PRIVACY STATEMENT

 

 

PRIVACY STATEMENT

 

1. Scope of this Statement

This privacy statement applies to all business divisions of Silke Schäfer Online GmbH and Silke Schäfer Coaching & Event GmbH, both Gudenhaldenweg 4 in 8708 Männedorf/Zurich, Switzerland, and both responsible for the data collected in accordance with this privacy statement. It applies especially to all personal data collected when you use our website www.silkeschaefer.com ("Website").

Data protection is a matter of trust and your trust is important to us. We respect your privacy and ensure that your personal data is protected and processed within the law. This privacy statement explains what personal data we collect, how we use it and how you can update, manage, export, and delete your data.

In addition to your consent (Article 6 paragraph 1 (a) GDPR), which you can withdraw at any time, we base the processing of personal data that falls into the scope of the EU General Data Protection Regulation (GDPR) on the necessities that arise in relation to the performance of a contract (Article 6 paragraph 1 (b) GDPR) or on our legitimate interests (Article 6 paragraph 1 (f) GDPR).

When we talk about processing your personal data in this privacy statement, we are talking about any handling of your personal data. This includes for example:

  • the collection
  • storage
  • management
  • use
  • transmission
  • disclosure or
  • deletion of your personal data

By using this website, you express your agreement with the regulations set out in this privacy statement. As "Usage" "use" we understand all interactions with our website, for example surfing, clicking on buttons, entering of data etc.

 

2. Collection and storage of data

a) General

We collect both personal as well as non-personal data (together/jointly "data") when you use the website. Personal data ("personal data") is any information relating to an identified or identifiable natural person and therefore information by which you can be identified. As far as we process data about legal persons, the handling of this data is equivalent to the handling of the personal data of natural persons.

 

b) Accessing our website

When visiting our website our server temporarily stores every access in a log file. In the process the following technical data is collected without any action on your part – as happens each time you connect to a server – and stored by us until it is automatically deleted after 12 months at the latest:

  • the IP address of the computer sending the query
  • the name of the owner of the IP address range (usually your internet access provider)
  • the date and time of access
  • the website from which our website was accessed
  • the name and the URL of the accessed file
  • the status code (e.g. error message)
  • the operating system of your computer/device
  • the browser used (type, version, and language)
  • the transmission protocol used (e.g. HTTP/1.1)

This data is collected and processed on the basis of our legitimate interests with the purpose to enable the use of our website (establishing of a connection), to permanently ensure the security and stability of the system, to allow the optimization of our website and also for internal statistical purposes.

 

c) Registration | User Account

For use of some of our services, especially for ordering, you first need to create a personal user account. During registration on the website we collect and store some information for the purpose of setting up your user account. This information can be edited later. We collect the following personal data for this purpose:

  • First name
  • Last name
  • Address
  • Country
  • Email address
  • Telephone number (optional)
  • Password
  • If you have a company account: UID-No (VAT identification number) and company name

The collection of this information has the purpose to make available to you as our customer a password-protected direct access to your basic data stored with us. You can see your completed and open transactions there and manage or change your personal data.

 

d) Use of the contact form

For questions of any kind, we provide an opportunity to contact us through a contact form on our website. This requires you to provide a valid email address so that we know who sent the enquiry and so that we can answer it. Further details can be entered voluntarily. This processing of data is based on your consent (Article 6 paragraph 1 (a) GDPR).

The personal data collected by us for the use of the contact form will be automatically deleted once your enquiry has been processed.

 

e) Purchases in our online shop

If you wish to make purchases in our online shop, we require the following personal data for the execution of the contract:

  • First and last name
  • Date of birth, place of birth and time of birth (when ordering horoscopes and booking workshops)
  • Invoice address
  • Payment information (depending on the chosen method of payment)
  • Login data, i.e. email address and password (for registered customers)

We will use the above-mentioned personal data only to execute the contract, i.e. to process your order, deliver the purchased products and ensure correct payment. We will store this data for a minimum of 10 years to fulfil our accounting obligations.

For the use of fee-based services you can choose from different payment options like credit card, instant money transfer, PayPal or on account. Payment with your credit card or PayPal is made directly through the provider of the payment system. When you pay with your credit card, the respective provider of the payment system collects your credit card details. For this reason, the data protection regulations of the relevant payment provider also apply.

 

f) Free newsletter and communication via Klick-Tipp

You can subscribe to a free newsletter via our website. For this we need your email address as well as your name for personalization. In addition, we also need your agreement to receive the newsletter (“consent“).

Your registration for the free newsletter is done via our website in a so-called double opt-in process. After registering you will receive an email that asks you to confirm your subscription. This confirmation is necessary to prevent people from registering with email addresses that are not theirs.

Subscriptions to the free newsletter are logged to prove that the registration process occurs in accordance with legal requirements. This includes the storage of the time of registration and of confirmation as well as the IP address. Changes to your information stored by Klick-Tipp will also be logged.

You can withdraw your agreement to receipt of the free newsletter at any time. Please send your withdrawal to our email address datenschutz@silkeschaefer.com. You can also unsubscribe from the newsletter by clicking the unsubscribe link at the end of each newsletter.

 

g) Newsletter and communication via Klick-Tipp

We are using the services of KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ, United Kingdom, for delivery of our free newsletter and the related online-based communication with you. The representative of KLICK-TIPP LIMITED according to paragraph 27 GDPR is the Waterton Knowledge Center WKC UG, Friedrichstr. 53a, 15537 Erkner, represented by Ulf Castelle, „DSGVO-Vertreter@klicktipp.com“. We receive these services through a contractual relationship with Digistore24 GmbH, St.-Godehard-Strasse 32, 31139 Hildesheim. Digistore24 is a reseller that procures products or services like Klick-Tipp and sells these, without significant processing, to buyers. In addition, we have entered in an agreement about processing according to para. 28 GDPR with Klick-Tipp itself. This ensures that we maintain full control of the personal data processed there and that Klick-Tipp complies with all our instructions.

We store your contact data at Klick-Tipp and, if necessary, process the data that we process through the online marketing tools described in this privacy statement. The providers of these tools are fully integrated with Klick-Tipp via a secure interface. Therefore Klick-Tipp may take note of these data items, however Klick-Tipp does not have usage rights regarding these data items and is subject to our instructions.

Furthermore, Klick-Tipp offers the opportunity to combine your personal data with so-called tags. Klick-Tipp distinguishes between two kinds of tags:

  • SmartTags: When a contact registers through a contact form, it will automatically be tagged with the name of the respective contact form. Klick-Tipp also automatically applies the following tags: „email was received“, „email was opened” “email was clicked” and „email was viewed in browser“.
  • Manual tags: In addition to SmartTags manual tags can be created. It is possible to tag a contact with the tag “customer” or – even more specifically – with the tag “has purchased product B”.  

Further details about these and other opportunities offered by Klick-Tipp that we use can be found in their guide, the Klick-Tipp Handbuch.

Klick-Tipp’s privacy statement can be found here.

Klick-Tipp’s anti-spam-policy can be found here. (All links in German).

 

h) Booking personal appointments online

Personal consultation with Silke Schäfer can be held either by telephone or the video telephony provider Zoom of Video Communications, Inc. US (“Zoom”)

The booking of appointments is done directly through our website. To process the booking we require the following personal information:

  • Specification of the appointment (date and time)
  • First and last name
  • Email address
  • Telephone number, if it is a phone appointment
  • Date and time of birth and place and country of birth (for the horoscope)
  • It is also possible to leave a comment
  • First name, date and time of birth and place and country of birth of a second person (for couple consultations only)
  • Description of the appointment (for example coaching/supervision)

As part of the booking process for a Zoom consultation via Zoom the following personal data will be transferred to Zoom:

  • Video, audio- and text data
  • Specification of the appointment (date and time)
  • First and last name
  • Email address
  • Description of the appointment (for example coaching/supervision)
  • The IP-addresses of the devices used to participate as well as further device/hardware information (MAC-address, other device Ids (UDID), device type, operating system and version, client version, camera type, microphone or speaker, type of connection and more), and the approximate position in order to create a connection to the closest Zoom datacenter

If you have expressly requested it, the consultation will be recorded and placed in your customer account. The recording will be automatically deleted after 30 days.

We process the entered personal data only for the purpose of booking an appointment. After the booking is complete, you will receive a confirmation email sent to your email address, which will allow you to change or cancel the booked appointment.

Further information about the handling of data during the use of Zoom can be found at https://explore.zoom.us/en/privacy/ and https://explore.zoom.us/en/trust/. Please note that this is an external website operated by Zoom Video Communications, Inc. Responsibility for these websites lies with Zoom Video Communications, Inc., and when you visit them, processing of personal data will occur.

We process this data on the basis of necessity in the context of fulfillment of a contract (Article 6 paragraph 1 (b) GDPR) or our rightful interests (Article 6 paragraph 1 (f) GDPR). Our interest in these cases is the effective performance of online consultations.  

Personal data handled in the context of participation in „online consultations“ is principally not disclosed to third parties. The “Zoom” provider necessarily receives the data items mentioned above to the extent agreed in our data processing agreement with Zoom.

Zoom is a service performed by a provider in the USA. Processing of personal data items therefore also takes place in a third country. We have concluded a data processing agreement with Zoom Video Communications, Inc., that complies with the requirements of Article 28 GDPR. An appropriate level of data protection is guaranteed by the so-called EU standard contract clauses for a start. As an additional precaution we have configured Zoom in a way so that only datacenters in the EU, the EEA or safe third countries like Canada or Japan are used for the performance of “online consultations”.

 

h) Streaming of events on Vimeo

Our website uses plugins of the video portal Vimeo. Provider is the Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of our pages containing a Vimeo plugin a connection to Vimeo’s servers will be established. In this process the Vimeo server will be notified which of our pages you have visited. Additionally Vimeo obtains your IP address. This applies even if you are not logged into Vimeo or do not have a Vimeo account. The data captured by Vimeo will be transferred to the Vimeo server in the USA. Sometimes you can use a chat function during livestreams to make comments. The chat history including the name given or pseudonym used by you are also subject to the data processing.

If you are logged into your Vimeo account you allow Vimeo to match your browsing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

Responsible for the handling of this data is Vimeo. Further information about their handling of user data can be found in Vimeo privacy policy at: https://vimeo.com/privacy.

For registered customers the legal basis for the integration of Vimeo videos and the accompanying transfer of personal data items to Vimeo Inc. is Article 6 paragraph 1 (b) GDPR. The same applies to users who are in the phase of contract initiation and are watching free videos. For other users Article 6, paragraph 1 (f) GDPR is the legal basis for the transfer of data to Vimeo for technical reasons.

In order to guarantee an appropriate level of data protection during the transfer of data into the USA, Vimeo has made a contractual commitment to the EU standard contract clauses.

i) Website chat and customer messaging via Userlike

We are using a chat software by Userlike UG (limited liability), Probsteigasse 44-46, 50670 Köln, Germany. You can use the chat like a contact form to chat with our team very nearly in real time. When starting the chat usually the following personal data items arise:

  • Date and time of access,
  • Type/version of your browser,
  • IP address,
  • Operating system used,
  • URL of the website used before,
  • Amount of data sent
  • Name (or pseudonym) and email address

Depending on the conversation with our team further personal data items may be entered by you during the chat. The type of this data is depends very much on your question or the problem you describe. The processing of all this data serves to offer you a fast and efficient contact option and thereby improve our customer service.

When you call up our website the chat widget in form of a JavaScript file by AWS Cloudfront is loaded. On a technical level the chat widget constitutes the source code that is executed on your computer and enables the chat.

We store the chat history for the duration of 12 months. This serves the purpose to spare you extensive explanations about the history of your inquiry as well as the purpose of constant quality control of our chat service. Accordingly the base for the processing of this data is Article 6 paragraph 1 (f) GDPR. If you do not wish that your chat history is being stored, you can let us know under datenschutz@silkeschaefer.com. We will delete stored chats immediately.

The storage of chat data also serves the puprose of ensuring the security fo our information technology systems. This also represents our justified interest.

For additional  information please go to the Privacy Policy of Userlike UG (limited liability).

 

3. Use of data

In addition to the purposes mentioned above the collection of data in general takes place for the website’s operation and the handling and administration in relation to the services offered. The data is collected especially in view of the formation, substance, execution, and modification of the contractual relationships concluded with individual customers as well as proper accounting in case of use of fee-based services. In addition, the data collected serves the improvement of our services and the analysis of user behavior of our customers.

Beyond that we use the data collected for our own marketing purposes. In this regard you agree that we can use your email address to send you information about the website and our services. You can refuse the use of your personal for marketing purposes at any time either in writing to Silke Schäfer Online GmbH, Gufenhaldenweg 4, 8708 Männedorf, Switzerland or by email to datenschutz@silkeschaefer.com or withdraw your consent.

By entering your personal data as well as other data on our website you give your agreement to the processing of all data collected about your person in the manner and for the purposes described in this Privacy Statement.

 

4. Disclosure of data to third parties

 

We do not pass on your data unless you have explicitly agreed to the disclosure, unless there is a legal obligation for us to do so or if it is necessary for the assertion of our rights, in particular for the enforcement of claims resulting from the contractual relationship. In addition, we pass on your data to third parties as far as it is necessary for the use of the website and for contract processing (also beyond the website), in other words: for the processing of your order.

The disclosure of data is made for the purpose of providing and maintaining the functionality of our website on the basis of our legitimate interests as well as for the purpose of contract processing.

We reserve the right to transmit the collected data to and have it processed by contracted third parties nationally and abroad for the purposes mentioned in this Privacy Statement. The respective recipients of the data collected by us who have access to the data are obligated to use the data exclusively for the processing of orders and not for other purposes and they must comply with data protection regulations.

Legal disclosure requirements: Furthermore, disclosure of data to regulatory authorities, judicial authorities or other competent persons is expressly permitted when required by applicable law.

Transfer of data for business reasons: We reserve the right to transfer information including your personal data to third parties in connection with a reorganization, a restructuring, a merger, a sale, or any other kind of transfer of assets on condition that the recipient agrees to handle the transmitted personal data in a way that is consistent with this privacy statement.

 

5. Transfer of data to third countries

The website is hosted on servers in Switzerland. We are entitled to transfer your personal data for the purposes of the data processing described in this privacy statement to third companies/parties (contracted service providers) in third countries. These third parties must comply with data protection regulations to the same extent we do. If the level of data protection in a country does not meet Swiss or European standards, we will obligate contracted third parties by contract to comply with a level of data protection that is equivalent to the one in Switzerland or the European Union.

 

6. Data security

We take appropriate measures to prevent that personal data can be accessed, destroyed, abused, or manipulated by unauthorized third parties. All personal data is stored in encrypted form on servers in Switzerland.

The communication with the website takes place with TLS encryption (Transport Layer Security). Nevertheless, it may happen that data transmitted to us via the internet or an e-mail service can be accessed by third parties without permission. It is also possible that due to the nature of the internet data may circulate cross-border via servers of third countries, i.e. including countries that do not offer the same level of data protection. Therefore, very sensitive information should not be transmitted via the internet (e.g. email).

Although we take the necessary technical precautions to ensure safe transfer and storage of data, it cannot be completely excluded that unauthorized third parties, e.g. by so-called hacking of our servers, obtain some data. For this reason, we exclude any liability relating to this to the extent permitted by law.

 

7. Your rights

You have the right to be informed upon request about the personal data we store about your person. You also have the right to demand the correction of incorrect data as well as the right to limitation of and objection to the processing and you have the right to be forgotten, to deletion of your personal data, provided there is no statutory requirement to keep records or a permission/legal basis that allows us to process the personal data. If it is not apparent in this privacy statement, we will gladly inform you on request how long individual personal data provided by you will be stored.

You can reach us for the above purposes either by letter post to Silke Schäfer Online GmbH, Gufenhaldenweg 4, 8708 Männedorf, Switzerland or by the email address datenschutz@silkeschaefer.com. As a rule, we require a proof of identity to process your request.

We will make every effort to process data-protection complaints as fast and effectively as possible. In addition you have the right to file a data-protection complaint with the relevant regulatory body of your country of residence.

 

8. Consent and right of withdrawal

Should consent to the processing of your personal data be required, we will process your data only after we have received your express consent.

Please note that you can revoke your consent to the future processing of your personal data at any time. Please notify us of your withdrawal of consent either in writing to Silke Schäfer Online GmbH, Gufenhaldenweg 4, 8708 Männedorf, Switzerland or by email to datenschutz@silkeschaefer.com.

9. Deletion of data

Unless noted otherwise in this privacy statement, personal data items are principally deleted when no further requirement for their storage exists. A requirement can exist if the data is needed to fulfill contractual obligations or in order to consider, grant or reject any warranty claims. In case of legal retention periods a deletion comes into consideration only after expiration of the respective retention period.

Registered users can assume that data related to the purchase of our products and services will be retained for 10 years. Moreover, a deletion of data does not come into consideration when the underlying contractual relationship has not yet been completely terminated. This may be the case, for example, when there still are open debts.  

 

10. Tools for web analysis

For continuing optimization of our offer and the improvement of our advertising measures we collect, on the basis of our legitimate interests, so-called tracking data that provides information about the use of our website and allows the creation of reports about website activity. For this purpose, we are currently using:

As part of the use of Google Analytics, data including abbreviated IP addresses (this prevents the identification of individual devices) is transmitted to Google. Google observes the data protection regulations of the "Swiss-U.S. Privacy Shield" and the “EU-U.S. Privacy Shield” frameworks and has registered for these frameworks with the United States Department of Commerce. (You will find information about the frameworks here: Swiss-U.S. Privacy Shield and EU-U.S. Privacy Shield). The (abbreviated) IP address transmitted to Google will not be associated with other Google data.

Google Analytics uses cookies. The information generated by cookies, like browser type, time, place, and frequency of your visits to the website including your (abbreviated) IP address are transmitted to Google in the USA and stored there. Cookies that collect tracking data do not contain personal data, i.e. the IP address is abbreviated directly on your device and thereby anonymized. This ensures the anonymized transmission and storage of the data.

Google offers deactivation add-ons for the most common browsers that give you greater control about which data Google collects about the website you have accessed. The add-on tells Google Analytics’ JavaScript (ga.js) that no information about your visit to the website is to be transmitted to Google Analytics. However, Google Analytics’ deactivation add-on for browsers does not prevent that information is transmitted to us or to other tools for web analysis we may use. Further information about the installation of the browser add-on can be found here or here.

 

11. Cookies

For the optimization of our website and the determination of pageviews on the basis of our legitimate interests as well as for contract execution so-called cookies are used. The cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Individual cookies will remain stored on your end device until you delete them, these are so-called “persistent cookies”. These cookies enable us to recognize your browser the next time you visit our website. Google Analytics also uses persistent cookies (see number 9 above).

Cookies are small files that can store specific, device-related information on the user’s device (computer, smartphone etc.) when the user is accessing a website. Cookies serve to make the website user-friendly (e.g. by storing log-in data). They also gather statistical data related to website usage so that it can be analyzed with a view to improving the web offer.

When accessing you will be asked to agree to the use of cookies. Your agreement applies to the collection, storage and use of usage data as well as the transfer of anonymized data to third parties in a limited manner. You are also giving your permission for this data to be stored in cookies beyond the end of a browsing session and for it to be retrieved when you visit the website again. You can refuse to accept cookies for marketing purposes. We consider any other cookies used on our website as necessary for the proper functioning of the website for what reason they cannot be rejected.

Most browsers accept cookies automatically. You can influence the use of cookies. Most browsers allow you to reject cookies for marketing purposes and also offer an option to limit or completely prevent the storage of cookies. It should, however, be noted that without cookies the use and especially the comfort of use of the website is limited.

The following is a list of the most common browsers; we have linked each entry with the respective guidance for changing the settings of the relevant browser.

If your browser is not on this list, we are be happy to assist you. Please send an email to this purpose, specifying the browser you are using, to datenschutz@silkeschaefer.com

 

12. Interaction with social networks

We are currently not using social plugins on our website.

 

13. Changes to this privacy statement

Due to the further development of our website and the services offered, the implementation of new technologies or changes to the legal framework, it may become necessary to change this privacy statement. Any significant changes to this privacy statement will be communicated to registered users by e-mail to the address provided upon registration or by a corresponding note in your personal user account. Communications to the e-mail address provided upon registration are deemed to have been legally delivered.

The current version of this privacy statement can be retrieved from our website and printed at any time.

Thank you for your kind attention.

 

Effective: 1 August 2021