Privacy Policy
Last updated on 28 August 2023
The privacy policy describes how and for what purpose we collect, process and use personal data. The responsible handling of data has always been an important concern for us. We are continuously making adjustments in order to protect the personal data of our customers even better. The protection of your personal data is very important to us.
What data we collect
- General personal data
General personal data
We process your general personal data. Personal data is any type of information that relates to an identifiable natural person. The natural person is identifiable if conclusions can be drawn about the identity of the person from the available information.
Example: Your name, IP address and home address are personal data. - Transferred data
Transferred data
You often provide us with your personal data yourself. Whenever you enter your personal data and transmit it to us, it is deemed to have been provided to us. The transmission of data to us is basically voluntary, but in some cases it is mandatory in order to be able to use our offers.
Example: You enter your data in a contact form or sign up for a newsletter. - Data collected
Data collected
When you use our services, we sometimes collect their data without your active participation. This data is usually data about your device and data about user behavior.
Example: We collect data about the operating system of the device you used to access our website. - Product development
Product development
We strive to continuously improve our offer. For this purpose, we use your personal data for the development and improvement of our products and services.
Example: We collect data about visitor behavior on the website in order to constantly improve the user experience. - Data sharing
Data sharing
We share your personal data with companies that can decide for themselves how to use the data. Most often, this is done because it is necessary to comply with legal requirements, when an outstanding debt is transferred to a collection agency, or when to detect fraudulent activity.
Example: A legal requirement obliges us to pass on your data to an authority. - Worldwide
Worldwide
We work with providers from all over the world to process your personal data. This allows us to benefit from the global offering and access the best and most reliable services. Under certain circumstances, the country to which the data is exported does not have the same data protection standard as Switzerland.
Example: We use the services of a cloud provider such as Google, which is based in the USA.
What services we use
- LiveChat Widgets
LiveChat
http://www.livechatinc.com/LiveChat is a customer service and support software that enables website owners to provide real-time assistance to their visitors through a chat window. It can be used to answer questions, provide support, and establish a more personal connection with customers. LiveChat can also be used to gather customer feedback, send targeted messages, and even generate leads.
- tawk.to Widgets
tawk.to
https://tawk.to/Tawk.to is a live chat platform that enables website owners to communicate with visitors in real-time. It can be used to provide customer service, answer questions, and gather feedback. It also has a range of features to help website owners better engage with their customers and increase conversions.
- Global Site Tag Analytics
Global Site Tag
https://support.google.comGlobal Site Tag (gtag.js) is a JavaScript tagging framework and API that allows you to send event data to Google Analytics, Google Ads, and Google Marketing Platform. It is used to measure website, app, and internet usage data, as well as to optimize ad campaigns and remarket to website visitors.
- OneTrust Widgets
OneTrust
https://onetrust.com/OneTrust is a software used to help companies comply with data privacy regulations and manage customer data consent. It is commonly used on websites to ensure that customers understand how their data is being used, collected, and stored by the company. It also allows customers to view and update their privacy preferences, withdraw their consent, and access their data. It also helps companies understand their data privacy obligations and ensure their compliance with various data privacy laws.
- Stripe Payment
Stripe
https://stripe.com/Stripe is an online payment processing platform that is used to accept and process payments online. It can be used on websites and applications to accept payments from debit and credit cards, ACH bank transfers, Apple Pay, Google Pay, and other payment methods. Stripe also provides fraud detection, subscription billing, invoicing, and other services.
- Usabilla Analytics
Usabilla
https://usabilla.com/Usabilla is used on websites to collect feedback from users. It allows website owners to collect user feedback quickly and easily, with live feedback forms, surveys, and polls. This feedback can be used to improve the website's usability, design, and content.
- PrivacyBee Data Protection
PrivacyBee
https://www.privacybee.ch/PrivacyBee is used on websites to detect all privacy-related services and generate an individual privacy policy from them.
1. What do we do?
workingFlow GmbH (Hertistrasse 2c, 8304 Wallisellen) operates the website workingflow.ch (hereinafter referred to as "we"). On this website you can get information about our organization, use our online services and contact us.
The protection of your personal data is of great concern to us. In this privacy policy, we inform you transparently and understandably about what data we collect through our website and how we handle it. For this reason, we use the icons of the association PRIVACY ICONS. They are intended to help you quickly get an overview of how we process your data.
2. What do we inform about?
- What data is collected on workingflow.ch;
- Under which conditions we process your data and for which purpose;
- How long we keep your data;
- When disclosure to third parties is permissible;
- How we process your data ("individual data processing operations");
- When and how you can object to data processing ;
- What rights you have and how you can exercise them.
3. Definitions of terms
3.1 What is personal data?
Personal data (hereinafter also referred to as "ยง") is any information that relates to an identified or identifiable natural person. This includes, for example, name, address, date of birth, e-mail address or telephone number. Data about personal preferences such as leisure activities or memberships also count as personal data.
3.2 What are personal data requiring special protection?
Data on religious, ideological, political or trade union views or activities; data on health and, where applicable, information on administrative or criminal prosecutions and sanctions as well as data on social assistance measures are considered to be particularly sensitive personal data. Where necessary and appropriate, we may request and process particularly sensitive personal data. In this case, their processing is subject to stricter confidentiality.
3.3 What is the processing of personal data?
Processing is any handling of personal data, regardless of the means and procedures used, in particular the acquisition, storage, retention, use, modification, disclosure, archiving, deletion or destruction of data.
3.4 What is the disclosure of personal data?
This is the transmission or making available of personal data, e.g. publication or disclosure to a third party.
4. How can you contact us?
If you have any questions or concerns about the protection of your data by us, you can always contact us by e-mail at vinoth@workingflow.ch. Responsible for data processing carried out through this website is:
workingFlow GmbH
Vinoth Lalithakumar
Hertistrasse 2c
8304 Wallisellen
5. Does our privacy policy always remain the same?
We may change this privacy policy at any time. The changes will be published on workingflow.ch, you will not be informed separately.
6. General principles
6.1 What data do we collect from you and from whom do we receive this data
First and foremost, we process personal data that you provide to us or that we collect when operating our website. We may also receive personal data about you from third parties. These may be the following categories:
- Personal master data (name, address, dates of birth, etc.);
- Contact information (cell phone number, email address, etc.);
- Financial data (e.g. account details);
- Online identifiers (e.g. cookie identifier, IP addresses);
- Location and traffic data;
- Sound and image recording;
- particularly sensitive data (e.g. biometric data or information about your health).
6.2 Under what conditions do we process your data?
We process your data in good faith and according to the purposes set out in this privacy policy. We pay attention to transparent and proportionate processing.
If we are exceptionally unable to comply with these principles, data processing can still be lawful because there is a justification. In particular, the justification is:
- Your consent;
- the execution of a contract or pre-contractual measures;
- our legitimate interests, unless your interests prevail.
6.3 How can you revoke your consent?
If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent unless we have another justification.
You can revoke your consent at any time by sending an e-mail to the address given in the imprint. Data processing that has already taken place is not affected by this.
6.4 In which cases can we share your data with third parties?
Principle
We may need to use the services of third parties or affiliates to process your data. We contractually ensure that third parties and affiliated companies comply with the requirements of data protection. We may also be required to disclose your data to authorities. We will only disclose your personal data if:
- You have consented;
- this is necessary for the fulfillment of the contract or the implementation of pre-contractual measures as well as for the enforcement of our rights;
- there is a legal obligation to do so;
- we have a legitimate interest in doing so and your contrary interests do not outweigh ours.
Transfer abroad
Under certain circumstances, your personal data may be transferred to companies abroad as part of the order processing. These companies are obligated to data protection to the same extent as we ourselves. The transfer may take place worldwide.
If the level of data protection does not correspond to that in the EEA area, we carry out a prior risk assessment and ensure contractually that the same level of protection is guaranteed as in the EEA area (for example, by means of the new standard contractual clauses of the EU Commission or other measures prescribed by law). If our risk assessment is negative, we will take additional technical measures to protect your data. You can access the EU Commission's standard contractual clauses here here.
6.5 How long do we keep your data?
We store personal data only for as long as is necessary to fulfill the individual purposes for which the data was collected.
Data that we store when you visit our website is kept for twelve months. An exception is made for analysis and tracking data, which may be kept longer.
We store contract data for longer, as we are obliged to do so by legal regulations. In particular, we must retain business communications, concluded contracts and accounting records for up to 10 years. As far as we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.
6.6 How do we protect your data?
We will keep your information secure and take all reasonable steps to protect your information from loss, access, misuse or alteration.
Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary for us to pass on your inquiries to companies affiliated with us. In these cases, too, your data will be treated confidentially.
Within our website, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser.
6.8 What rights do you have?
a. Right to information
You can request information about the data we have stored about you at any time. We ask you to send your request for information together with proof of identity to vinoth@workingflow.ch.
You also have the right to receive your data in a common file format if we process your data automatically and if
- You have given your consent for the processing of this data; or
- You have disclosed data in connection with the conclusion or performance of a contract.
We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests or the interests of a third party.
The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, for legal or technical reasons, or because we need more detailed information from you. You will be informed of the extension of the deadline in good time, at least in text form.
b. Deletion and correction
You have the possibility to request the deletion or correction of your data at any time. We can reject the request if legal regulations oblige us to store the data for a longer period of time or unchanged, or if a permissible circumstance conflicts with your request.
Please note that the exercise of your rights may, under certain circumstances, conflict with contractual agreements and have corresponding effects on the execution of the contract (e.g. premature termination of the contract or cost consequences).
c. Legal action
If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a report with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: http://www.edoeb.admin.ch.
7. Individual data processing operations
7.1 Providing the website and creation of logfiles
What information do we receive and how do we use it?
By visiting workingflow.ch, certain data is automatically stored on our servers or on servers of services and products that we obtain and / or have installed, for system administration purposes, for statistical or backup purposes or for tracking purposes. These are:
- the name of your Internet service provider;
- their IP address (in some circumstances);
- the version of your browser software;
- the operating system of the computer with which URL is accessed;
- the date and time of access;
- the web page from which you are visiting URL;
- the search terms you used to find URL.
Why may we process this data?
This data cannot be assigned to a specific person and there is no merging of this data with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest
How can you prevent data collection?
The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after the end of each session. The storage of the log files is absolutely necessary for the operation of the website, you therefore have no possibility to object to this.
7.2 Tracking pixels
How do tracking pixels work?
We may use tracking pixels on our website. Tracking pixels are also known as web beacons. Tracking pixels - also from third parties whose services we use - are small, usually invisible images that are automatically retrieved when you visit our website. Counting pixels can be used to collect the same information as server log files. We use them for the same purposes as log files - you cannot prevent the data collection.
7.3 Evaluations
In some cases, your personal data is processed automatically in order to evaluate certain personal aspects.
Such evaluations are used by us in particular to be able to inform and advise you in a targeted manner about certain services or products of ours. For this purpose, we use evaluation tools, thanks to which we can communicate in a needs-based manner and take appropriate advertising measures, including market and opinion research.
7.4 Contact
E-mail
What information do we receive and how do we use it?
You have the possibility to contact us by e-mail. If you contact us by e-mail, the following data will be processed:
- E-mail address;
- Content, subject and date of your email;
- contact data provided by you (e.g. name, telephone number, if applicable, address).
Why may we process this data?
Your information will be stored for the purpose of processing the request and in case of follow-up questions. The justification for this are pre-contractual measures or our legitimate interests in the completion of the request.
Safety note
We would like to point out that e-mails can be read or changed unauthorized and unnoticed during transmission. The spam filter can reject e-mails if they are identified as spam by certain characteristics.
7.5 Success and reach measurement
How does the success and reach measurement work?
Our notifications and communications may contain web links or tracking pixels that record whether an individual communication has been opened and which web links have been clicked. Such web links and tracking pixels may also track the use of notifications and communications on a personal basis.
Why may we process this data?
We need this statistical recording of usage for success and reach measurement in order to be able to offer notifications and communications based on the needs and reading habits of the recipients in an effective and user-friendly manner as well as permanently, securely and reliably.
7.6 Cookies
How do Cookies work?
Our website uses cookies. Cookies are data records that are stored on the operating system of your device with the help of the browser when you visit our website. Cookies do not cause any damage to your computer and do not contain viruses.
What information do we receive and how do we use it?
Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit. This allows us to save certain settings (such as language settings or location information) so that you do not have to re-enter them when you visit the website again.
Why may we use cookies?
We use cookies so that we can make our website more user-friendly, effective and secure. The use of cookies and the processing of your data in this regard is based on our legitimate interests in the aforementioned purposes
How can you prevent data collection via cookies?
The cookies are stored on your computer. You therefore have full control over the use of the cookies. You can delete them completely or disable or restrict the transfer by changing the settings in your browser. If cookies for our website are deactivated, it may no longer be possible to use all the functions of the website in full.
7.7 LiveChat
LiveChat is a customer service and support software that enables website owners to provide real-time assistance to their visitors through a chat window. It can be used to answer questions, provide support, and establish a more personal connection with customers. LiveChat can also be used to gather customer feedback, send targeted messages, and even generate leads.
7.8 tawk.to
Tawk.to is a live chat platform that enables website owners to communicate with visitors in real-time. It can be used to provide customer service, answer questions, and gather feedback. It also has a range of features to help website owners better engage with their customers and increase conversions.
7.9 Global Site Tag
Global Site Tag (gtag.js) is a JavaScript tagging framework and API that allows you to send event data to Google Analytics, Google Ads, and Google Marketing Platform. It is used to measure website, app, and internet usage data, as well as to optimize ad campaigns and remarket to website visitors.
7.10 OneTrust
OneTrust is a software used to help companies comply with data privacy regulations and manage customer data consent. It is commonly used on websites to ensure that customers understand how their data is being used, collected, and stored by the company. It also allows customers to view and update their privacy preferences, withdraw their consent, and access their data. It also helps companies understand their data privacy obligations and ensure their compliance with various data privacy laws.
7.11 Stripe
Stripe is an online payment processing platform that is used to accept and process payments online. It can be used on websites and applications to accept payments from debit and credit cards, ACH bank transfers, Apple Pay, Google Pay, and other payment methods. Stripe also provides fraud detection, subscription billing, invoicing, and other services.
7.12 Usabilla
Usabilla is used on websites to collect feedback from users. It allows website owners to collect user feedback quickly and easily, with live feedback forms, surveys, and polls. This feedback can be used to improve the website's usability, design, and content.
7.13 PrivacyBee
PrivacyBee is used on websites to detect all privacy-related services and generate an individual privacy policy from them.