Privacy Policy

We are pleased you visited our website artist-biel.ch and are interested in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is of great importance to us.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit our website. Our data protection practices comply with the legal regulations of the Swiss Federal Act on Data Protection (FADP) and the EU's General Data Protection Regulation (GDPR). The following privacy policy serves to fulfil the information obligations under the FADP and the GDPR. These can be found, for example, in Art. 19 et seq. FADP and Art. 13 et seq. GDPR.

Owner or responsible person

The controller within the meaning of Art. 5 lit. j Data Protection Act or Art. 4 No. 7 GDPR is the person who, alone or jointly with others, determines the purposes and means of the processing of personal data. The controller pursuant to Art. 4 No. 7 GDPR is also the recipient of personal data within the meaning of Art. 4 No. 9 GDPR. Any third-party recipient will be identified separately.

Regarding our website, the owner or responsible party is:

Culinary Artist AG
Bözingenstrasse 49/51
2502 Biel/Bienne
Switzerland
E-mail: info@artist-biel.ch
Tel: +41 58 680 34 70

Contact details of the data protection officer (DPO)

We have appointed a data protection consultant in accordance with Article 10 of the German Federal Data Protection Act (BDSG). This person also complies with the requirements of a Data Protection Officer as per Article 37 of the GDPR. You can reach this person using the following contact details:

Rolf Studer
Bözingenstrasse 49/51
2502 Biel/Bienne
Switzerland
E-mail: rolf.studer@yourprofit.ch
Tel.: +41 79 192 21 99
Website https://artist-biel.ch/

Website provision and creation of logfiles

Every time our website is accessed, our system automatically collects data and information from the accessing device (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

Information about the browser type and the version used;
(2) The operating system of the retrieval device;
Hostname of the accessing computer;
(4) The IP address of the retrieval device;
(5) Date and time of access;
(6) Websites and resources (images, files, further page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Indication of whether retrieval was successful;
(9) Transferred data volume

This data is stored in our system's log files. This data is not stored together with the personal data of a specific user, so individual website visitors are not identified.

Legal basis for processing personal data

The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest).

Purpose of data processing

The temporary (automated) storage of data is required for the functioning of a website visit in order to enable the delivery of the website. Additionally, personal data is stored and processed to maintain the compatibility of our website for as many visitors as possible, and for the prevention of misuse and elimination of faults. To this end, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems, and/or functional errors of our website. Furthermore, the data is used by us for website optimisation and for the general assurance of the security of our information technology systems.

Storage duration

The aforementioned technical data will be deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, but at the latest 3 months after visiting our website.

Right to object, restrict processing, rectify and erase

You can request a restriction of processing according to Art. 18 GDPR at any time, or object to processing according to Art. 21 GDPR, as well as request rectification or erasure of data according to Art. 16 or 17 GDPR respectively. You can find information on which rights you are entitled to and how to assert them in the lower section of this privacy policy.

Special features of the website

Our website offers you various functions that collect, process and store personal data when you use them. Below we explain what happens to this data:

Newsletter registration form

• What personal data is collected and to what extent is it processed?

  By registering for the newsletter on our website, we receive the email address you enter in the registration field and, if applicable, other contact details, provided you give us these via the newsletter registration form.

• Legal basis for processing personal data

  The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 GDPR) and in accordance with the requirement of good faith (Art. 6 para. 2 GDPR or Art. 2 ZGB) as well as Art. 6 para. 1 lit. a GDPR (consent through a clear affirmative act or behaviour).

• Purpose of data processing

  The data entered in the registration form for our newsletter will be used by us exclusively for sending our newsletter, in which we provide information about all our services and news. After you have registered, we will send you a confirmation e-mail containing a link that you must click in order to complete your registration for our newsletter (double opt-in). By doing so, you give your consent to data processing in accordance with Art. 6 para. 6 FADP.

• Storage duration

  You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after you unsubscribe, provided there are no statutory retention obligations. We will also delete your data immediately if you do not complete your registration. We reserve the right to delete your data without giving reasons and without prior or subsequent information.

• Right to object, restrict processing, rectify and erase

  You can request a restriction of processing according to Art. 18 GDPR at any time, or object to processing according to Art. 21 GDPR, as well as request rectification or erasure of data according to Art. 16 or 17 GDPR respectively. You can find information on which rights you are entitled to and how to assert them in the lower section of this privacy policy.

• Requirement to provide personal data

  If you would like to use our newsletter, you must complete the fields marked as mandatory and confirm your e-mail address by clicking on the double opt-in link. The newsletter registration details are necessary in order to be able to make use of the newsletter offer. The information is used exclusively for sending our newsletter. If you do not complete the mandatory fields, we will not be able to provide you with our newsletter service.

Disclosure of information to third parties

Personal data shall be processed lawfully (Art. 6(1) GDPR) and in good faith (Art. 6(2) GDPR or Art. 2 CC).

The disclosure of details to third parties is governed by the scope of the activities or services described below, relating to our website or business model.

In principle, we will only retain your details for as long as necessary and will treat them confidentially. Exceptions to this include the transfer of personal data to debt collection service providers, to public bodies and authorities, and to private individuals who are entitled to them by law, court order, or official decree, as well as the transfer to authorities for the purpose of initiating legal proceedings or for law enforcement purposes, should our legally protected rights be violated.

Statistical evaluation of visits to this website - web tracker

When you access this website or individual files on this website, we collect, process and store the following data: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred, and a message about the success of the access (so-called web log). We use this access data exclusively in a non-personalised form for the continuous improvement of our internet offering and for statistical purposes.

Any personal data processed will be handled according to the principle of lawfulness (Art. 6 (1) GDPR) and the duty of good faith (Art. 6 (2) GDPR or Art. 2 CC). We also use the following web trackers to analyse visits to this website:

• Google

  We use the service Google from the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, E-mail: support-deutschland@google.com, Website: https://www.google.com/. Processing takes place in safe third countries according to the assessment of Swiss authorities. You can find Switzerland's list of countries and further information at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transmitted to the USA. With regard to the transmission of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework by the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en The service provider is certified under the DPF, so the usual level of GDPR protection applies to the transfer.

  The legal basis for the transmission of personal data is your consent pursuant to Art. 6 para. 6 Data Protection Act (DPA) or Art. 31 para. 2 DPA and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you provided on our website.

  We use Google to load further Google services on the website. This service is used to provide further Google services, such as the necessary data processing for the provision of streams and fonts, and relevant content from Google Search. It is technically required to exchange information about the site visitor that is already available to Google between Google services and to provide the site visitor with personalised content tailored to their Google account.

  For processing, the service or we collect the following data: Background data stored in the Google user account or other Google services about the site visitor, background data for the provision of Google services, such as streaming data or advertising data, data about how the site user interacts with Google Search, details about the end device used, the user's IP address and browser, and further data from Google services related to our website for the provision of Google services.

  So long as the service is enabled on our website, our website will connect to the servers of Google Ireland Limited and transmit the necessary data. As part of the order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may also transmit and process information from other Google services to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google APIs, Doubleclick, Google Cloud, Google Ads and Google Fonts in accordance with the Google Privacy Policy. You can find the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list retrieve.

  You can withdraw your consent at any time. You can find more information on how to withdraw your consent either with the consent itself or at the end of this privacy policy.

  Further information on how your data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers under https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also an opt-out option.

• Google Ads

  We use the Google Ads service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, Website: https://www.google.com/. Processing takes place in safe third countries according to the assessment of Swiss authorities. You can find Switzerland's list of countries and further information at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transmitted to the USA. With regard to the transmission of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework by the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en The service provider is certified under the DPF, so the usual level of GDPR protection applies to the transfer.

  The legal basis for the transmission of personal data is your consent pursuant to Art. 6 para. 6 Data Protection Act (DPA) or Art. 31 para. 2 DPA and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you provided on our website.

  Google Ads is an advertising system with which we can place adverts on external websites on the Internet to inform our customers about our services. Google Ads displays adverts on external websites that are individually tailored to our clientele and lead to our website according to parameters set by us. If the site visitor clicks on the Google Ads advert, they are taken to our website. In order to be able to measure the success and remuneration of Google Ads advertisements, Google Ads measures the success of the advertising measure when our website is accessed. Our website processes the data provided by Google Ads in order to be able to analyse and improve our advertising measures and to calculate any remuneration that may be due. Your data may also be used for remarketing purposes if you have given your consent.

  The service, or we, collect the following data for processing: Data on the advertising interests of site visitors, interactions of site visitors with advertising in relation to our website, data on site visitors accessing our website who have previously clicked on Google Ads advertising and arrived at our website, data on the device used, the IP address and the user's browser, and further data from Google services for the provision and refinement of Google advertising relating to our website.

  If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When Google Ads are used on our website, Google may transmit and process information from other Google services in order to provide background services for the improvement and individualisation of Google advertising. For this purpose, data may also be processed by other Google services such as Google Apis, Google Cloud, Google Ads, Google Analytics, Google Tag Manager, Google Marketing Platform and Google Fonts in accordance with the Google Privacy Policy under Google's own data protection responsibility. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list retrieve. Further information on the responsible handling of business data can be found at https://business.safety.google/privacy/.

  You can withdraw your consent at any time. You can find more information on how to withdraw your consent either with the consent itself or at the end of this privacy policy.

  Further information on how your data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers under https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also an opt-out option.

• Google Analytics

  • Scope of processing of personal data

    On our website, we use the web tracking service of the company Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: https://www.google.com/ (hereinafter: Google Analytics). As part of web tracking, Google Analytics uses cookies that are stored on your computer and enable an analysis of the use of our website and your surfing behaviour (so-called tracking). We carry out this analysis on the basis of the Google Analytics tracking service in order to constantly optimise our website and make it more accessible. When you use our website, data, in particular your IP address and your user activities, are transmitted to servers of Google Ireland Limited. We carry out this analysis on the basis of Google's tracking service in order to constantly optimise our website and make it more accessible. We also require web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information from the web tracker enables us to take effective countermeasures and protect the personal data we process from these cyber attacks. By activating IP anonymisation within the Google Analytics tracking code of this website, your IP address is anonymised by Google Analytics before transmission. This website uses a Google Analytics tracking code that has been extended by the operator gat._anonymizeIp(); to enable only anonymised collection of IP addresses (so-called IP masking).

  • Legal basis for processing personal data

    The legal basis for data processing is, in accordance with Article 13(1) of the Data Protection Act (DSG) or Article 6(1)(a) of the GDPR, your consent in our notice banner regarding the use of cookies and web tracking (consent by a clear affirmative action or behaviour).

  • Purpose of data processing

    Google will use this information on our behalf to analyse your visit to this website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. We also require web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information from the web tracker enables us to take effective countermeasures and protect the personal data we process from these cyberattacks.

  • Storage duration

    Google will store the data relevant to providing web tracking for as long as is necessary to fulfil the booked web service. Data collection and storage will be anonymised. If personal data should still exist, it will be deleted immediately, unless it falls under statutory retention obligations. In any case, deletion will occur after the retention period has expired.

  • Objections and deletion options

    You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser or by activating the „Do Not Track“ setting in your browser. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link (http://tools.google.com/dlpage/gaoptout?hl=deDownload and install the available browser plug-in. You can find Google's Security and Privacy Policy at https://policies.google.com/privacy.

• Google Maps

  We use the Google Maps service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, Website: https://www.google.com/. Processing takes place in safe third countries according to the assessment of Swiss authorities. You can find Switzerland's list of countries and further information at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transmitted to the USA. With regard to the transmission of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework by the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en The service provider is certified under the DPF, so the usual level of GDPR protection applies to the transfer.

  The legal basis for the transmission of personal data is your consent pursuant to Art. 6 para. 6 Data Protection Act (DPA) or Art. 31 para. 2 DPA and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you provided on our website.

  On our behalf, Google will use the information gathered by Google Maps to display the map to you. Using Google Maps, you can find us more quickly and accurately than with a mere non-interactive route map. The relevant data will also be used to associate site visitors who view our Google Maps map, potentially with the help of the Google advertising ID, and to link them to physical visits and calls to other contact information listed with Google. In this way, Google can estimate expected visitor flows.

  The service, or we, collect the following data for processing: Data needed for the visualisation and display of location data in map form, such as in particular IP address, information from Google background services like Google APIs, search terms, IP address, coordinates, when using the route planner, starting point and destination, location data, Google advertising ID, Android advertising ID.

  We have concluded a joint processing agreement with Google regarding Google Maps. The content can be found at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/. If the service is activated on our website, our website establishes a connection with the servers of Google Ireland Limited and transmits the necessary data. Within the scope of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for the display and data processing of the services provided by Google. This may also involve data processing by the Google services Google APIs, Google Cloud, and Google Fonts in accordance with Google's privacy policy under Google's data protection responsibility. You can find the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list retrieve.

  You can withdraw your consent at any time. You can find more information on how to withdraw your consent either with the consent itself or at the end of this privacy policy.

  Further information on how your data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers under https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also an opt-out option.

• Google Tag Manager

  • What personal data is collected and to what extent is it processed?

    On our site, we use the Google Tag Manager service from Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: https://www.google.com/ (hereinafter: Google Tag Manager). Google Tag Manager provides a technical platform for executing and controlling other web services and web tracking programmes in a bundled manner by means of so-called „tags“. In this context, Google Tag Manager stores cookies on your computer and, if web tracking tools are executed using Google Tag Manager, analyses your surfing behaviour (so-called „tracking“). This data sent by individual tags integrated into Google Tag Manager is merged, stored and processed by Google Tag Manager under a standardised user interface. All integrated „tags“ are listed separately in this privacy policy. You can find more information on data protection for the tools integrated in Google Tag Manager in the respective section of this privacy policy. When using our website with activated integration of Google Tag Manager tags, data such as your IP address and your user activities are transmitted to servers of Google Ireland Limited. With regard to the web services integrated via Google Tag Manager, the regulations in the respective section of this privacy policy apply. The tracking tools used in Google Tag Manager ensure that the IP address is anonymised by Google Tag Manager before transmission by means of IP anonymisation of the source code. Google Tag Manager only enables the anonymised collection of IP addresses (so-called IP masking).

  • Legal basis for processing personal data

    The legal basis for data processing is, in accordance with Article 13(1) of the Data Protection Act (DSG) or Article 6(1)(a) of the GDPR, your consent in our notice banner regarding the use of cookies and web tracking (consent by a clear affirmative action or behaviour).

  • Purpose of data processing

    On our behalf, Google will use the information obtained through Google Tag Manager to evaluate your visit to this website, compile reports on website activity, and provide us with other services related to website and internet usage.

  • Storage duration

    Google will retain data relevant to the functionality of Google Tag Manager for as long as is necessary to fulfil the booked web service. Data collection and storage are anonymised. Should personal data nevertheless be involved, it will be deleted immediately unless it falls under statutory retention obligations. In any event, deletion will occur upon expiry of the retention period.

  • Right to object and erasure

    Blocking script execution in your browser, installing a script blocker, or enabling your browser's „Do Not Track" setting can prevent the collection and processing of your personal data by Google (including your IP address). Additionally, you can prevent Google from collecting and processing data generated by the Google cookie related to your website usage (including your IP address) by clicking the link below. http://tools.google.com/dlpage/gaoptout?hl=de Download and install the available browser plug-in. Google's security and privacy principles can be found at https://policies.google.com/privacy.

• Gstatic

  We use the Gstatic service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, Email: on our website. support-deutschland@google.com, Website: https://www.google.com/. Processing takes place in safe third countries according to the assessment of Swiss authorities. You can find Switzerland's list of countries and further information at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transmitted to the USA. With regard to the transmission of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework by the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en The service provider is certified under the DPF, so the usual level of GDPR protection applies to the transfer.

  The legal basis for the transmission of personal data is your consent pursuant to Art. 6 para. 6 Data Protection Act (DPA) or Art. 31 para. 2 DPA and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you provided on our website.

  Gstatic is a background service used by Google to retrieve static content, in order to reduce bandwidth usage and pre-load required catalogue files. Specifically, the service loads background data for Google Fonts and Google Maps.

  In the context of order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. You can find the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list retrieve.

  You can withdraw your consent at any time. You can find more information on how to withdraw your consent either with the consent itself or at the end of this privacy policy.

  Further information on how your data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers under https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also an opt-out option.

• YouTube

  We use the YouTube service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, on our website: support-deutschland@google.com, Website: https://www.google.com/. Processing takes place in safe third countries according to the assessment of Swiss authorities. You can find Switzerland's list of countries and further information at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transmitted to the USA. With regard to the transmission of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework by the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en The service provider is certified under the DPF, so the usual level of GDPR protection applies to the transfer.

  The legal basis for the transmission of personal data is your consent pursuant to Art. 6 para. 6 Data Protection Act (DPA) or Art. 31 para. 2 DPA and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you provided on our website.

  We embed videos from the YouTube platform on our website. By embedding them, we can display videos directly on our website. This way, visitors to our site can view information about our services without having to visit the YouTube platform.

  The service or we collect the following data for processing: Data for displaying the stream, data on videos clicked on, playlists created, ratings and comments, information on the end device used, the user's IP address and browser and other data from Google services for providing the video in accordance with the Google Privacy Policy

  If YouTube is activated on our website and a video is played, our website establishes a connection to the servers of Google Ireland Limited and transmits the data required to display the stream or video. As part of the order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - Data Protection Framework). https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_enThe service provider is certified under the DPF, so that the usual level of GDPR protection applies to the transfer. When Youtube videos are displayed on our website, Youtube may transmit and process information from other Google services to provide background services for the video, such as streaming data. For this purpose, data may also be transferred to the Google services Google Fonts, Google APIs, Google Video, and Doubleclick. The provider's certification under the EU-US Data Privacy Framework can be found at https://www.dataprivacyframework.gov/list retrieve.

  You can withdraw your consent at any time. You can find more information on how to withdraw your consent either with the consent itself or at the end of this privacy policy.

  Further information on how your data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers under https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also an opt-out option.

Integration of external web services and processing of data outside the EU

We use active content from external providers, so-called web services, on our website. By visiting our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside of Switzerland and the EU. You can prevent this by installing an appropriate browser plug-in or disabling the execution of scripts in your browser. This may lead to functional limitations on websites you visit.

We use the following external web services:

• Google Cloud APIs

  We use the Google Cloud APIs service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: https://www.google.com/. Processing takes place in safe third countries according to the assessment of Swiss authorities. You can find Switzerland's list of countries and further information at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transmitted to the USA. With regard to the transmission of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework by the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en The service provider is certified under the DPF, so the usual level of GDPR protection applies to the transfer.

  The legal basis for the transmission of personal data is your consent pursuant to Art. 6 para. 6 Data Protection Act (DPA) or Art. 31 para. 2 DPA and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you provided on our website.

  We use Google APIs to load further Google services on our website. Google APIs are a collection of interfaces for communication between the various Google services used on your website. The service is used in particular for displaying Google Fonts fonts and for providing the Google Maps map.

  The service or we collect the following data for processing: IP address

  If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Cloud, Google Maps, Google Ads and Google Fonts in accordance with the Google Privacy Policy under the data protection responsibility of Google. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list retrieve.

  You can withdraw your consent at any time. You can find more information on how to withdraw your consent either with the consent itself or at the end of this privacy policy.

  Further information on how your data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers under https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also an opt-out option.

• Google Fonts

  We use the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, Website: https://www.google.com/. Processing takes place in safe third countries according to the assessment of Swiss authorities. You can find Switzerland's list of countries and further information at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transmitted to the USA. With regard to the transmission of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework by the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en The service provider is certified under the DPF, so the usual level of GDPR protection applies to the transfer.

  The legal basis for the transmission of personal data is your consent pursuant to Art. 6 para. 6 Data Protection Act (DPA) or Art. 31 para. 2 DPA and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you provided on our website.

  We use the Google Fonts service to incorporate attractive fonts on our website, allowing us to display our site to you in a visually enhanced version. The service may also be used on our website if other Google services are reloaded on our website that require Google Fonts fonts to run. This is, for example, the case if our website uses Google services that absolutely require Google Fonts to run.

  For processing purposes, the service or we collect the following data: Data on fonts, IP address of the website visitor, statistics on font usage, and other data from Google services related to our website.

  If the service is enabled on our website, our website connects to the servers of Google Ireland Limited and transmits the necessary data. As part of the order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for the display and data processing of services provided by Google. This may also involve data transfer to Google services Google APIs, Google Cloud, and Google Ads in accordance with the Google Privacy Policy. You can find the provider's certification within the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list retrieve.

  You can withdraw your consent at any time. You can find more information on how to withdraw your consent either with the consent itself or at the end of this privacy policy.

  Further information on how your data is handled can be found in the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers under https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de also an opt-out option.

• Legally ok legal text snippet and modules

  We use the legal text snippets and modules from the company Legally ok GmbH, Schochenmühlestrasse 6, 6340 Baar, Switzerland, E-Mail: on our website. hello@legally-ok.com, Website: https://www.legally-ok.com/.Processing is carried out exclusively in Switzerland in accordance with Swiss data protection legislation. Processing also takes place in a third country outside the EU. There is an adequacy decision by the Commission for this third country. On the EU Commission's website (Link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de) please find an up-to-date list of all adequacy decisions.

  The legal basis for the transmission and processing is Art. 31 para. 1 Data Protection Act (DSG) and Art. 6 para. 1 lit. c GDPR. The use of the service supports us in complying with our legal obligations.

  The service is used to load content from our legal texts onto our website. The latest legal texts are loaded via the integration implemented on our site. This integration may also load additional technical modules related to the legal texts or legally necessary elements.

  You can find information about your rights concerning the processing of your data at the end of this privacy policy.

  Further information on how your data is handled can be found in the provider's privacy policy at https://www.legally-ok.com/datenschutz/.

• eTermin

  We use the eTermin service from the company eTermin GmbH, Mättivor 3, 6430 Schwyz, Switzerland, E-mail: datenschutz@etermin.net, Website: https://www.etermin.net/.Processing is carried out exclusively in Switzerland in accordance with Swiss data protection legislation. Processing also takes place in a third country outside the EU. There is an adequacy decision by the Commission for this third country. On the EU Commission's website (Link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de) please find an up-to-date list of all adequacy decisions.

  The legal basis for the transfer of personal data is our legitimate interest in processing, pursuant to Art. 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.

  By integrating this service, you can book an appointment with us on our website.

  With regard to processing, you have the right to object as set out in Article 21 GDPR. Please see the end of this privacy policy for more information.

  Further information on how your data is handled can be found in the provider's privacy policy at https://www.etermin.net/online-terminbuchung-datenschutz.

  The provider offers under https://www.etermin.net/online-terminbuchung-datenschutz also an opt-out option.

Data security and data protection, communication by e-mail

Your personal data will be protected during collection, storage, and processing by technical and organisational measures so that it is not accessible to third parties. In the case of unencrypted communication via email, complete data security during transmission to our IT systems cannot be guaranteed by us, so we recommend encrypted communication or postal mail for information that requires a high degree of confidentiality.

Duration of data storage and rights of the data subject

Storage duration

We only store personal data to the extent and for as long as this is necessary for the fulfilment of the purposes for which the personal data were collected, we have a legitimate overriding interest in retaining it, or we are legally obliged to do so.

Right to information

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to information on the details named in Section 25 et seq. of the German Data Protection Act (DSG) or Article 15(1) of the GDPR, insofar as the provision of information cannot be refused, restricted or postponed by the data controller (cf. Section 26 et seq. of the DSG or Article 15(4) of the GDPR). We are also happy to provide you with a copy of the data.

Right of rectification

Pursuant to Article 32(1) GDPR or Article 16 GDPR, you have the right to request that inaccurate personal data (such as address, name, etc.) held by us be rectified, provided that no legal obligation conflicts with this claim. You may also request at any time that the data stored by us be completed. A corresponding adjustment will be made immediately.

Right to erasure

Pursuant to Article 17(1) of the GDPR, you have the right to request the deletion of your personal data that we have collected, provided that

• the data is no longer needed;
• due to the withdrawal of your consent, the legal basis for processing has ceased to apply without replacement;
• no valid grounds for processing remain;
• Your data being processed unlawfully;
• a legal obligation requires this.

The right does not exist according to Article 17(3) GDPR if

• the processing is necessary for the exercise of the right to freedom of expression and information;
• your data has been collected on the basis of a legal obligation;
• the processing is necessary for reasons of public interest;
• the data are necessary for the establishment, exercise or defence of legal claims.

Right to restriction of processing

Under Art. 18(1) of the GDPR, you have the right, in certain cases, to request the restriction of the processing of your personal data.

This is the case when

• the accuracy of your personal data is contested;
• the processing is unlawful and you do not consent to deletion;
• the data are no longer required for the processing purpose, but the collected data serve the establishment, exercise or defence of legal claims;
• an objection to the processing has been lodged pursuant to Art. 21(1) GDPR, and it is not yet clear which interests prevail.

Right to withdraw

If you have given us your explicit consent to process your personal data (Art. 6 Para. 6 DS, Art. 31 Para. 1 DS; Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR), you can withdraw this at any time. Please note that this does not affect the lawfulness of processing carried out based on consent prior to withdrawal. Data which we are legally obliged to retain will be deleted upon expiry of the retention period.

Right to object

In accordance with Article 21 of the GDPR, you have the right to object at any time to the processing of your personal data which is based on Article 6(1)(f) of the GDPR (in the context of legitimate interests). If you have given us your explicit consent to the processing of your personal data (Article 6(6) of the GDPR and Article 31(1) of the GDPR), you can withdraw this consent at any time. Please note that this does not affect the lawfulness of the processing carried out based on your consent before its withdrawal. This right only applies if there are special circumstances that preclude storage and processing. Data for which we are legally obliged to retain will be deleted upon expiry of the retention period.

How do you exercise your rights?

You can exercise your rights at any time by contacting the details below:

Culinary Artist AG
Bözingenstrasse 49/51
2502 Biel/Bienne
Switzerland
E-mail: info@artist-biel.ch
Tel: +41 58 680 34 70

Right to data portability

In accordance with Article 20 of the GDPR, you have a right to receive the personal data concerning you. We will provide the data in a structured, commonly used and machine-readable format. The data can optionally be sent to you directly or to a controller designated by you.

We will provide you with the following data upon request:

• Data collected based on consent (Art. 31(1) DPA and Art. 6(1)(a) GDPR);
• Data that we have received from you within the scope of existing contracts (Art. 31 para. 2 lit. a Data Protection Act, as well as Art. 6 para. 1 lit. b GDPR and Art. 9 para. 2 lit. a GDPR);
• Data that has been processed in the context of an automated procedure.

We will transfer personal data directly to a controller of your choice, insofar as this is technically feasible. Please note that we may not be able to transfer data that infringes upon the predominant interests of third parties according to Art. 26 para. 1 lit. b DSG or Art. 20 para. 4 GDPR, or may only do so to a limited extent.

Notifications to the FDPIC and possibility of appeal

Affected individuals can lodge a complaint with the supervisory authority pursuant to Art. 49 FDPIC if there are sufficient indications that data processing might be in breach of the data protection regulations. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

Further information can be found on the EDÖB's contact form: https://www.edoeb.admin.ch/edoeb/de/home/deredoeb/kontakt.html

If you suspect that your data is being processed unlawfully on our website, you can seek judicial clarification of the issue pursuant to Art. 32 DPA. As a rule, this requires filing a complaint under Art. 28 et seq. of the Civil Code. If your data is processed by federal bodies, the procedure is governed by Art. 41 DPA. In this case too, you can contact the Federal Data Protection and Information Commissioner (see notice regarding the contact form above).

Right of complaint to the supervisory authority pursuant to Art. 77(1) GDPR

If you suspect that your data is being processed unlawfully on our site, you can of course seek legal clarification of the issue at any time. In addition, any other legal recourse is available to you. Regardless of this, according to Art. 77 (1) GDPR, you have the option to contact a supervisory authority. The right to lodge a complaint pursuant to Art. 77 GDPR is available in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn from the above-mentioned locations. The supervisory authority to which the complaint has been submitted will then inform you of the status and the results of your input, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.