PRIVACY STATEMENT

RESPONSIBLE ENTITY

School Of Rock Basel
Helsinki-Strasse 7
3018 Bern

General

The protection of your personal data is very important to School Of Rock Basel. Here we show you what data we collect and for what purposes it is used. By means of suitable technical and organizational measures, your personal data will be protected as much as possible. School Of Rock Basel reserves the right to adapt this data protection declaration. The respective update date can be found at the end of this declaration. All personal data is processed in accordance with the Swiss Data Protection Act and the European General Data Protection Regulation (GDPR), as well as all other relevant legal provisions. Unless otherwise stated, the terminology corresponds to the legally used terms. For the sake of simplicity, the masculine form also includes the feminine, or vice versa.

DEFINITION OF PERSONAL DATA

Personal data is all information that relates to an identified or identifiable natural person (e.g. name, address or date of birth). In principle, you can use the website without providing any personal data. Should it be necessary to collect personal data, this data protection declaration will provide you with the necessary transparency.

WHEN IS PERSONAL DATA COLLECTED?

It is important to us that our customers or website visitors understand which of your personal data we process. Data collection can take place at the following locations:

1. Website in general: Personal data is processed and recorded via log files, cookies, analysis tools or plugins from social media or other providers;

2. Newsletter or SMS services: Registration for the newsletter or SMS services is based on your consent when registering;

3. Contact form: When contacting us (e.g. questions or suggestions), personal data is processed;

4. Registration form: When registering for one of our services, personal data is processed;

5. Account on the website: In order to create an account, personal data is collected on the basis of your registration;

6. User-generated content: Participation in the forum or similar may require the processing of personal data;

7. Webshop: We record your IP address, information regarding the products and prices ordered, the order number, page-specific content, an e-mail address, your name, delivery and billing address, a telephone number, the order currency, delivery method and payment details ;

8. Sweepstakes: Participation in sweepstakes requires the provision of personal data;

9. General course of business: The necessary personal data are collected as part of the general course of business.

As far as permitted, we also take personal data from public sources (e.g. Internet, commercial register, debt collection register or from the press).

DATA PROCESSING PURPOSES AND LEGAL BASIS

First and foremost, personal data is only processed within the scope of our business activities (e.g. conclusion and execution of contracts or general business transactions). If we obtain consent for data processing, this serves as the legal basis (e.g. for the newsletter). Furthermore, processing is carried out to fulfill legal obligations. In addition, personal data may be processed for the following purposes, which are in our legitimate interests:

• Provision of the website, apps or other platforms and the online offer for users (including expansion or further development);

• Maintaining the course of business (e.g. IT environment, websites and apps). This also includes security measures such as visitor controls or internal accounting;

• Website optimization, range measurement, market research;

• Dispatch of newsletters and/or advertising as long as no objection has been made;

• Offering SMS services

• To contact you (e.g. suggestions and questions, media or applications);

• Personalization of the online offer and customer acquisition;

• conducting sweepstakes;

• For reasons of data security (this also includes internal investigations);

• Inquiries or communication with third parties (e.g. job applications, media inquiries);

• Assertion and defense of legal claims (including proceedings before and with authorities).

DISCLOSURE OF PERSONAL DATA

In principle, personal data will only be passed on to third parties with your consent or based on our legitimate interest. A transfer usually takes place where certain services are provided by third parties (e.g. business partners, our service providers, etc.). Furthermore, data can be passed on internally or handed over to authorities. All of our partners take the protection of your personal data just as seriously as we do. Therefore, School Of Rock Basel only chooses trustworthy partners who guarantee adequate protection of your data. Such cooperation will only take place on our instructions and no personal data will be sold for marketing purposes. Transmission to third parties may take place within the framework of official or court orders to which we are obliged. In principle, data can be transferred to countries in which we or our service providers (e.g. server provision, etc.) are active. If the target country does not have a sufficient level of data protection, we secure ourselves with appropriate agreements or the exceptions specified in the law (e.g. with your consent).

STORAGE PERIODS AND RETENTION PERIODS

In principle, personal data is only stored by us for as long as this is required to fulfill the respective purpose of storage. Exceptions are the company's own legitimate interest in longer storage (e.g. for tax reasons or because a procedure is imminent) or a statutory retention period, which obliges us to store. If the purpose of storage is fulfilled and there are no other reasons for storage, your personal data will be deleted or made anonymous immediately.

SUBJECT RIGHTS

You are granted the following data subject rights:

1. Right to information: You can request confirmation at any time as to what personal data we are processing about you and whether it is being transmitted to a third country;

2. Right to rectification: You can immediately request the correction of incorrect or incomplete personal data stored by us;

3. Right to deletion: You can request the deletion of your personal data if they are no longer necessary for the associated purposes or other legal standards do not prevent deletion;

4. Right to restriction of processing: the right to restriction of processing exists if (i) you dispute the accuracy of the data, (ii) the processing is unlawful but you refuse to delete it, (iii) we do not have the data you need more, but you need them to assert, exercise or defend legal claims or (iv) you have lodged an objection to the processing;

5. Withdrawal of consent: You have the right to withdraw your consent for one or more specific purposes at any time, provided that the processing is based on your express consent. This applies in particular to cases of direct advertising. Data processing carried out up until the revocation is not affected. If you would like to make use of your right to object, an e-mail to info@school-of-rock.ch is sufficient;

6. Right of objection: You have the right at any time to object to the processing of your personal data for reasons that arise from your particular situation;

7. Right to data portability: You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible.

The exercise of such rights can only be asserted by those who are clearly identified. If your identity is not clearly evident, we reserve the right to take steps to identify you (e.g. requesting a copy of your ID).

You have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or the place of the alleged violation. The Federal Data Protection and Information Commissioner (FDPIC) is responsible for Switzerland.

OBLIGATION TO PROVIDE PERSONAL DATA

There is no obligation to provide personal data. Please note that certain parts of the website cannot be used if you refuse to provide personal data.

PROFILING AND AUTOMATED DECISION MAKING

As part of technical analysis, some of your personal data will be processed automatically (profiling). Such automated decisions are only made for evaluation and are used for market research or the personalization of offers (e.g. personal advertising). No fully automated decisions are made in the ordinary course of business.

Cookies

We use cookies on our site. These are small files that your browser creates automatically and that are stored on your end device when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malicious software, but only serve to (re)identify your browser or your end device. However, this does not mean that we are immediately informed of your identity. On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our site. In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device. If you visit our site again to make use of our services, it is automatically recognized that you have already been with us and which entries and settings (e.g. language) you have made so that you do not have to enter them again. We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. The temporary cookies are automatically deleted after a defined period of time. This period is usually six months. However, other settings are reserved. The data processed by cookies are required for the purposes mentioned to protect our legitimate interests. Most browsers accept cookies automatically. By using our website you accept the use of cookies. However, you can configure your browser in such a way that no cookies are stored on your computer or that a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

Analysis-Tools

With the tracking measures listed below and used by us, we want to ensure that our website is designed to meet needs and is continuously optimized. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These purposes are to be regarded as legitimate interests. The website school-of-rock.ch uses various services from Google Inc. from the USA. This includes Google Analytics, Google Adwords, Google Tag Manager, Google Fonts and Google Maps. The respective data processing purposes and data categories can be found in the corresponding tracking tools. In particular, we use Google Analytics, a web analysis service provided by Google Inc. (hereinafter referred to as "Google"; www.google.com) or comparable services, for the purpose of designing our website to meet needs and continuously optimizing it. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and the needs-based design of these websites. In this context, cookies are used by Google. Under no circumstances will your personal data be transmitted. We only receive user and statistical data. The IP addresses are anonymized so that an assignment is not possible (IP masking). However, Google can use the data for its own purposes and, if necessary, link it to other websites, which are also tracked. Google doesn't know you until you're logged in. Any processing of personal data is therefore outside the responsibility of School Of Rock Basel and in accordance with the respective data protection regulations of the provider.

Social Media Plug-ins

Social media plug-ins are used on our website (Facebook, Youtube or Instagram, etc.). The respective operator receives the information that the corresponding page of our website was accessed by the respective visitor. We only receive anonymous user and statistical data without any conclusions about identification. Any processing of personal data is therefore outside the responsibility of School Of Rock Basel and in accordance with the respective data protection regulations of the provider.

ENCRYPTION AND SECURITY

Our website uses an SSL certificate to encrypt the data to be transmitted (channel encryption). By integrating the encryption certificates, we can enable what is known as transport encryption. This protects the communication from unauthorized access by third parties. The passwords and other sensitive data are additionally protected from external access. Ensuring data security is very important to School Of Rock Basel. Please note, however, that there is no such thing as absolute protection.

Status of the data protection declaration: August 2023