Privacy Policy

This Policy describes the collection and further processing of personal data by Cosmiq Universe AG and its affiliates (hereinafter "cosmiq").

cosmiq attaches great importance to the protection of personal data and collects, processes and uses personal data solely for providing and improving its services and in accordance with the principles described below and in compliance with the applicable data protection provisions. Personal data is all information relating to an identified or identifiable natural person, which includes, for example, your name as well as your postal and e-mail addresses.

In the event that the activities covered by this notice are governed by other data protection policies, are evident from the circumstances, or are governed by applicable laws outside of the European Union and the European Economic Area, then such applicable law and resulting policies shall control. The term personal data shall include all information relating to an identified or identifiable person.

This Policy describes the general processing of personal data by cosmiq in Section A. Section B describes specific provisions for specific applications (e.g. payment, newsletter and personalized advertisement).

If the user provides personal data of other persons to cosmiq, they should only provide their personal data only if they are entitled to disclose such data in compliance with the applicable data protection regulations and only if the affected person agrees to said disclosure according to this data protection policy.

A General Provisions

Data Controller, Data Protection Officer

The Data Controller in accordance with the Swiss Data Protection Regulations and the EU General Data Protection Regulation (GDPR) of every website (including online-shops and mini sites for special offers), Smart device Application, presence on social media, multimedia portals, chatbots and any other consumer touchpoint of cosmiq (hereinafter each "Website") shall be Cosmiq Universe AG, General-Guisan-Strasse 6, 6300 Zug, Switzerland.

cosmiq has not appointed a data protection officer according to article 37 GDPR.

Processing of personal data

cosmiq collects and processes personal data of:

users and registered users of an cosmiq registered Website (i.e. visitors, account holders etc.);
legal entities purchasing and receiving/benefitting services of cosmiq;
potential licensees or end-users of the cosmiq services (hereinafter “cosmiq Members”;
recipients of cosmiq newsletters;
participants in research campaigns and opinion surveys conducted by cosmiq;

(together Users).

In particular, the following categories of personal data are processed by cosmiq:

Personal data including but not limited to first and last name, address, legal entity, VAT number, residence, telephone number, email address, date of birth, date of incorporation, Identification data (scans, ID Number, expiry date, trade register excerpt);
Data pertaining to orders and purchases including but not limited to billing address, services ordered and purchased, information and queries and complaints relating to services, User care and services, rescissions and disputes;
Data in connection with marketing and communication, including but not limited to information relating to newsletter and other communication channels, opt-ins and opt-outs, invitations to and participations at events and special activities, communication preferences, correspondence and communication with cosmiq (including records of the communication); personal preferences and interests and User segmentation information;
Data concerning the use of the Website including but not limited to the IP address and other user identification (e.g. username of social media, MAC address of devices, cookies, beacons, etc.), date and time of Website visits, visited sites and contents, and referring websites;
Data in connection with communication including but not limited to preferred means of communication, correspondence and communication with cosmiq (including records of the communication);

(together User Data).

In the course of business, Users will be required to provide User Data necessary regarding the services or if required by law. Without this data, cosmiq will not be able to render its services to the User.

Any access to the Website is logged, therefore cosmiq collects any data regarding the usage and User journey of and through the Website which cannot be deactivated by the user of the Website.

Purpose of processing and legal grounds

Purpose of data processing

In particular, but not limited to, and in accordance with the applicable law, cosmiq may process personal Data for the following Purposes:

In connection with services offered, conclusions of contracts, executions of contracts, maintenance and development of User relations, communication, User service and support, promotions, advertisement and marketing (including newsletters and mailing of promotional materials), communication, invitation to events and participation in promotions, organization of joint activities with Partners;
Management of the Users of the Website and other activities, operation, maintaining and developing the Website (including the provision of functions which require identifiers or other personal data) and additional IT systems and identity verifications;
protection of Users, employees and other individuals and protection of data, secrets and assets of and entrusted to cosmiq as well as the protection and security of systems and premises of cosmiq;
compliance with legal and regulatory requirements, including the internal rules of cosmiq, enforcement and exploitation of legal rights and claims, defense against legal claims, litigation, complaints, combating abusive conduct, engaging in legal investigations and proceedings and responding to inquiries of public authorities;
sale or acquisitions of business divisions, companies or parts of companies and other corporate transactions and the transfer of personal data associated therewith; and
for other lawful purposes where such processing was evident from the circumstances or indicated at the time of the collection.

(together the Purpose of Data Processing).

Legal grounds of Data processing

cosmiq uses the personal data for the Purpose of Data Processing based on the following legal grounds:

performance of contracts;
compliance with legal obligations of cosmiq;
consent of User (can be withdrawn at any time);
legitimate interests of cosmiq, including but not limited to
- purchase and rendering of services;
- advertising and marketing activities;
- efficient and effective User support, maintenance of contact and other communication with Users;
- understanding User behavior, activities, concerns and needs, market studies;
- efficient and effective improvement of existing services and development of new services;
- efficient and effective protection of Users, employees and other individuals and protection of data, secrets and assets of and entrusted to cosmiq as well as the protection and security of systems and premises of cosmiq;
- maintenance and security, efficiency of business and development, the Website and IT systems;
- reasonable corporate governance and development;
- compliance with legal and regulatory requirements and internal rules of cosmiq;
- prevention of fraud, offences and crimes as well as related investigations, handling of claims and actions against cosmiq, legal proceedings, cooperation with public authorities, legal actions

Transfer and Disclosure of Data

In accordance with applicable data protection laws, cosmiq may transfer personal data, to the following categories of commissioned data processors:

service providers;
local, national and foreign authorities;
acquirers or parties interested in acquiring business units, companies or other parts of cosmiq;
other parties in potential or actual legal proceedings;
other Group companies of cosmiq.

(together Commissioned Data Processors).

cosmiq may disclose personal data to Commissioned Data Processors and to any country worldwide, including namely all countries in which cosmiq is represented by Group companies, affiliates or other offices and representatives as well as to countries in which service providers of cosmiq process their data. If data is disclosed to countries without an adequate protection, cosmiq shall ensure such (e.g. by EU standard clauses, binding corporate rules, EU-U.S. and/or the Swiss-U.S. Privacy Shield Framework).

Data Retention

In general, cosmiq retains personal data for no longer than it is necessary for the purposes for which the personal data are processed. Notwithstanding the general principle, cosmiq may process personal data for longer periods subject to the following rules and obligations: cosmiq retains personal data as long as cosmiq (i) is obligated to do so (by way of contract, law or other provisions) or (ii) has an overriding interest (e.g. an interest for reasons of proof in case of claims, documentation of compliance with certain legal or other requirements). Deviating rules are reserved with respect to anonymization or pseudonymization of personal data subject to applicable law.

cosmiq retains contract related personal data (including business records and communication) as long as the contractual relation is in force and for ten years after termination of the contractual relationship unless (i) a shorter or longer statutory storage obligation is applicable, (ii) the retention is required for reasons of proof or another valid reason based on applicable law, or (iii) the deletion of the data is required earlier.

Log files are retained for 12 months.

Cookies, Tracking and Social Plug-Ins

6.1 Cookies

cosmiq uses cookies on its Website.

cosmiq uses cookies to learn more about the way a user interacts with the Website in order to improve the user's experience when visiting the Website.

cosmiq uses session cookies that are automatically deleted when the Website is closed and that enable the server to establish a stable connection to the user (e.g., that the user doesn’t lose already entered date) while the user is using the Website. cosmiq also uses permanent cookies that are only deleted after a per Website specified time.

Permanent cookies are used to remember the preferences of the user on the Website and remain on the user's device even after the browser is closed or the device is restarted. cosmiq uses these cookies to analyze user behavior and to determine visit patterns so that the Website functionality can be improved for all users.

Cookies do not cause any damage and do not contain any viruses. If the user nevertheless does not wish cookies to be set, browser settings can be changed that cookies are only created or generally rejected with the consent of the user.

Please note, however, that if cookies are not allowed or rejected on the Website, some functionalities may be restricted or unavailable.

cosmiq is entitled to install a code in transactional emails, newsletters and other marketing emails to determine whether the recipient has opened an email or downloaded images contained in the email. However, the recipient can block this application in their email program. In any case, the recipient agrees to the use of this technology by receiving newsletters and other marketing e-mails.

If cosmiq places third-party advertising on the Website (e.g. banners) or intends to place its own ad on a third party's website, cookies may be used by companies specializing in the use of this advertising. cosmiq does not pass on any personal data to such companies, i.e., third parties merely place a permanent cookie with the users of the Website to recognize users. This is in the sole interest of cosmiq and enables cosmiq to place targeted advertisements for these persons on the websites of third parties (e.g. in connection with products for which these persons have shown interest in the online shop). cosmiq does not pass on any personal data to the operators of external websites.

6.2 Analytic Tools

6.2.1 LinkedIn Insight Tag

cosmiq uses the LinkedIn Insight Tag of the social network LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland.

The LinkedIn Insight Tag enables the collection of data regarding members’ visits to the cosmiq Website, including the URL, referrer, IP address, device and browser characteristics, timestamp, and page views. This data is encrypted, then de-identified within seven days, and the de-identified data is deleted within 90 days. LinkedIn does not share the personal data with cosmiq, it only provides aggregated reports about the website audience and ad performance. LinkedIn also provides retargeting for website visitors, enabling cosmiq to show personalized ads off its website by using this data, but without identifying the member. LinkedIn members can control the use of their personal data for advertising purposes through their account settings: (https://www.linkedin.com/psettings/advertising/actions-that-showed-interest).

6.2.2 Google Tag Manager and Google Analytics

The Website uses Google Tag Manager and Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on the user's computer, to help the Website analyze how users use the Website. The information generated by cookies about the use of the Website is generally transferred to a Google server in the USA and stored there. However, if IP anonymization is activated, the IP address of the user will be shortened by Google in advance within member states of the European Union or in other states of the European Economic Area. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and shortened there. On behalf of the operator of the Website, Google will use this information to evaluate the use of the user of the Website, to compile reports on website activities and to provide further services associated with website and Internet use to the website operator. The IP address transmitted by the user's browser as part of Google Analytics is not merged with other Google data. The user may refuse the use of cookies by selecting the appropriate settings on his browser, however, please note that if you do this you may not be able to use the full functionality of the Website. In addition, the user can prevent the collection by Google of the data generated by the cookie and relating to the use of the website by the user (including your IP address) and the processing of this data by Google by the user downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout?hl=en).

Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html.

6.2.3 Social Plug-ins and Social Sign-Ups

The Website uses social plugins, e.g. from Facebook, Twitter or Google+ and offers the possibility to sign up via Facebook or Google. The plugins are marked with the logo of the provider and can be e.g. "Like" buttons or a Twitter button or Google+ button.

If the User uses a Website that contains such a plugin, its browser establishes a direct connection with the computers of the provider. The content of the plugin is transmitted directly from the provider of the plug-in to the browser of the User and integrated into the Internet site of the latter. By integrating the plug-ins, the respective provider receives the information that the User has visited the Website. If the User is logged in to the Provider's site at the same time, the Provider can assign the visit to the profile of the User. If the User interacts with the plugins - for example, by clicking the "Like" button or commenting - the corresponding information is transmitted directly from the User's browser to the provider and stored there.

If the User does not want the provider to collect data about him via the Website, he must log off from the provider before visiting the Website. Even when logged out, the providers collect anonymous data via the social plugins and set a cookie for the User. This data can be assigned to the corresponding profile if the User logs on to the provider at a later point in time.

If a login (Social Sign-Up) is offered via a social login service - e.g. Facebook Connect or Google - data is exchanged between the provider and the Website. With Facebook Connect, for example, transferred data contains data from the public Facebook profile of the User. By using such login services, the User consents to such transfer of data.

The purpose and scope of the data collection and the further processing of the data by the provider as well as the relevant rights and setting options for the protection of privacy can be found in the privacy notices of the providers.

Facebook Ireland Ltd. or Facebook Inc.: http://de-de.facebook.com/policy.php

Google Inc.: http://www.google.de/intl/de/privacy/plusone/

Twitter Inc.: http://twitter.com/privacy

If the User does not want the providers to collect data via these cookies, the User can select the function "Block third-party cookies" in his browser settings. In this case, the browser will not send cookies to the server for embedded content from other providers. With this setting, other functions of the Website may no longer work.

Commissioned service providers and third parties

In order to ensure a convenient experience, cosmiq may cooperate with service providers (or third parties) for programming, testing, User experience, payment, hosting etc. Using these service providers, cosmiq may transfer User Data to provide its services to the Users.

Rights of the Users, visitors and partners

Any affected individual or legal entity may request information from cosmiq if data concerning them is being processed. In addition, any affected individual or legal entity has the right to request the correction, deletion or restriction of its own personal data as well as to object to the processing of its own personal data per se. Should the processing of personal data be based on consent, the affected individual or legal entity may withdraw such consent at any time.

Requests shall be submitted to:

Cosmiq Universe AG
Data Protection
General-Guisan-Strasse 6
6300 Zug
Switzerland
contact@cosmiquniverse.com

cosmiq reserves the right to restrict the rights of the affected individual or legal entity in accordance with applicable law and e.g., not to disclose comprehensive information or not to delete data.

In the event that cosmiq makes an automated decision with respect to a certain individual or legal entity which may have a legal effect for the affected individual or legal entity or seriously affect him or her in a similar way, the affected individual or legal entity shall have, in accordance with applicable law, the right to communicate with cosmiq and to request a reconsideration of the decision or to request the prior evaluation by cosmiq. In such case, the affected individual or legal entity may no longer be able to use certain automated services. The individual or legal entity will be informed thereof subsequently or separately in advance.

Any affected individual or legal entity may also raise a complaint with the competent data protection authority, which in the case of cosmiq is the Federal Data Protection and Information Commissioner in Switzerland (http://www.edoeb.admin.ch) or the respective data protection authority in the user's country of residence.

Changes to this Data Protection Policy

cosmiq reserves the right to amend this Data Privacy Notice at any time and without prior notice or announcement. The latest version posted on the cosmiq Website shall be applicable.

cosmiq shall inform the affected person of any update or amendments by email or in another appropriate manner.

The amendments shall be deemed to have been accepted unless the affected individual objects within 30 days of notification. In case of objection cosmiq shall be free to terminate any agreement with the affected individual with immediate effect.

B Specific Provisions

The provisions of section A hereinabove shall be supplemented by the following provisions for certain activities of cosmiq. The provisions of this Section B shall take precedence.

1. Newsletter and personalized advertisement

If agreed upon by the User, cosmiq may send newsletters or other commercial communications regarding its services to the User. Based on the information provided, cosmiq may personalize the information provided to the User that the User only receives information that cosmiq deems interesting and relevant to the User. For this purpose, cosmiq analyses the data including but not limited to information about business purpose, interests and preferences as well as other information collected and data that can be derived from linking various data of the User and otherwise.

cosmiq may send newsletters or other commercial communications in connection with its services to Users. In accordance with the applicable law, cosmiq reserves the right to do so without the prior consent of existing Users.

The User may at any time unsubscribe from any newsletters or other commercial communications on the Website or via the link provided in each mailing. The termination of one newsletter may not entail the termination of other newsletters.

Personalized advertising may also be placed during the visit of the Website. Each such personalized advertisement displayed is generated by cosmiq using cookies and other analytic tools (see section A. 6 above).