Privacy policy

Data privacy notice

Our processing of personal data of our users is limited to data that is necessary for providing a functional website as well as our content and services. The processing of personal data of our users only occurs for the purposes listed below and when there is a legal basis (as defined by the GDPR). Only such personal data that is actually necessary for the performance and handling of our tasks and services, and/or data that you have voluntarily provided to us is collected.

I. Name and address of responsible entity

Name and address of the entity responsible as defined the General Data Protection Regulation (GDPR):

HSR AG
Föhrenweg 16
9496 Balzers
Liechtenstein

II. Description and scope of data processing

1. Provision of the website

Upon each visit to our website, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected:
– Date and time of access
– User’s IP address
– Information about the type and version of the browser used

We store this information for a maximum period of 365 days. Storage is carried out for reasons of data security, to ensure the stability and operational reliability of our system.

2. Web analysis

We analyze the usage of our website with the web analytics tool Matomo (Privacy Policy can be found at https://matomo.org/privacy-policy/). The automatically collected IP addresses are anonymized pior to analysis. All created analyses are based on anonymized datasets, and no personally identifiable evaluation takes place. The web analysis is solely for the optimization of the website in terms of user-friendliness and the provision of useful information about our services. Merging of this data with other personal data sources or disclosure to third parties does not occur.
In addition to the above-mentioned data, Matomo also uses so-called ‘cookies’ (see below).
The legal basis for the temporary storage of data and log files is Art. 6(1)(f) of the GDPR (General Data Protection Regulation).
No personally identifiable evaluation takes place. The analyses are based on anonymized datasets.

3. Cookies

The use of cookies improves our website by making it more user-friendly. Cookies are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our site. The cookies remain stored until you delete them, allowing us to recognize your browser on your next visit.
If you do not want cookies to be stored, you can set up your browser to inform you about customized cookies settings and to allow them only in individual cases. However, we would like to point out that deactivating cookies may limit the functionality of our website.
The legal basis for the processing of data through cookies is Art. 6(1)(f) of the GDPR.

4. Real Cookie Banner

We use the consent tool ‘Real Cookie Banner’ to manage the implemented cookies and similar technologies (tracking pixels, web beacons, etc.) as well as related consents.  Details on how ‘Real Cookie Banner’ functions can be found at https://devowl.io/de/rcb/datenverarbeitung/.
The legal bases for the processing of personal data in this context are Art. 6(1)(c) and Art. 6(1)(f) of the GDPR. Our legitimate interest is the management of the used cookies and similar technologies and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide personal data, we cannot manage your consents.

5. Google Web Fonts

This page uses web fonts provided by Google for a consistent presentation of fonts. The Google Fonts are installed locally, and there is no connection to Google servers during this process

6. Google Maps

This page uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this page has no influence on this data transmission.
The use of Google Maps is in the interest of attractive presentation of our online services and easy location of the member information listed on the website. This represents a legitimate interest as defined by Art. 6(1)(f) of the GDPR.
You can find more information on how Google handles user data in Google’s Privacy Policy: https://policies.google.com/privacy?hl=.

7. Contact via Online Form & Email

If you fill out a contact form, newsletter, voucher order, or registration form or if you send us an email or any other electronic message, your information will only be stored for processing the request, any related follow-up questions, and will be used only within the context of the inquiry.
The legal basis for processing your request is Art. 6(1)(a) or (b) of the GDPR.
We will delete your personal data after processing your request.

8. Hosting

This website is hosted by an external service provider (HOSTSTAR – Multimedia Networks AG, Kirchgasse 30, CH-3312 Fraubrunnen.
The personal data collected on this website is stored on the servers of the hosting provider. This may primarily include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated through a website.
The use of the hosting service is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).
Our hosting provider will process your data only to the extent necessary to fulfill its contractual obligations and will follow our instructions regarding this data.
Conclusion of a contract for data processing.
To ensure data protection-compliant processing, we have concluded a contract for data processing with our hosting provider.

III. Data security

We use the widely adopted TLS protocol within the website visit, in conjunction with the highest level of encryption supported by your browser. You can recognize whether an individual page of our website is transmitted encrypted by the closed representation of the key or lock symbol in the address bar of your browser.
In addition, we implement further appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

IV. Your Rights (Data Subject Rights)
You have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing, or objection, data transfer, the origin of your data, if it was not collected by us, and the existence of automated decision-making, including profiling.
You also have the right to revoke any consent given for the use of your personal data at any time. You can assert your rights mentioned above at any time by contacting us at the provided contact address.
If you believe that the processing of your personal data by us violates the applicable data protection regulations, you have the option to lodge a complaint with the Data Protection Authority of the Principality of Liechtenstein.