Source: http://www.sail.li/index.php/en/data-privacy-policy
Timestamp: 2019-04-23 00:18:32+00:00

Document:
We pass on your personal data to these parties and other third parties exclusively to the required extent in order to perform services that you have requested or authorized and to protect your and our rights, property or security or, if we are obligated to do so based on applicable laws, orders by courts or other authorities, or if this disclosure is required in order to assist in legal or criminal investigations or court proceedings.
The personal data of the data subjects will be deleted or blocked as soon as the purpose for storing it ceases to apply. Storing can also take place beyond this point in time if this has been provided by the European or national legislator in directives, laws and other regulations under EU law, which applies to the data controller. The data will also be blocked or deleted when a storage period expires that is prescribed by said standards, unless there is a necessity for the continued storage of the data for a contract conclusion or contract fulfilment.
The data will likewise be stored in the log files of our system. This data will not be stored together with other personal data of the user.
The legal basis for the temporary storing of the data and log files is Art. 6 (1) lit. f) GDPR.
The temporary storing of the IP address by the system is necessary to enable a delivery of the website to the computer of the user. For this purpose, the user’s IP address must remain stored for the duration of the session. The log files are stored in order to ensure the functionality of the website. In addition, the data helps us optimize the website and ensure the security of our IT systems. The data is not analyzed for marketing purposes in this context. These purposes are also justified interests of ours in the data processing pursuant to Art. 6 (1) lit. f) GDPR.
In the event that the data is stored in log files, deletion will take place at the latest after seven days. Storing beyond this point is possible. In that case, the users’ IP addresses will be deleted or anonymized, so that it will not be possible anymore to attribute them to the retrieving client.
The gathering of the data for the purpose of providing the website and the storing of the data in log files is necessarily required for the operation of the website. Consequently, there is no possibility to object for the user.
Google will use this information on our behalf to analyze the use of our online offer by the users, to compile reports about the activities within this online offer, and to perform further services for us that are related to this online offer and the internet use. In the process, pseudonymized user profiles of the users can be created from the processed data.
We use Google Analytics only with activated IP anonymization. This means, the users’ IP addresses will be truncated by Google within the Member States of the European Union or in other signatory states of the Treaty on the European Economic Zone. The complete IP address will only be transmitted in exceptional cases to a server of Google in the USA and it will be truncated there. The IP address transmitted from the user’s browser will not be combined with other data of Google.
http://www.google.com/ads/preferences/ (“You decide which advertising Google shows you”).
The legal basis for the processing of personal data by means of technically necessary cookies is Art. 6 (1) lit. f) GDPR. The legal basis for the processing of personal data by means of cookies for analysis purposes, if consent in this regard has been granted by the user, is Art. 6 (1) lit. a) GDPR.
You have the right to demand information of whether the personal data relating to you is being transmitted to a third country or an international organization. In this connection, you can request being informed about the suitable guarantees according to Art. 46 GDPR relating to the transmission.
b) Information to third parties If the data controller has made the personal data relating to you publicly accessible and if it is obligated to delete it according to Art. 17 (1) GDPR, it will take appropriate measures, also of technical nature, in consideration of the available technology and implementation costs, in order to inform the parties, who are responsible for the data processing and who process the personal data, of the fact that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.
(5) for the assertion, exercise or defense of legal claims.
A data breach means a breach of security that leads to the accidental or illegal destruction, loss or modification, unauthorized disclosure or unauthorized access of personal data, which is transmitted, stored or otherwise processed by SAIL or a third party contracted by it.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 17