basis for transferring personal data is the consent you provided on our website under Art. 4(5) FADP or Art. 13(2) FADP and Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR.

The Youtube service is used to embed videos from the Youtube platform on our website. This integration allows us to display videos directly on our website. Website visitors can therefore view information about our services without having to visit the Youtube platform.

For this processing, the service or we collect the following data: data for displaying the stream; data about videos clicked, playlists created, ratings, and comments; information about the user’s device, IP address, and browser; and other data from Google services for providing the video in accordance with Google’s privacy policy.

If Youtube is enabled on our website and a video is played, our website connects to the servers of Google Ireland Limited and transfers the data required to display the stream or video. As part of processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Personal data is also transferred to the USA. For transfers of personal data to the USA, the EU Commission has issued an adequacy decision regarding the EU-US Data Privacy Framework within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60- be03fcb0fddf_en). The service operator is certified under the DPF, so the usual level of protection under the GDPR applies to the transfer. When Youtube videos are displayed on our website, Youtube may transfer and process information from other Google services to provide background services for the video, such as streaming data. This may also involve transferring data to Google Fonts, Google Apis, Google Video, and Doubleclick. You can view the EU-US Data Privacy Framework certification at https://www.dataprivacyframework.gov/s/participant-search/participant-detail? id=a2zt000000001L5AAI&status=Active.

You may withdraw your consent at any time. Further information about withdrawing your consent can be found either with the consent itself or at the end of this privacy policy.

Further information about the handling of transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

Integration of external web services and processing of data outside the EU

We use active content from external providers, known as web services, on our website. When you access our website, these external providers may receive personal information about your visit. This may involve processing data outside Switzerland and the EU. You can prevent this by installing an appropriate browser plug-in or disabling the execution of scripts in your browser. This may limit the functionality of websites you visit.

We use the following external web services:

Google Cloud APIs

We use the Google Cloud APIs service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: http://www.google.com/, on our website. According to the assessment of the Swiss authorities, processing takes place in safe third countries. Switzerland’s list of countries is available at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. For transfers of personal data to the USA, the EU Commission has issued an adequacy decision regarding the EU-US Data Privacy Framework within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, so the usual level of protection under the GDPR applies to the transfer.

The legal basis for transferring personal data is the consent you provided on our website under Art. 4(5) FADP or Art. 13(2) FADP and Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR.

We use Google APIs to load additional Google services on our website. Google Apis is a collection of interfaces for communication between the various Google services used on your website. The service is used in particular to display Google Fonts typefaces and provide the Google Maps map.

For this processing, the service or we collect the following data: IP address

If the service is enabled on our website, our website connects to the servers of Google Ireland Limited and transfers the required data. As part of processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When the Google service is used on our website, Google may transfer and process information from other Google services to provide background services for displaying and processing data for the services provided by Google. This may also involve transferring data to Google Cloud, Google Maps, Google Ads, and Google Fonts in accordance with Google’s privacy policy, with Google acting as the data controller. You can view the EU-US Data Privacy Framework certification at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

You may withdraw your consent at any time. Further information about withdrawing your consent can be found either with the consent itself or at the end of this privacy policy.

Further information about the handling of transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

Google Fonts

We use the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: http://www.google.com/, on our website. According to the assessment of the Swiss authorities, processing takes place in safe third countries. Switzerland’s list of countries is available at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und- wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. For transfers of personal data to the USA, the EU Commission has issued an adequacy decision regarding the EU-US Data Privacy Framework within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, so the usual level of protection under the GDPR applies to the transfer.

The legal basis for transferring personal data is the consent you provided on our website under Art. 4(5) FADP or Art. 13(2) FADP and Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR.
We use Google Fonts to embed attractive typefaces on our website and present our website to you in a more visually appealing form. The service may also be used on our website when other Google services that require Google Fonts typefaces to function are loaded. This is the case, for example, when our website uses Google services that cannot function without Google Fonts.

For this processing, the service or we collect the following data: font data, the website visitor’s IP address, statistics on font usage, and other data from Google services relating to our website.
If the service is enabled on our website, our website connects to the servers of Google Ireland Limited and transfers the required data. As part of processing on our behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When the Google service is used on our website, Google may transfer and process information from other Google services to provide background services for displaying and processing data for the services provided by Google. This may also involve transferring data to Google Apis, Google Cloud, and Google Ads in accordance with Google’s privacy policy. You can view the EU-US Data Privacy Framework certification at https://www.dataprivacyframework.gov/s/participant-search/participant-detail? id=a2zt000000001L5AAI&status=Active.

You may withdraw your consent at any time. Further information about withdrawing your consent can be found either with the consent itself or at the end of this privacy policy.

Further information about the handling of transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

Google reCaptcha

We use the Google reCaptcha service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: http://www.google.com/, on our website. According to the assessment of the Swiss authorities, processing takes place in safe third countries. Switzerland’s list of countries is available at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und- wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. For transfers of personal data to the USA, the EU Commission has issued an adequacy decision regarding the EU-US Data Privacy Framework within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, so the usual level of protection under the GDPR applies to the transfer.

The legal basis for transferring personal data is the consent you provided on our website under Art. 4(5) FADP or Art. 13(2) FADP and Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR.

If Google reCaptcha is enabled on our website, the data determined by Google reCaptcha is transferred to the servers of Google Ireland Limited. As part of processing on our behalf, personal data may also be transferred to the servers of the parent company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Based on specific characteristics and an analysis of behavior on the website, the service determines whether entries are made automatically by a program (a bot) or by a human. The service has three different levels. It either automatically recognizes that an entry has not been made by a bot, or asks the user to select a Captcha checkbox. A third option displays small image, audio, or text tasks that the website visitor must solve. Google reCaptcha is a Captcha service used on our website for security reasons to prevent bots (robot programs) from interacting with our website. Google reCaptcha verifies on our behalf that only humans, and not bots, can use our website. This allows us, in particular, to protect the special features of our website (e.g., contact forms or other input options such as the login area) against abusive access.

For this processing, the service or we collect the following data: user behavior (e.g., mouse gestures or input behavior), IP address, browser data, and computer information.

If you wish to use the input options on our website protected by Google reCaptcha, you must allow the use of Google reCaptcha and, where applicable, solve the relevant Captchas. If you do not complete the Captcha or do not allow the use of Google reCaptcha, you cannot use the form protected by the Captcha. Alternatively, you may use our other contact options (e.g., postal mail or email) at any time. You can view the EU-US Data Privacy Framework certification at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.
You may withdraw your consent at any time. Further information about withdrawing your consent can be found either with the consent itself or at the end of this privacy policy.

Further information about the handling of transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

Legally ok legal text snippet and modules

We use the Legally ok legal text snippet and modules service provided by Legally ok GmbH, Schochenmühlestrasse 6, 6340 Baar, Switzerland, email: hello@legally-ok.com, website: https://www.legally-ok.com/, on our website. Processing takes place exclusively in Switzerland in accordance with the data protection legislation applicable there. Processing also takes place in a third country outside the EU. The Commission has issued an adequacy decision for this third country. An up-to-date list of all adequacy decisions is available on the EU Commission’s website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data- protection/adequacy-decisions_de).

The legal basis for transferring and processing data is Art. 13(1) FADP and Art. 6(1)(c) GDPR. Using the service helps us meet our legal obligations.
The service loads the content of our legal texts onto our website. Its integration into our website loads the current versions of these legal texts. This integration may also load additional technical modules relating to legal texts or legally required elements.

Information about your rights in relation to processing can be found at the end of this privacy policy. Further information about the handling of transferred data can be found in the provider’s privacy policy at
https://www.legally-ok.com/datenschutz/.

WordPress

We use the WordPress service provided by Automattic Inc., 60 29th Street #343, CA 94110 San Francisco, United States, email: help@wordpress.com, website: https://automattic.com/, on our website. Your personal data is transferred to so-called unsafe third countries. We have required the partners involved to comply with the data protection laws applicable in Switzerland using appropriate safeguards (generally EU standard contractual clauses) under Art. 6(2)(a) FADP. You have given your consent to this, or there is a direct connection between the country and the conclusion of the contract. Personal data is also transferred to the USA. For transfers of personal data to the USA, the EU Commission has issued an adequacy decision regarding the EU-US Data Privacy Framework within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, so the usual level of protection under the GDPR applies to the transfer.

Under Art. 6(1)(f) GDPR, the legal basis for transferring personal data is our legitimate interest in processing it. Our legitimate interest is to achieve the purpose described below.

WordPress is the underlying technical system used to operate our WordPress website. We need this integration to display our website to you and edit content.

You can view the EU-US Data Privacy Framework certification at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000CbqcAAC.

You have the right to object to processing under Art. 21 GDPR. Further information can be found at the end of this privacy policy.

Further information about the handling of transferred data can be found in the provider’s privacy policy at https://automattic.com/privacy/.

Information about the use of cookies

Scope of personal data processing

We integrate and use cookies on various pages to enable certain features of our website and integrate external web services. Cookies are small text files that your browser can store on the device you use to access the website. These text files contain a distinctive string of characters that uniquely identifies your browser when you return to our website. The process of storing a cookie file is also called “setting a cookie.” Cookies may be set by the website itself or by external web services.

Legal basis for processing personal data

The relevant provisions are Art. 4 et seq. FADP (principles) and Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(a) or Art. 9(2)(a) GDPR (consent).

The applicable legal basis is specified in the cookie table later in this section.

In general, for cookies collected on the basis of a legitimate interest, our legitimate interest is to ensure that our website and its integrated services function properly (technically necessary cookies). Cookies may also improve user-friendliness and enable a more personalized approach. We have weighed your interests against ours in this respect.

Using cookie technology, we can identify, analyze, and track individual website visitors only if the visitor has consented to the use of the cookie under Art. 6(2) FADP or Art. 6(1)(a) GDPR.

Purpose of data processing

Cookies are set by our website or external web services to maintain our website’s full functionality, improve user-friendliness, or pursue the purpose specified when you gave your consent. Cookie technology also allows us to recognize individual visitors by pseudonyms, such as individual or random IDs, so that we can offer more personalized services. Details are provided in the following table.

Retention period

The cookies listed below are stored in your browser until they are deleted or, in the case of a session cookie, until the session expires. Details are provided in the following table:

Options for objection, withdrawal of consent, and erasure

You can configure your browser as you wish to prevent cookies from being set in general. You can then decide whether to accept cookies on a case-by-case basis or accept cookies in general. Cookies can be used for various purposes, for example to recognize that your device has already connected to our website (persistent cookies) or to store recently viewed offerings (session cookies). If you have expressly given us permission to process your personal data, you may withdraw this consent at any time. Please note that this does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

Data security and data protection, communication by email

Technical and organizational measures protect your personal data during collection, storage, and processing so that it is not accessible to third parties. When communication by email is unencrypted, we cannot guarantee complete data security during transmission to our IT systems. We therefore recommend encrypted communication or postal mail for highly confidential information.

Data retention period and data subject rights

Retention period

We store personal data only to the extent and for as long as necessary to fulfill the purposes for which it was collected, where we have an overriding legitimate interest in retaining it, or where we are legally required to do so.

Right of access

You have the right to request confirmation of whether we process your personal data. If we do, you have a right of access to the information specified in Art. 8 et seq. FADP or Art. 15(1) GDPR, unless the owner of the data file may refuse, restrict, or defer access (see Art. 9 and the following article FADP or Art. 15(4) GDPR). We will also be happy to provide you with a copy of the data.

Right to rectification

Under Art. 5(2) FADP or Art. 16 GDPR, you have the right to have any inaccurate personal data we hold (such as your address, name, etc.) corrected at any time. You may also request at any time that the data we hold be completed. We will make the appropriate changes without delay.

Right to erasure

Under Art. 17(1) GDPR, you have the right to have the personal data we have collected about you erased if

the data is no longer needed;
following the withdrawal of your consent, there is no longer any legal basis for processing;
there are no longer any legitimate grounds for processing;
your data is being processed unlawfully;
a legal obligation requires it.

Under Art. 17(3) GDPR, this right does not apply if

processing is necessary to exercise the right to freedom of expression and information;
your data was collected on the basis of a legal obligation;
processing is necessary for reasons of public interest;
the data is necessary for the establishment, exercise, or defense of legal claims.

Right to restriction of processing

Under Art. 18(1) GDPR, you have the right in certain cases to request restriction of the processing of your personal data.

This applies if

you contest the accuracy of the personal data;
processing is unlawful and you do not agree to erasure;
the data is no longer needed for the purpose of processing, but the data collected is used for the establishment, exercise, or defense of legal claims;
an objection to processing has been lodged under Art. 21(1) GDPR and it is not yet clear whose interests prevail.

Right to withdraw consent

If you have given us your express consent to process your personal data (Art. 4(5) FADP and Art. 13(2)(a) FADP; Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR), you may withdraw it at any time. Please note that this does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal. Information that we are legally required to retain will be deleted after the retention period expires.

Right to object

Under Art. 21 GDPR, you have the right to object at any time to the processing of your personal data collected on the basis of Art. 6(1)(f) GDPR (in pursuit of a legitimate interest).

If you have given us your express consent to process your personal data (Art. 4(5) FADP and Art. 13(2)(a) FADP), you may withdraw it at any time. Please note that this does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal. You have this right only if there are special circumstances opposing storage and processing. Information that we are legally required to retain will be deleted after the retention period expires.

How can you exercise your rights?

You may exercise your rights at any time using the contact details below:

Bike Plan AG
Marktgasse 50
3011 Bern
Switzerland
Email: contact@bikeplan.swiss
Tel.: +41 31 521 68 00

Right to data portability

Under Art. 20 GDPR, you have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used, and machine-readable format. You may choose to have the data sent to you or to a controller you designate.

Upon request, we will provide the following data:

Data collected on the basis of consent (Art. 13(1) FADP and Art. 6(1)(a) GDPR);
Data we have received from you in connection with existing contracts (Art. 13(2)(a) FADP and Art. 6(1)(b) GDPR and Art. 9(2)(a) GDPR);
Data processed by automated means.

We will transfer personal data directly to a controller of your choice where technically feasible. Please note that, under Art. 9(1)(b) FADP or Art. 20(4) GDPR, we may not transfer data that interferes with overriding interests of third parties, or may do so only to a limited extent.

Reports to the FDPIC and the right to bring an action

Under Art. 29 FADP, data subjects have the right to lodge a complaint with a competent data protection supervisory authority. The data protection supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

Further information is available from the FDPIC’s contact form: https://www.edoeb.admin.ch/edoeb/de/home/der- edoeb/kontakt/kontaktformular.html

If you suspect that your data is being processed unlawfully on our website, you may seek judicial clarification under Art. 15 FADP. As a rule, this requires bringing an action under Art. 28 et seq. Swiss Civil Code. If you are affected by data processing by federal bodies, the procedure is governed by Art. 25 FADP. You may also contact the FDPIC in this case (see the reference to the contact form above).

Right to lodge a complaint with a supervisory authority under Art. 77(1) GDPR

If you suspect that your data is being processed unlawfully on our website, you may of course seek judicial clarification at any time. All other legal options also remain available to you. Independently of this, Art. 77(1) GDPR gives you the option to contact a supervisory authority. Under Art. 77 GDPR, you have the right to lodge a complaint in the EU Member State of your residence, your place of work, and/or the place of the alleged infringement. This means that you may choose which supervisory authority to contact from among those locations. The supervisory authority with which the complaint is lodged will then inform you of the progress and outcome of your complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

Legally ok – data protection solution for websites – privacy policy, legal notice, cookie banner

This website’s privacy policy, legal notice, and cookie banner were created free of charge using the Legally ok all-in-one website data protection solution.