Data protection

The responsible party in terms of data protection legislation is the Forum Kultur association, c/o Studio MK2 GmbH, Verena Conzett-Strasse 7, 8004 Zurich, e-mail: datenschutz@kulturzueri.ch

The Forum Kultur association determines the purposes and means of processing your personal data and is therefore responsible for the processing and use of your personal data in accordance with this privacy policy. If you have any questions or concerns about this privacy statement or the processing of your personal data, please contact us at any time by sending an email to datenschutz@kulturzueri.ch.

All personal data collected via the website is processed in accordance with the Swiss Data Protection Act. We collect and process personal data carefully and for the purposes described in this privacy policy. In accordance with applicable law, we may also use your personal data in ways other than those described in this Privacy Policy. In this case, we will provide you with specific privacy notices or communications at the time of collection and may seek your consent. We will always endeavour, as far as is reasonable, to collect information in anonymised or pseudonymised form so that we cannot identify you.

Personal data automatically transmitted via the use of the website

The Forum Kultur association collects and stores information that your browser automatically transmits to us in "server log files" when you visit our website. The data collection is based on your will and interest to visit our website and our legitimate interests to operate the website. This may include the following data:

• Browser type and version;
• Operating systems used;
• Referrer URL (the website previously visited);
• Host name of the accessing computer;
• Date and time of the server request;
• Internet protocol address (IP address);
• Amount of data transferred;
• Other similar data and information that serve to avert danger in the event of attacks on our IT systems.

This personal data is not merged with other personal data and is stored separately from any other personal data transmitted by the user. They are deleted by us after six months at the latest.

The Forum Kultur association uses the automatically collected personal data to fulfil the following purposes:

• to enable the display, operation and functionality of the website
• to ensure the stability and security of the system
• to improve and protect our services
• for statistical purposes in the event of attacks on the network infrastructure on which the website is provided

Personal data provided by the user

The association Forum Kultur collects and processes personal data that the user voluntarily transmits to us by means of an online form directly on the website, via our contact e-mail address, via any other applications linked to the website, by telephone or in any other way. This information includes, for example, the following personal data:

• Surnames, first names, postal addresses, email address, telephone number, gender
• Your message or request.

The provision of this personal data is expressly on a voluntary basis. Without this personal data, however, we will not be able to provide the services requested by the user in the desired quality or at all.

The Forum Kultur association uses the personal data provided by the user to fulfil the following purposes:

• to provide, maintain, protect and optimise the services and information offered to you
• to communicate with you and provide you with the best possible and personalised information that you require from us (e.g. about our products and services)
• to offer you new services and information and, based on your profile, to suggest tailored services and information that may be of interest to you
• to comply with legal or other regulatory requirements and internal regulations
• to establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings
• for other lawful purposes where such processing is apparent from the circumstances or was indicated at the time of collection

The processing of this personal data is based on the following legal grounds:

• Your consent, only if it can be withdrawn at any time (e.g. when you sign up for our newsletter and other marketing communications).
• for the performance of a contract with you or for the intention to enter into a contract with you (e.g. when you purchase a product)
• to comply with a legal obligation (e.g. for tax purposes or for the purposes of legal investigations or proceedings); or
• to protect our legitimate interests (e.g. protection and security of our services, systems, assets; compliance with legal, regulatory and contractual obligations; assertion, exercise or defence of legal claims; maintenance and efficient organisation of business operations; improvement and development of our services and sale and marketing of our services)

If the processing is based on your consent or our legitimate interests, you may withdraw consent or object to this processing at any time by contacting us directly at datenschutz@kulturzueri.ch. Please note, however, that the withdrawal of your consent does not affect the lawfulness of the processing based on the consent prior to its withdrawal.

The Forum Kultur association takes the necessary measures to ensure that only our authorised personnel and our auxiliary persons who have the necessary knowledge have access to your personal data in order to fulfil the purposes for which your personal data was collected.

We may disclose your personal data to the following possible categories of recipients in accordance with the purposes and legal bases for processing described above, to the extent necessary for the intended data processing:

• Other companies in the group;
• Service providers who process the personal data on our behalf and on our instructions (so-called order processors such as in the area of IT, hosting and support).
• Customers, partners, suppliers, insurers and other business partners
• Media agencies, members of the public, including visitors to Group websites and social media;
• Industry organisations, associations and other bodies;
• Acquirers or parties interested in acquiring business units, companies or other parts of the Group;
• Courts, arbitration bodies, law enforcement agencies, regulators, lawyers and other parties to potential or actual legal proceedings where necessary to comply with the law or to establish, exercise or defend rights or legal claims.

We select our partners and order processors carefully and only with sufficient assurance that they have appropriate technical and organisational measures in place in accordance with legal requirements. Our order processors can only process personal data on documented instructions from us. They are all subject to confidentiality requirements and may only use your personal data to the extent necessary to fulfil the purpose for which your personal data was collected, unless otherwise required by law.

Personal data collected through our website is stored in Switzerland. In addition, we may transfer, store and process your personal data at data locations around the world, e.g. where our third-party providers or partners are located. Therefore, we may transfer your personal data outside the European Economic Area (EEA) if this is necessary for the data processing described in this Privacy Policy in accordance with applicable law.

If data is transferred to countries that do not ensure an adequate level of protection, we will ensure adequate data protection by taking appropriate safeguards, such as contractual safeguards (e.g. based on EU standard clauses), based on binding corporate rules, transferring data pursuant to your explicit consent, for the conclusion or performance of a contract with you, or in connection with the establishment, exercise or enforcement of legal claims. For more information about our reasonable security measures, please contact us by email at datenschutz@kulturzueri.ch.

In principle, personal data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected, unless longer retention is necessary to fulfil legal obligations (e.g. retention and documentation obligations), contractual or pre-contractual obligations or legitimate business interests of us (e.g. to assert, exercise or defend legal claims).

On this basis, we generally process personal data in compliance with the following rules and obligations:

• The personal data automatically transmitted by you through the use of our website (cf. point 3.1.) for the purpose of displaying, operating and ensuring the functionality of the website will be deleted within three to six months.
• The personal data you transmit to us in connection with the use of our services offered on our website or which you otherwise transmit to us via the e-mail contact address (cf. point 3.2.) will generally be stored by us until you request us to delete it, revoke your consent to its storage or the purpose for storing the data has ceased to exist (e.g. after processing your enquiry has been completed).
• For contract-related personal data (including business documents and communications), we store personal data as long as the contractual relationship exists and thereafter for a further ten years after termination of the contractual relationship, unless (i) a shorter or longer statutory retention obligation applies in the individual case, (ii) retention is required for reasons of evidence or for another valid reason under applicable law, or (iii) deletion of the data is required earlier (e.g. because the data is no longer required or we have to delete the relevant data).

When you access or use the website, we may place so-called cookies - small text files - or similar tools on your computer. We use these cookies to recognise you as a user of the Website, to customise content, to improve the performance of the Website and to enhance its usability.

a) Categories of cookies we use

Depending on their function and purpose, the cookies we use can be divided into the following categories: functional cookies, performance cookies and advertising cookies.

• functional cookies: these cookies serve a variety of purposes for the presentation, functionality and performance of a website and, in particular, to improve visitors' experience and enjoyment of the website. They allow a website to remember information already provided (e.g. username, location or language selection) and provide visitors with improved, more personalised functionality. Functional cookies are used, for example, to remember things like your login details. These cookies cannot track your movement on other websites.
• Performance cookies: These cookies are used to collect information about how a website is used - for example, how visitors came to our website, which pages a visitor opens most often, how you navigated our website during your visit and whether you receive error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, such as how many visitors have come to our website. These cookies are used to monitor the level of activity on the website and to improve the performance of the website.
• Advertising cookies allow us or a third party vendor to serve ads on our website or on third party websites with products that the user likes, so that the ads the user sees may be more relevant to the user's preferences or interests (sometimes called "targeting cookies"). They may also be used to evaluate the effectiveness of advertising and promotions.

These cookies may be placed by us or a third party on our behalf. For more information about cookies and their use, please visit: http://www.allaboutcookies.org/.

The legal basis for the data processing results from your consent (Art. 6 para. 1 lit. a DSGVO).

You can configure your browser settings so that no cookies are stored on your computer. Complete deactivation of cookies may mean that you cannot use all the functions of our website.

By continuing to use our website and/or agreeing to this privacy policy, you consent to cookies being set by us and thus to personal usage data being collected, stored and used, even beyond the end of the browser session. You can revoke this consent at any time by activating the browser setting to refuse third-party cookies.

b) Google Analytics

On its website, the Forum Kultur association uses the website analysis service of Google Analytics, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The cookies used by Google Analytics are stored on your computer and thus enable an analysis of your use of the website.

We use Google Analytics on the basis of our legitimate interests to analyse and regularly improve our website, as well as to regularly improve our offer via the statistics obtained and to make it more interesting for you. Furthermore, the use of Google Analytics is based on your consent to the tracking of your surfing behaviour on our website and its analytical evaluation.

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. These cookies may contain the following information, for example: IP address, number, date and time of visit, duration of visit, your access page from which you use the website (reference URL), the pages visited on our website, browser type/version and operating system used. Google will use this information on our behalf because we have a legitimate interest in analysing user behaviour so that we can optimise the services offered on our website and our advertising. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage. Likewise, pseudonymised user profiles can be created from the processed personal data.

We have activated the IP anonymisation function on this website (so-called IP masking). This means that your IP address is shortened by Google within member states of the European Union, in other contracting states to the Agreement on the European Economic Area and in Switzerland before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of personal data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this personal data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Further information on the handling of user personal data by Google Analytics can be found in Google's personal data protection statement: https://support.google.com/analytics/answer/6004245?hl=de.

Furthermore, it is possible that Google will review the user's use of the website and may combine the personal data collected with other information about the user that Google has independently collected from other websites visited by the user and use it for its own purposes (e.g. to monitor advertising) under its own responsibility based on its own privacy policy. Further information on this and how Google processes personal data can be found in the relevant Google privacy statements: https://policies.google.com/?hl=de; https://policies.google.com/technologies/partner-sites.

For more information on the purpose and scope of data collection and its processing by Google, in addition to further information on your rights in this regard and setting options for protecting your privacy, please visit: www.google.de/intl/de/policies/privacy.

You will find links to social media networks on our website. These are not plugins provided by the social media network, which already transmit data to the provider when the page is loaded, without the user having any influence. The buttons to the social media networks merely provide a link to our presence on the social media network. No user data is transmitted from the website to the social media network.

When you call up a link to one of our social media profiles, a direct connection is established between your browser and the server of the social network concerned. This provides the network with the information that you visited our website with your IP address and called up the link. If you call up a link to a network while you are logged into your account with the network in question, the content of our site may be linked to your profile with the network, which means that the network can assign your visit to our website directly to your user account. If you wish to prevent this, you should log out of your account with the respective network before clicking on corresponding links. An assignment will take place in any case if you log in to the relevant network after clicking on the link.

When you sign up for our newsletter, we use your email address to send you information about our services as well as other commercial communications (e.g. announcements of events, competitions, promotions and surveys) that may be of interest to you. For security reasons, we use the so-called double opt-in procedure to register for the newsletter. After registration, we send a confirmation e-mail to the e-mail address provided during registration with a link which you must click on to definitively confirm that the newsletter is to be delivered. You can unsubscribe from such newsletter emails at any time by clicking on the marked "Unsubscribe" link at the end of each email or contacting us directly by email at datenschutz@kulturzueri.ch.

We will not make any decision about you based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

The Forum Kultur association has implemented organisational and technical measures to maintain the security of personal data and to protect it against unauthorised or unlawful processing, accidental loss, alteration, disclosure or access.

The Forum Kultur association may use third parties as data processors to collect and process your personal data. The data processors we use will only process your personal data in accordance with our instructions and are required by law to take strict security precautions when handling personal data.

Unfortunately, the transmission of information over the internet is not completely secure. Although we do our utmost to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. For this reason, you are always free to submit your personal information to us by other means, such as by telephone. Once we have received your data, we apply strict procedures and stringent security measures to prevent unauthorised access.

Please note that if you click on the link to a third party website (e.g. Google or social media or other websites), you will be redirected to a website that we do not control and our privacy policy will no longer apply. Your browsing and interaction on another website is subject to the terms of use and privacy statements and notices of those third party websites. In addition, we cannot guarantee the accuracy or timeliness of these links.

We encourage you to carefully read the terms of use and privacy statements and notices of other websites before submitting any personal information through this website. We are not responsible or liable for the information content and data processing of such third party websites.

You can request information from the Forum Kultur association as to whether personal data about you is being processed, providing proof of your identity. In addition, you have the right to request the correction, destruction or restriction of personal data about yourself, as well as to object to the processing of your personal data. If the processing is based on your consent or our legitimate interests, you can withdraw consent or object to this processing at any time by contacting us directly by e-mail at datenschutz@kulturzueri.ch. In certain cases, you have the right to obtain personal data arising from the use of online services in a structured, common and machine-readable format so that further use and transfer to any third party provider is possible.

Requests in this regard should be addressed to the Forum Kultur association via the following e-mail address: datenschutz@kulturzueri.ch. Verein Forum Kultur reserves the right to restrict your rights within the framework of applicable law and, for example, not to disclose comprehensive information or to delete personal data. Please note that even after a request to delete your personal data, we must retain it in whole or in part within the framework of legal and contractual retention obligations. Deletion of your personal data may result in you no longer being able to use our services.

If we refuse your request or you are not satisfied with our processing, you are also entitled to lodge a complaint with the competent supervisory authority and to lodge an appeal with the competent authority. The competent authority is the Federal Data Protection and Information Commissioner (FDPIC) in Bern(https://www.edoeb.admin.ch).

The Forum Kultur association reserves the right to adapt, supplement or otherwise change this personal data protection statement at any time and without stating reasons. The current personal data protection statement as published on the portal shall apply.