Source: https://zeitag.ch/english/tos/
Timestamp: 2019-04-19 16:13:50+00:00

Document:
for time recording and access control.
Operator: The operator of the website, in this case zeit ag.
User: User of the website or its services, in this case you.
Personal data: Information which makes it possible for a person to be identified, i.e. information that can be traced back to a particular person. This includes the person's name, email address or telephone number. But data concerning preferences, hobbies, memberships or which websites a person has visited is also regarded as personal data.
The operator only processes the personal data of its users to the extent to which this is necessary in order to provide a functional website and the operator’s contents and services. Personal data are exclusively processed on the basis of a legitimate legal basis, usually the user’s consent. An exception applies in cases where obtaining prior consent is effectively not possible and processing is permitted under statutory provisions.
The legal basis for the temporary storage of the data and log files is Art. 6 (1) (f) GDPR and Art. 13 (1) and (2) DPA.
The operator will only use the log data in order to operate and optimise the website, to ensure its security and to carry out statistical evaluations. However, the operator reserves the right to examine the protocol data at a later date if there are specific indications which give rise to a justified suspicion of unlawful use. The data are stored for this purpose.
The data are deleted as soon as they are no longer required to achieve the purpose for which they are collected, provided their continued storage is not justified by the overriding interests or statutory obligations of the controller. This is usually the case after 24 hours. Data may be stored beyond this period for the purpose of website optimisation and statistical evaluation. In this case, users’ IP addresses will be deleted or altered so that they can no longer be allocated to the accessing client.
The collection of data and the storage of data in log files are essential prerequisites for providing and operating the website. Consequently, the user has no right to object.
Any storage for other purposes is conducted in anonymised form, which means that no personal data are processed and accordingly no option to object arises.
FluentLocale: Serves to record the language set by the user and transmits the system language of the user. This cookie is technically necessary.
Google Analytics: See paragraph 8. This cookie is not technically necessary.
Section 9 specifically provides information on the use of Google Analytics.
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) (f) GDPR and Art. 13 (1) and (2) DPA.
The legal basis for the processing of personal data using cookies for analysis purposes is, provided the user’s consent has been obtained, Art. 6 (1) (a) GDPR and Art. 13 (1) in conjunction with Art. 4 (5) DPA.
Technically necessary cookies are used for the purpose of facilitating the use of websites for users. Some website functions cannot be offered without cookies. These require that the browser is recognised even after navigation to different pages.
Analysis cookies are used to improve the quality and contents of the website. Analysis cookies give the operator information about how the website is used and thus enables it to continuously improve its service.
Campaign Monitor Pty Limited is based in Sydney, Australia, and processes data in data centres in the USA, Australia and Germany. The operator has contractual agreements with Campaign Monitor Pty Limited which ensure that Campaign Monitor Pty Limited complies with the provisions of the applicable data protection legislation.
The legal basis for data processing following the user’s subscription to the newsletter is, provided the user’s consent has been obtained, Art. 6 (1) (a) GDPR and Art. 13 (1) in conjunction with Art. 4 (5) DPA.
The user’s email address is collected in order to send the newsletter. The user’s name is collected in order to personalise the newsletter.
The other data listed in Section 8.1 and 8.2 are collected on the one hand to improve the newsletter and analyse the time and manner in which the newsletter is read, and on the other to prevent the misuse of the service or the email address used.
The data are deleted as soon as they are no longer required to achieve the purpose for which they are collected, provided their continued storage is not justified by the overriding interests or statutory obligations of the controller. Subscribers’ email addresses and names are therefore only stored for as long as the newsletter subscription is active. The same applies to the other personal data collected in the course of the subscription process.
The data collected and stored in the context of success measurement are deleted within 14 months following their evaluation.
Users may cancel their subscription at any time. Every newsletter contains a link for this purpose.
This also enables users to revoke their consent to the storage of the personal data collected during the subscription process and success measurement.
The information about the use of this website by the user generated by the cookie is generally sent to a Google server in the USA and stored there. However, users’ IP addresses are shorted and therefore anonymised by the operator prior to transmission to Google. The transmitted data can therefore not be traced to the user. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. The operator has contractual agreements with Google which ensure that Google complies with the provisions of the applicable data protection legislation. The data that the user’s browser sends in the context of Google Analytics will not be amalgamated with other data from Google.
The legal basis for the processing of user data using Google Analytics is, provided the user’s consent has been obtained, Art. 6 (1) (a) GDPR and Art. 13 (1) in conjunction with Art. 4 (5) DPA.
Google will use this information on behalf of the operator in order to analyse users’ use of the website, compile reports on website activity, and provide further services related to website and internet use to the website operator. This enables the operator to continually improve the website and its user friendliness.
The data are deleted as soon as they are no longer required for our recording purposes, provided their continued storage is not justified by the overriding interests or statutory obligations of the controller. For this website, this is the case after 14 months.
When users contact the operator (through the contact form, chat or email, for example), all relevant information provided by the user is saved for the purpose of processing the enquiry and in case of subsequent questions.
Alternatively, the operator can be contacted via the email address provided. In this case, the user’s personal data which are submitted with the email are stored.
Finally, the operator can be contacted using the chat tool on the website. This is managed by the software Zendesk. The data collected from any other contact options are likewise managed by the operator using Zendesk.
The way in which Zendesk works requires the operator to transmit particular data to the provider of this cloud-based software solution, Zendesk Inc. However, the operator has contractual agreements in place which ensure that Zendesk Inc. complies with all data protection obligations imposed by the applicable laws.
The legal basis for data processing is, provided the user’s consent has been obtained, Art. 6 (1) (a) GDPR and Art. 13 (1) in conjunction with Art. 4 (5) DPA.
The legal basis for the processing of data which are transmitted in the course of sending an email is Art. 6 (1) (f) GDPR and Art. 13 (1) and (2) DPA. If the email contact aims at the conclusion of a contract, an additional legal basis for the processing is Art. 6 (1) (b) GDPR and Art. 13 (2) (a) DPA.
The processing of the personal data from the entry form exclusively serves the purpose of handling the enquiry. In the case of contact by email, this also constitutes the required legitimate interest in processing the data. Storing the data for a certain period of time enables us to refer back to it if further questions arise at a later date.
The data are deleted as soon as they are no longer required to achieve the purpose for which they are collected, provided their continued storage is not justified by the overriding interests or statutory obligations of the controller. This is the case when the conversation with the user has finished. The conversation is finished when the circumstances make it apparent that the issue at hand has been conclusively resolved.
Users may revoke their consent to the processing of their personal data at any time. If users contact us by email or contact form, they may object to the storage of their personal data at any time by email. In this case, we will not be able to continue the conversation. Likewise, during the course of a chat, users may at any time revoke their consent.
All personal data which were saved in the course of contacting the operator will in this case be deleted.
8. the existence of an automated decision-making process, including profiling, pursuant to Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved and the significance and intended effects of such processing on the user.
If personal data are transmitted to a third country or an international organisation, users have the right to be informed of appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.
Users have the right to correction and/or completion against the controller if the processed personal data concerning their person are incorrect or incomplete. The operator will implement corrections without undue delay.
if the user has objected to processing pursuant to Art. 21 (1) GDPR and it has not yet been established whether the legitimate reasons of the controller override the reasons of the user.
if the processing of the personal data concerned has been restricted, these data – except for their storage – may only be processed with the consent of the user or in order to assert, exercise or defend legal claims.
if the restriction of processing has been restricted according to the above conditions, the user will be informed by the controller before the restriction is lifted.
the deletion of the personal data concerned is required to fulfil a legal obligation under European Union law or the law of a member state to which the controller is subject.
in order to assert, exercise or defend a legal right.
If the user has asserted a right to correction, erasure or restriction of processing against the controller, the controller is under obligation to inform all recipients to whom personal data concerning the respective user have been disclosed of this correction or erasure of data or the restriction of processing, unless this proves to be impossible or is associated with disproportionate effort or expense.
The user is entitled against the controller to be informed of these recipients.
processing takes place with the help of automated processes.
When exercising this right, users are also entitled to cause the personal data concerning their person to be transmitted directly from one controller to another controller, provided this is technically possible. This must not compromise the freedoms and rights of other persons.
The right to data portability does not apply to the processing of personal data which is required to perform a task which is in the public interest or is carried out in the exercise of public authority which has been bestowed on the controller.
Users have the right at any time to object to the processing of personal data concerning their person which takes place on the basis of Article 6 (1) (e) or (f) GDPR for reasons resulting from their specific circumstances; this also applies to any profiling based on these provisions.
The controller will then cease to process the personal data concerning their person, unless the controller can prove mandatory reasons meriting protection which necessitate the processing and which outweigh the interests, rights and freedoms of the user, or the data processing is performed for the purpose of asserting, exercising or defending legal claims.
Where users’ personal data are processed in order to perform direct advertising, users have the right at any time to object to the processing of the personal data concerning their person for the purposes of such advertising; this also applies to profiling in connection with such direct advertising.
If a user objects to the processing for the purposes of direct advertising, the controller will cease to process the personal data concerning his/her person for these purposes.
Users have the right to withdraw their data protection consent at any time. Revoking their consent does not affect the legality of the data processing which has taken place on the basis of consent before the time of withdrawal.
Without prejudice to any other administrative or judicial remedy, users have the right to complain to a supervisory authority, particularly in the member state of their place of residence, if they believe that the processing of the personal data concerning their person breaches the GDPR.
The supervisory authority to which the complaint was submitted will inform the complainant of the status and outcome of the complaint, including the possibility of a legal remedy, according to Art. 78 GDPR.

References: Art. 6
 Art. 13
 Art. 6
 Art. 13
 Art. 6
 Art. 13
 Art. 4
 Art. 6
 Art. 13
 Art. 4
 Art. 6
 Art. 13
 Art. 4
 Art. 6
 Art. 13
 Art. 4
 Art. 6
 Art. 13
 Art. 6
 Art. 13
 Art. 22
 Art. 46
 Art. 21
 Art. 78