Etzensperger Informatik AG, Kirchweg 24, CH-3366 Bettenhausen (hereinafter referred to as “service provider”) attaches great importance to the protection of your privacy and the security of the data stored with edoobox. The service provider takes all customary and reasonable measures to protect personal information from loss, misuse, unauthorized access, disclosure, alteration or destruction. This data protection guideline describes how edoobox handles data. The contents of this data protection declaration apply both to event providers (users of an edoobox account) and to participants of events.
Further information on data use for advertising purposes by Google, possible settings and objections can be found on the Google websites: https://www.google.com/intl/de/policies/privacy/partners/ (“Data use by Google when using our partners’ websites or apps”), http://www.google.com/policies/technologies/ads ("Data use for advertising purposes"), http://www.google.de/settings/ads (“Manage information Google uses to show you advertising”) and http://www.google.com/ads/preferences/ (“Determine what advertising Google shows you”).
Facebook Pixel, Custom Audiences and Facebook Remarketing. Within our online offer, due to our legitimate interests in the analysis, optimisation and economic operation of our online offer and for these purposes, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook INC. 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Gand Canal Harbour, Dublin 2, Ireland (“Facebook”). This function is used to present interest-based advertisements (“Facebook ads”) to visitors to this website when they visit the social network Facebook. The fact that you have visited this website is transmitted to the Facebook server.
For more information about Facebook’s collection and use of the information and your rights and privacy practices, please see Facebook’s privacy statement at https://www.facebook.com/about/privacy. Alternatively, you can deactivate the remarketing function “Custom Audiences” at https://www.facebook.com/settings.
No advertising is placed in edoobox and personal data is not passed on for advertising purposes. Self-promotion can be displayed in edoobox accounts that are not subject to a fee. (e.g. on the web pages and in e-mails).
If you do not wish to receive the news about edoobox offered by us at irregular intervals by e-mail, you can deactivate this at any time in the edoobox settings. However, you may miss out on important information that you need to use edoobox.
In edoobox, various measures ensure that third parties cannot access third-party accounts or data without authorisation. A central element for the access protection to edoobox accounts is the password. Choose a secure password and keep your password secret to prevent unauthorized access to your edoobox account. Two-factor authentication via Yubikey and backup keys is available.
The edoobox service works with various payment systems (non-exhaustive list: Paypal, Stripe, Sofort-Klarna, Wirecard). You can find the relevant data protection guidelines at the payment system providers. In order to make payment as user-friendly and simple as possible, edoobox sends the name and e-mail address to the relevant provider during a payment process. This is information that would have to be provided anyway.
The edoobox mail is sent by default via the mail provider MailJet (outgoing mail server), therefore it is necessary to include the mail address and any other personal and offer-related data in the mail. The provider (user of an edoobox account) can install another mail provider (SMTP) on his own responsibility.
In edoobox, information is exchanged in real time between administrators via an encrypted connection. The service provider uses Pusher (Pusher Ltd) for the transmission of these messages. First and last names of participants can be transmitted via pusher.
Participants can add files in all formats and sizes to the booking, provided they are approved by the provider (user of an edoobox account). These files are added directly by the participant to Amazon’s S3 secure storage solution (Amazon.com Inc).
The service provider creates calls or SMS via Twilio (TWILIO INC) if these functions have been approved by the provider (user of an edoobox account). The number (landline or mobile) is thus transmitted to Twilio.
Letters can be sent directly from edoobox to participants by mail. For this the service provider uses the interface of Pingen.com. If this function is used by the provider (user of an edoobox account), the documents are transmitted to Pingen. The service provider can also send letters to the stored contact address of the provider.
In accordance with the Swiss Data Protection Act of 19 June 1992, as amended, and the European General Data Protection Regulation 2016/679 EU GDPR, you have a right to access, correct and remove your personal data.
All personal data that we hold and process can be accessed, corrected or deleted by the relevant administrators of an edoobox account. The service provider (edoobox) is not entitled to make corrections to personal data.
A - What rights do people who have registered/booked in an offer (i.e. participants) have
If you notice that there is incorrect or incomplete information among the personal data we hold about you, you may request to see this information, have it corrected or have it deleted. Please contact the provider of the booked offers.
If you wish to make a complaint about how the provider of the offers has handled your personal data, please contact the data protection officer of the provider of the booked offers by email or in writing.
If you still feel that your personal data has not been handled in accordance with the law, you can contact the relevant data protection authority and lodge a complaint with them.
B - What rights do you have as a provider or user of an edoobox account (i.e. administrators, instructors)
If you notice that there is incorrect or incomplete data among the personal data we hold about you, you can correct or delete this data in your edoobox account independently and on your own responsibility. If your access rights do not allow you to edit the data, contact a responsible administrator or the responsible data protection officer in your company.
The storage period of the personal data is determined by the provider of the offers and is listed in his data protection declaration. If a free edoobox account remains unused for more than one year, the service provider has the right to delete all data of this account and the account itself.
As a provider (user of an edoobox account) you can send the service provider a deletion request to your edoobox account. He will contact you immediately and take all necessary precautions. The service provider may request that your application be accompanied by proof of identity or authority.
Version 1.3 from 19 April 2018