Data Protection

General Information

Data protection is a priority for us. Therefore, we handle your personal data ("personal data") with great care and in accordance with the applicable legal requirements. Alma Cilurzo processes your personal data for various purposes and transparently informs you about these data processes. "Personal data" refers to any information that can be associated with a specific or identifiable natural person. "Processing" refers to any handling of personal data, such as collecting, disclosing, storing, deleting, etc.

Please read the entire privacy policy carefully. This way, you will learn how and why we process your personal data and what rights you have concerning these data processes.

For whom and when does this privacy policy apply?

When you receive services or products from us or are contractually connected with us
Visitors to the website www.almacilurzo.com
When you contact us, e.g., via email, letter through our contact form, or other contact tools
When you receive information or marketing communication from us
When you sign up for certain offers (e.g., events)
When you subscribe to our newsletter
When you interact with us in other data processes related to our offers

2. Responsibility

The entity responsible for processing personal data is the one that determines the purpose and means of processing. For the data processes described in this privacy policy, the following entity or individual is the "Responsible" under the Swiss Federal Data Protection Act (DSG), meaning the data protection authority, unless otherwise stated in the specific case (identity): Alma Cilurzo Postfach 6033 Buchrain

If you have any questions or concerns regarding data protection, you can contact us at the following address: Almacilurzo(at)icloud.com

3. Personal Data Processed

We process different categories of personal data depending on the purposes. For contractual partners who are companies, we process fewer personal data—especially contact information of the company's representatives (e.g., name, email address, position in the company, communication data).

Many of the following personal data are provided by you. However, you are generally not obligated to provide them. If you provide us with data about others, we assume that you are authorized to do so and that the data is correct. By submitting third-party data to us, you automatically confirm this. Please ensure that the affected third parties are made aware of this privacy policy.

3.1. Basic Data and Contact Information

Basic data and contact information directly refer to you and your characteristics (e.g., to contact you). We process, for example, the following basic data:

Name, First Name
Wedding Date
Address
Email Address
Phone Number
Other possible basic data

We receive this basic data directly from you. Under certain conditions, we may also obtain personal data from third parties, such as from our contractual partners, associations, and address brokers, as well as from publicly available sources like the internet.

3.2. Contract Data

Contract data refers to information related to the execution of a contract. We process the following data:

Information from the pre-contract stage and details about the contract itself (e.g., subject of the contract), as well as data necessary for processing the contract
Date, details about the type, duration, and conditions of the relevant contract, data for the termination of the contract
Payment details, payment modalities, mutual claims
Information about complaints, customer satisfaction, feedback
Answers to customer satisfaction surveys
Access data and logins

3.3. Communication Data

Communication data are data generated through communication with you. For example, these include:

Contact information such as postal address, email address, and phone number
Content of all correspondence
Details about the type, time, and additional context of the communication

3.4. Behavioral and Preference Data

To better tailor our offers and services to you, we aim to get to know you better. We process data about your behavior. Behavioral data refers to information about your use of our website. This can also be collected based on technical data. Your other interactions with us may also be used as behavioral data, and we may link behavioral data with other information. This data helps us understand your likely needs and interests. We evaluate behavioral data to gain overall insights into preferences and expected behavior, either for you or for groups with similar characteristics.

3.5. Location and Technical Data

When you visit our website, technical data may be collected. This includes, for example:

Location and traffic data
IP address of the device and device ID
Information about your device, the operating system of your device
Information about your internet provider
Viewed content or logs where the use of our systems is recorded
Date and time of access to the website

3.6. Other Possible Data

Depending on necessity, we may also process the following additional data:

In connection with official or judicial proceedings, data may arise (e.g., evidence) that may concern you.
We may also process photos or videos in which you may be identifiable (e.g., from events).
We may collect data on who participates in events.
We may collect data on whether you participate in activities (e.g., competitions).

4. Processing Purposes

We process your personal data for various purposes, as far as permitted, for which we have a legitimate interest corresponding to the purpose:

For contract fulfillment
For improving our services and products
For communication (e.g., answering your messages)
For marketing and informational purposes (so we can inform you about offers or new activities based on your personal interests)]
To maintain our IT security (in particular to monitor the performance of our website)
For internal administration (e.g., in accounting or data archiving)
To comply with legal requirements (e.g., to process complaints, prevent and investigate crimes or other misconduct)
For asserting legal claims (if necessary, we also process personal data to enforce claims in court, out of court, or before authorities in Switzerland or abroad)

5. Data Processing in Relation to Social Media

When you interact with us via social media and our profiles there, e.g., on [Facebook, Instagram, LinkedIn, YouTube, TikTok, Twitter, SoundCloud, mx3.ch, Spotify, Apple Music], comment on content, or share posts, we collect data that we can use for marketing purposes. The provider of a social media platform also collects data when you visit our profile. Further information about data processing by a social media provider can be found in the respective privacy policies of the provider.

We offer you the option of using a social media plugin from [Facebook, Instagram, LinkedIn, YouTube, TikTok, Twitter, SoundCloud, mx3.ch, Spotify, Apple Music] on our website to integrate functions of the respective provider into our website. These plugins are disabled by default but are activated when you click on the social media icon on the website. You can direct inquiries and other requests related to these social media providers directly to the respective provider.

6. Cookies and Online Advertising Techniques

We use online advertising techniques, such as cookies, on our website. This helps us measure user-friendliness and the success of our website and online advertising campaigns.

6.1. What are Online Advertising Techniques, such as Cookies?

When we track you, we can distinguish your visits from others, ensuring the functionality of the website and enabling statistical evaluations. Each time you visit a page, you are recognized as an individual visitor, making it distinguishable from others, for example, by assigning a unique recognition number to your browser (referred to as a "cookie"). Cookies are automatically stored on your device when you visit our website. We use cookies, for example, to save settings between visits or to collect statistical and technical data.

6.2. Which Cookies or Online Advertising Techniques Do We Use?

We use analytics services to optimize our website. Below are examples of the functionalities of our main analytics service providers. Other third-party tools typically process personal data in similar ways:

Google Analytics, an analytics service by Google LLC and Google Ireland Ltd. Google Ireland Ltd. is responsible for processing personal data. Google uses cookies and online advertising techniques to analyze user behavior on the website. Based on the analyzed data, Google provides us with reports but also processes data for its own purposes. Information about Google Analytics' data protection can be found here.
Facebook Pixel, an analytics tool from Meta Platforms Ireland Ltd. This allows us to manage Facebook ads and display them only to users who may be interested. Data is stored on servers in the EEA and the US. Users can direct data inquiries to Meta. Information about Meta's data protection can be found here.
LinkedIn Insight Tag, an analytics tool from LinkedIn Ireland Unlimited Company. This tool informs us that you have visited our website, and it processes your IP address. The tool helps us evaluate how our website is used. Data is stored on servers in the EEA and the US. Note that LinkedIn can link data to user profiles and use it for its own advertising purposes. More information on LinkedIn's data protection and settings can be found here.
HubSpot, an analytics tool from HubSpot Inc. HubSpot Ireland Ltd. is responsible for processing personal data. HubSpot is an integrated software solution covering various aspects of online marketing. We use HubSpot as a CRM integration on our website to optimize communication processes with you. This ensures smooth communication and advisory services. Information about HubSpot's data protection can be found in HubSpot's Data Processing Agreement and Privacy Policy.

7. Data Disclosure to Other Companies and Further Recipients

We disclose your personal data to service providers. This mainly includes IT service providers but may also involve analytics service providers, collection agencies, credit reference agencies, marketing service providers, etc. If these service providers process personal data as processors, they are required to handle the data exclusively according to our instructions and take measures to ensure data security. Data may also be disclosed to other recipients, such as courts and authorities within judicial proceedings.

In certain cases, we may also disclose personal data to third parties for their own purposes, for example, if you have given us your consent or if we are legally required or permitted to disclose the data.

8. Personal Data Abroad

Recipients of data (e.g., other companies or authorities) may not only be in Switzerland but may also be located outside the European Economic Area (EEA) and Switzerland, particularly certain service providers in countries such as [the USA], meaning they may be in other countries worldwide. We may transfer data to foreign authorities if we are legally obligated to do so. Not all countries outside Switzerland and the EEA have the same level of data protection. Therefore, we mitigate lower protection by entering into appropriate contracts, particularly the standard contractual clauses issued by the European Commission and recognized by the Swiss Data Protection and Information Commissioner (EDÖB). In certain cases, we may also transfer data in accordance with data protection requirements without these contracts, e.g., if you have consented to the data disclosure or if the disclosure is necessary for contract fulfillment or legal claims enforcement or for overriding public interests.

9. Duration of Data Processing

We store and process your personal data as long as necessary for the purpose of processing (for data related to contracts, this is usually for the duration of the contractual relationship), as long as we have a legitimate interest in storing the data (e.g., to enforce legal claims or ensure IT security), and as long as the data is subject to a statutory retention obligation (e.g., a ten-year retention period for certain data that we must comply with). We destroy or anonymize your personal data after the storage or processing period, unless legal or contractual obligations prevent this.

10. Legal Grounds According to the GDPR for Data Processing

Depending on the case, data processing is only allowed if the applicable law specifically permits it. This does not apply under Swiss data protection law but under the European GDPR, where applicable. In this case, we base the processing of your personal data on the following legal grounds:

Your consent according to Art. 6 para. 1 lit. a and Art. 9 para. 2 lit. a GDPR;
Processing is necessary for contract fulfillment or pre-contractual measures according to Art. 6 para. 2 lit. b GDPR;
Processing is necessary for a legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR;
Processing is necessary for asserting or defending legal claims according to Art. 6 para. 1 lit. f and Art. 9 para. 2 lit. f GDPR;
Processing is necessary for compliance with domestic or foreign legal requirements according to Art. 6 para. 1 lit. c and lit. f and Art. 9 para. 2 lit. g GDPR.
Rights of the Data Subject

You have certain rights under the applicable data protection law to receive more information about our data processing and to influence it. These include, in particular, the following rights:

You have the right to access. This means you can request information about our data processing. We are happy to assist you. You can also submit a request for information if you want additional information or a copy of your data.
You have the right to data portability. This means you have the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format or to have it transferred to a third party, as long as the data processing is based on your consent or is necessary for contract fulfillment.
You have the right to deletion and objection. This means you can object to our data processing, and we will no longer process your data. You can also request that we delete your personal data. However, we would like to inform you that we may still process and retain your data if we are legally obligated to do so.
You have the right to correction. This means you can correct or complete inaccurate or incomplete personal data or add a "dispute note."
You have the right to withdraw consent. This means you can withdraw your consent at any time if you previously provided consent for data processing. The withdrawal applies from this point onward, meaning only for the future and not for past processing. It may be that we continue processing your data based on another legal ground after the withdrawal.

If you exercise your rights as a data subject, we must verify your identity (e.g., by requesting a copy of your ID). The listed rights of the data subject are subject to legal requirements and restrictions. This means that rights may not always be fully exercisable. For example, we may still need to process your personal data to fulfill an order, protect our legitimate interests, or comply with legal obligations. To the extent legally permissible (e.g., to protect third-party privacy or protect our own legitimate interests, such as business secrets), we may limit or deny your rights.

Additionally, you have the option to bring your concern to the relevant data protection authority.