PRIVACY & COOKIES POLICY
Simon Rilling, Bändlistrasse 54, 8065 Zürich, Switzerland, e-mail address: contact@simonrilling.com (“Mr. Rilling“, “I“, “me” or “my“) am committed to protecting the privacy and security of the personal data that is provided to me or collected by me during the course of my business. I store and process personal data in accordance with applicable data protection laws, in particular the Swiss Federal Data Protection Act of 1 September 2023 (FADP) and the European Union General Data Protection Regulation 2016/679 (GDPR).
I provide personal and organizational consulting, coaching and the conducting of workshops, group trainings, journeys, retreats, and other services (“Service(s)”). In connection therewith, I operate a website under the domain https://simonrilling.com/ (“Website“). On the Website, users can access information about my services, my art and my events and contact me.
This privacy and cookie policy (“Privacy & Cookies Policy“) explains how I may collect and use personal data that you provide to me or which I collect about you in connection with my Services as well as your rights in relation to your personal data.
I may provide you with additional privacy notices where I believe that it is appropriate to do so. Those additional notices supplement and should be read together with this Privacy & Cookies Policy.
I am responsible for your personal data provided to me or collected by me during the course of my business.
1 What Personal Data I Collect
1.1 General
I collect personal data that you provide to me directly or that is publicly available.
1.2 My Services
In the course of my business activities, I collect and process personal data of you, and business partners, related persons and other persons as well as their respective employees and representatives.
In particular, I process the following type of personal data:
- When you visit my Website: I collect personal data from your device when you visit my Website, as outlined in section 1.3 (Website), respectively, below.
- When you create or edit your profile on my Website: I will collect your username, e-mail address and any other data you provide, such as your full name, contact details (e.g., your address and telephone numbers), your profile picture, nationality and interests.
- When you subscribe for my newsletter: When you subscribe for my newsletter, I may collect your e-mail address and your full name.
- When you contact me: When you contact me, I may collect contact information such as your full name, e-mail address, internet protocol (IP) address and content-related information about your inquiry. I only use this information to respond to your inquiry.
- When you use or interact with third-party plug-ins (e.g. social media plugins from Google, Facebook, Instagram, Twitter, LinkedIn, or other platforms) that may be available on the Website: When you use such third-party plug-ins, certain information from your social media accounts may be accessed by or shared with us, and likewise, certain information about your use of my Website may be posted to your profile on those third-party platforms. The use of such third-party plug-ins may be subject to the terms of use, privacy policies and other regulations of those third parties.
I may also process other personal data and other information of all kind that you provide to me in the course of registering on the Website or of using my Services.
1.3 Website
1.3.1 General
When you interact with me through or use my Website, such as by subscribing to my newsletter or contacting me via my Website, I may, for example, collect, receive, or store the following personal data:
- your full name, and e-mail address.
- your internet protocol (IP) address, mobile device identifier,browser type, operating system, internet service provider, pages that you visited before (if you clicked on a link on that page to get to my Website) and after using my Website, the date and time of your visit, information about the links you click and pages you view within my Website, other standard server log information, your activity on the Website (such as likes, views, comments, posts, news, reports) and other metadata.
1.3.2 Cookies
A cookie is a small piece of data, stored in text files that are stored on your browser or other device when websites are loaded in the browser. Cookies are used to “remember” you and your preferences when you visit my Website either for a single visit (through a “session cookie“) or for multiple repeat visits (called a “persistent cookie“). A session cookie is deleted when you close your browser or after a short time. A persistent cookie is kept for a set period of time after which it expires and is deleted.
I use session cookies and persistent cookies on my Website to ensure consistent and efficient experiences for users of my Website. Cookies also perform functions like allowing users to remain logged into the Website, if
applicable. I use the following types of cookies for the following purposes:
- Necessary: These cookies are essential in order to enable you to use my Website and its features. The information collected by these cookies relate to the operation of my Website, for example, language detection, website scripting language and security tokens to maintain secure areas of my Website.
- Functionality: These cookies remember choices you make, for example the country you visit my Website from and any changes you have made to text size or other parts of web pages that you can customize, in order to improve your experience of my Website and to make your visits more tailored and enjoyable. The information these cookies collect may be anonymized and cannot be used to track your browsing activity on other websites.
- Performance and Analytics: These cookies collect anonymous information about how you use my Website, for example which pages you visit most often, whether you receive any error messages, and how you arrived at my Website. They are also used to track details like the number of unique visitors and pageviews to improve user experience. Information collected by these cookies is used only to improve your use of my Website and never to identify you. These cookies are sometimes placed by trusted third-party providers, such as Google Analytics.
- Third-Party / Embedded Content: These cookies enhance the experience of Website users. These cookies allow you to share what you’ve been doing on my Website with social media organizations such as Facebook and Twitter. I have no control over the information collected by these cookies.
My Website only automatically uses Necessary cookies to enable you to use my Website and its features and ensure the functionality of my Website.
Upon your consent, the Website uses Performance and Analytics, Functionality and Third-Party or Embedded Content cookies for the purposes of providing relevant content, analyzing my traffic, and providing a variety of features to you. You may withdraw your consent to the use of certain cookies (other than Necessary cookies) any time.
How do I disable cookies?
Some internet browsers are automatically set up to accept cookies. If you want to change your cookie preferences or refuse or delete any cookies (or similar technologies), please refer to the help and support area on your internet browser for instructions on how to block or delete cookies.
Please note you may not be able to take advantage of all the features of my Website if you delete or disable certain cookies, such as the Performance cookies.
1.3.3 Google Analytics
I use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google“). Google Analytics uses cookies to analyze how you use my Website. The information generated by the cookie about your use of the Website is generally transmitted to and stored on a Google server in the USA.
I only use Google Analytics with activated IP anonymization. This means that your IP address will be shortened in member states of the European Union or the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. Google will use this information on my behalf to evaluate your use of the website in order to provide me with reports on the activities of users on
my Website and to provide other services related to the use of the Website and internet usage. Furthermore, Google will transfer this information to third parties if required by law or if third parties process this data on behalf of Google. The IP address provided by your browser will not be merged with Google’s other data.
You may object to Google Analytics collecting the data with effect for the
future by installing a deactivation add-on (https://tools.google.com/dlpage/gaoptout?hl=en) for your browser. Besides the possibility to install the deactivation add-on, there is another alternative to prevent Google Analytics from collecting the data. It is particularly interesting for users of mobile devices. Please click on this
1.3.4 OnceHub
I use OnceHub, an online booking system for meetings provided by OnceHub Inc., 40 S Lemon Ave Ste 5585 Walnut, CA, 91789-2706 United States (“OnceHub”). OnceHub allows me to handle the scheduling and planning of meetings, reschedule meetings, and receive the requested data of Users among other information.
According to OnceHub’s publicly available privacy notice (see https://oncehub.com/trustcenter/legal/privacynotice), your information may be transferred to and stored on a OnceHub server in the USA or to other countries where OnceHub’s service providers are located. If you use my Services, you consent to such transfer to the USA and other countries which provide less protection for personal data than the EU or Switzerland.
1.3.5 Mailchimp
I use Mailchimp, an email and marketing automations platform from Intuit, Inc., 2700 Coast Avenue, Mountain View, CA, 94043 United States (“Intuit”) to create, manage and send newsletters. I only send you a newsletter if you subscribe to it on my Website.
According to Intuit’s publicly available privacy notice (seehttps://www.intuit.com/privacy/statement/), Intuit stores data on servers in the USA and uses it for sending and evaluating the newsletter, including statistical surveys and analyses. Intuit and Mailchimp rely on the EU-U.S. Data Privacy Framework (EU-U.S. DPF), and will rely on the Swiss-U.S. Data Privacy Framework (DPF) once approved, to transfer data from the EU and Switzerland, respectively, to the USA. Until the Swiss-U.S. DPF will be in force, I ask for your consent to transfer your email address and other personal data you provide to Intuit in the USA when you subscribe for my newsletter. You can withdraw your consent at any time by unsubscribing from the newsletter by clicking on the link at the bottom of each newsletter I send.
Intuit also uses web beacons (also known as web bugs, clear gifs or pixels) for this purpose. Web beacons are tiny graphics with a unique identifier that function similarly to cookies and allow me to recognize if and when you read a newsletter and whether you click on a link contained therein. Unlike cookies, which are stored on your hard drive, web beacons are embedded in the newsletter. Mailchimp may link the information collected by web beacons to other information about you.
1.4 Business Development
When you interact with me as a current or prospective User or business partner, for current or potential business purposes, I may for example, collect, receive, or store the following personal data:
- Contact data: your full name, address, telephone number, and
email. - Correspondence data: any contacts and interactions you have had with me.
I will only use your personal data to maintain and develop my business relationship with you, identify Services you may be interested in, to pursue certain business development initiatives and send you marketing communications (e.g., newsletters).
You can control the data you receive through my marketing communications by using the corresponding option at the bottom of my e-mails. If you no longer wish to receive emails relating to my Services, you can unsubscribe at any time by using such option at the bottom of the e-mail or by contacting me at contact@simonrilling.com.
1.5 Other Contacts
Further, I collect and process data about you if you offer or provide products or services to me to evaluate your products or services and generally when you request data from me or provide data to me.
2 How I Use Your Personal Data
Personal data collected from you or from third parties and publicly available sources is used:
- to operate, maintain and improve my Services;
- to provide the Services to you, give you access to my Website or restrict your access and to fulfill other contractual duties and rights agreed upon with you;
- to ensure a comfortable use of my Website;
- to personalize my Services;
- to allow you to manage your profile and update your profile;
- to communicate with you about my Services (Changes to the range of services etc.);
- to maintain and develop my business relationship with you;
- to deliver advertising for my Services that may be relevant to your interests;
- to pursue certain business development initiatives;
- to send you marketing communications;
- to operate, improve the functionality and design of my Website and ensure a smooth connection of the Website;
- to detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity;
- to identify and repair errors that impair existing intended functionality;
- to audit interactions, transactions, and other compliance activities;
- to protect the integrity, safety, or security of my Services or you, other Users or business partners, comply with applicable legal or regulatory obligations or enforce compliance with this Privacy & Cookies Policy, General Terms and Conditions, or other regulations placed on your use of my Services;
- to carry out administrative or operational processes;
- to evaluate your eligibility for an open job position with me that you apply to; and
- to the extent it is not possible to use anonymized, encrypted, or aggregated personal data, to develop and test my Services.
In general, I do not use automated individual decision-making in any of my data processing activities. If I should rely on such processing in a particular situation, I will inform you separately.
3 My Legal Bases for Processing Your Personal Data
I will only use your personal data if and to the extent that applicable law allows and rely on a variety of legal bases to process your personal data for the above purposes, including if:
- necessary for the performance of a contract with you;
- necessary in connection with a legal obligation;
- Third parties or I have a legitimate interest which is not overridden by your interests or your rights and freedoms; or
- you have given your consent at the time of collecting your data (which you can withdraw at any time thereafter).
4 How and Why I May Share Your Personal Data
I may disclose your personal data to recipients as set out in Section 4.1, which may include international data transfers as further described in Section 4.2.
4.1 General
I may share your personal data with the following recipients (in compliance with the applicable legal requirements):
- Service providers: I may share your personal data with service providers who support me and the provision of my Services. This can include IT service providers, business analytics providers, newsletter service providers, marketing and event management service providers, etc.
- Legal and professional advisors: I may share your personal data with accountants, auditors and other legal and professional advisors.
- Contractual partners: I may share your personal data with contractual partners to the extent the disclosure results from such contracts.
- Business partners: I may share your personal data with business partners.
- Competent authorities: I may share your personal data with competent authorities, including tax authorities and courts (in Switzerland and abroad), if I am legally obliged or entitled to such disclosure or if it appears necessary to protect my interests.
- Transaction partners and advisors: I may share your personal data in relation to mergers, acquisitions or other business transactions involving the business I run.
4.2 International Transfers
In connection with the disclosures described in Section 4.1, I may transfer your personal data to the following countries that offer adequate protection pursuant to the FADP and GDPR: EEA member states and UK.
Under certain circumstances, I may also transfer your personal data to the following countries, which do not offer adequate protection pursuant to the FADP and/or GDPR: USA and potentially other countries (if necessary for the respective processing purpose, e.g. for IT services, sending newsletters). To the extent such countries do not offer adequate protection, the transfer is secured by appropriate safeguards (such as Standard Contractual Clauses or, once in force for transfers to the US, the Swiss-U.S. Data Privacy Framework) or based on a statutory exemption (e.g., if you have given your consent to the transfer, if the transfer is directly connected with the conclusion or performance of a contract with you or if the transfer is necessary for the establishment, exercise or enforcement of legal claims before a foreign authority). Within the scope of the GDPR, you may ask me for a copy of the relevant safeguards by contacting me as indicated at the beginning of this Privacy & Cookies Policy.
5 Your Rights and How You Exercise Them
In relation to the processing of your personal data, you may have the right to:
- access: you can ask me whether I process your personal data, and
if so, how I do so; - correction: if you consider that the personal data which I process relating to you is incorrect or incomplete, you can ask me to correct or complement it;
- object: if I rely on my or a third party’s legitimate interest to process your personal data, and you consider your interest in me not doing so weighs more heavily, you can object to my processing (regarding cookies through which certain personal data may be collected, you can block the setting of such cookies at any time by changing the settings in your browser accordingly; see Section 1.3.2 above);
- objection: you can also object to my processing of your personal data for direct marketing;
- erasure: if you consider that I process your personal data without legal justification or the data was collected when you were still a minor, you can ask me to erase your personal data;
- restrict processing: if it is unclear whether there is a legal justification for the processing of your personal data (for instance, after you have objected to such processing), you can ask me to restrict the processing while the situation remains unclear;
- data portability: insofar as the processing of your personal data is based on a contractual necessity or on your consent, you can ask me to provide you with your data in a structured, commonly used and machine-readably format; and
- withdraw your consent: i.e., to revoke your consent to the extent you have previously given such consent to any specific purpose of processing of your personal data. This will not affect the lawfulness of any processing carried out before you have withdrawn your consent (or any processing based on any legal basis other than your consent) and it may mean that I will no longer be able to provide my Services to you.
In case you wish to exercise any of these rights, please contact me as specified at the beginning of this Privacy & Cookies Policy. I will evaluate your request and provide you with an answer and its justification no later than is required by law. Please note that I may refuse or limit these rights in accordance with applicable law.
You will not, in general, have to pay a fee to exercise any of these rights. However, I may charge a fee for access to your personal data if the relevant data protection legislation allows me to do so, in which case I will inform you as required by the law.
If you feel I have not handled your query or concern to your satisfaction, you also have the right to lodge a complaint with or notify your local supervisory authority (see Section 8 below).
6 How I Protect Your Personal Data
I have implemented appropriate technical and organizational security measures to protect your personal data from loss, misuse, alteration or destruction. Despite these security measures, I cannot completely eliminate the security risks associated with data processing.
7 How Long I Keep Your Personal
Data
I process and retain your personal data for as long as my processing purposes, the legal retention periods and my legitimate interests regarding documentation require it. Except in case of contrary legal or contractual obligations, I will erase or anonymize your personal data once the applicable storage or processing period has expired.
In general, I will retain your personal data as follows:
- Website: Your personal data collected through my Website will be processed for as long as required to enable the requested access, secure the stability and integrity of the relevant systems or required to perform the analysis. Thereafter, it will be deleted or anonymized.
- Cookies: Cookies will be stored on your device for the time period required to achieve the related purpose and will thereafter be deleted by your browser.
- Communication: Your personal data used to communicate with you will be deleted after responding to / completing your inquiry if and to the extent (i) I am not legally obliged to retain such personal data (e.g., for accounting or document retention purposes), and (ii) I do not have an overriding or legitimate interest to retain such personal data for documentation, quality assurance or similar business purposes or for the assessment or exercise of, or defense against, legal claims.
- Business Development: I generally keep your personal data used for business development or marketing purposes for as long as necessary to achieve the respective purposes. Such Data will be deleted thereafter if and to the extent (i) I am not legally obliged to retain such personal data (e.g. for accounting or document retention purposes), and (ii) I do not have an overriding or legitimate interest to retain such data for documentation, quality assurance or similar business purposes or for the assessment or exercise of, or defense against, legal claims.
8 How You May Complain
If you believe that my processing of your personal data contradicts the applicable data protection laws, you have the possibility to lodge a complaint with the competent data protection authority.
The data protection authority in Switzerland is the Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Berne, Switzerland (https://www.edoeb.admin.ch). Based on your residence, you may have the possibility to lodge a complaint with the appropriate data protection authority of your place of residence.
9 Changes to This Privacy & Cookies Policy
This Privacy Notice does not form part of any contract with you, and I may amend it at any time.
The version published on my Website is the version that currently applies.
Last update: [2024/02/22]