A padlock on top of a computer keyboard.

Privacy Policy

1. What is the purpose of this Data Privacy Policy?

ClickMind.Com Ltd. (hereinafter also "we", "us") obtains and processes personal data relating to you or also other persons (so-called "third parties"). We use the term "data" here synonymously with "personal data" or "personal-related data". In this Data Privacy Policy, we describe what we do with your information when you usewww.clickmind.com, other of our websites or our apps (collectively, the "Website"), obtain our services or products, otherwise interact with us under a contract, communicate with us or otherwise deal with us. Where appropriate, we will provide you with timely written notice of additional pro-cessing activities not mentioned in this Data Privacy Policy. In addition, we may inform you separately about the processing of your data, e.g. in consent forms, contract terms, additional privacy statements, forms and notices. This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation("GDPR") and the Swiss Data Protection Act ( "DSG" ). However, whether and to what extent these laws are applicable depends on the individual case.

2. Who is responsible for processing your data?

The STARTUPS.CH Ltd. Neuwiesenstrasse 15, 8400 Winterthur (the "[company]") is responsible for the data processing described in this Data Privacy Policy, unless otherwise communicated in individual cases.

You can contact us for your data privacy concerns and to exercise your rights in accordance with para. 11you can reach us as follows:

By post:

ClickMind AG
Pflanzschulstrasse 3
8400 Winterthur
Schweiz

or via e-mail to: info@clickmind.com

3. What data do we process?

We process different categories of data about you. The main categories are as follows:

Technical data: When you use our website or other electronic offerings, we collect the IP address of your terminal device and other technical data to ensure the functionality and security of these offerings. This data also includes logs recording the use of our systems. We generally retain technical data for 6 months. In order to ensure the functionality of these offers, we may also assign an individual code to you or your end device. The technical data in itself does not allow any conclusions to be drawn about your identity. However, in the context of user accounts, registrations, access controls or the processing of contracts, they can be linked to other data categories (and thus possibly to your person).

Registration data: Certain offers and services can only be used with a user account or registration, which can be done directly with us or via our external login service providers. In doing so, you must provide us with certain data and we collect data about the use of the offer or service. We generally retain registration data for 12 months after the end of the use of the service or the termination of the user account. Communication data: If you are in contact with us via the contact form, e-mail, phone, letter or other means of communication, we collect the data exchanged between you and us, including your contact details and the marginal data of the communication. If we want or need to establish your identity, we collect data to identify you (e.g. a copy of an identity document). We usually keep this data for 12 months from the last exchange with you. This period may be longer where this is necessary for reasons of proof or to comply with legal or contractual requirements, or for technical reasons. E-mails in personal mailboxes and written correspondence are generally kept for at least 10 years. Master data: We use the term master data to refer to the basic data that we need in addition to the contract data (see below) to process our contractual and other business relationships or for marketing and advertising purposes, such as name, contact details and information e.g. about your role and function, your bank account(s), your date of birth or customer history. We process your master data if you are a customer or other business contact or are working for one (e.g. as a business partner contact), or because we want to contact you for our own purposes or the purposes of a contractual partner (e.g. as part of marketing and advertising). We receive master data from you yourself (e.g. when making a purchase or as part of a registration), from bodies for which you work or from third parties such as our contractual partners, associations and address dealers and from publicly accessible sources such as public registers or the Internet (websites, etc.). We generally keep this data for 10 years from the last exchange with you, but at least from the end of the contract. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons. For pure marketing and advertising contacts, the period is usually much shorter, usually no more than 2 years since the last contact. Contract data: This is data that arises in connection with the conclusion or processing of a contract, e.g. information about contracts and the services to be provided or provided, as well as data from the run-up to the conclusion of a contract, the information required or used for processing and information about reactions . We generally collect this data from you, from contractual partners and from third parties involved in the processing of the contract, but also from third party sources (e.g. providers of creditworthiness data)and from publicly accessible sources. We generally keep this data for 10 years from the last contractual activity, but at least from the end of the contract. This period may be longer if this is necessary for reasons of evidence or to comply with legal or contractual requirements or for technical reasons. Many of the measures described in this para. 3 you disclose to us yourself (e.g. via forms, in the course of communication with us, in connection with contracts, when using the website, etc.). You are not obliged todo so, subject to individual cases. If you wish to enter into contracts with us or claim services, you must also provide us with data, in particular master data, contract data and registration data, as part of your contractual obligation under the relevant contract. When using our website, the processing of technical data is unavoidable. Insofar as this is not inadmissible, we also take data from publicly accessible sources or receive data from authorities and other third parties.

4. For what purposes do we process your data?

We process your data for the purposes we explain below. These purposes, or the purposes underlying them, represent legitimate interests of us and, where applicable, of third parties.

We process your data for purposes related to communication with you, in particular to answer enquiries and assert your rights and to contact you in the event of queries. For this purpose, we use in particular communication data and master data and, in connection with offers and services used by you, also registration data. We retain this data to document our communication with you, for training purposes, for quality assurance and for follow-up enquiries.

We further process data for, among other things, the initiation, administration and processing of contractual relationships, for marketing purposes and to maintain relationships, for market research, to improve our services and our operations, for product development, to comply with laws, directives and recommendations from authorities and internal regulations (compliance) and for other purposes, e.g. as part of our internal processes and administration.

5. On what basis do we process your data?

Insofar as we ask for your consent for certain processing, we will inform you separately about the corresponding purposes of the processing. You can revoke your consent at any time with effect for the future by written notification (by post) or, unless otherwise stated or agreed, by e-mail to us; you will find our contact details in section 2. 2. For the revocation of your consent in the case of online tracking, see para.12. where you have a user account, revocation or contacting us may also be possible via the relevant website or other service. Once we have received notice of the revocation of your consent, we will no longer process your data for the purposes to which you originally consented, unless we have another legal basis for doing so. The revocation of your con-sent will not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Where we do not ask for your consent to process your personal data, we base the processing of your personal data on the fact that the processing is necessary for the initiation or performance of a contract with you (or the entity you represent) or that we or third parties have a legitimate interest in doing so, in particular in order to fulfil the obligations set out in section 4 above. 4 and related objectives described above and to be able to take appropriate action. Our legitimate interests also include compliance with legal regulations, insofar as this is not already recognised as a legal basis by the respective applicable data protection law. In individual cases, other legal grounds may come into play, which we will communicate to you separately where necessary.

6. What applies to profiling and automated individual decisions?

We may add certain of your personal attributes to those listed in para. 4 using your data for the purposes set out in section 4. 3) ("profiling"), if we want to determine preference data , but also to determine abuse and security risks, to carry out statistical evaluations or for operational planning purposes. For the same purposes, we can also create profiles, i.e. we can combine behavioural and preference data, but also master and contract data and technical data assigned to you, in order to better understand you as a person with your different interests and other characteristics

7. Who do we disclose your data to?

In connection with our contracts, the website, our services and products, our legal obligations, or otherwise to protect our legitimate interests and the other interests set out in section 4, we also transfer your personal data to third parties, in particular to the following categories of recipients: Service providers: We work with service providers in Switzerland and abroad who process data about you on our behalf or under joint responsibility with us, or who receive data about you from us under their own responsibility. Authorities: We may disclose personal data to offices, courts, and other authorities in Switzerland and abroad if we are legally obliged or entitled to do so or if this appears necessary to protect our interests. Contractual partners including clients: This primarily refers to our customers (e.g., service recipients) and other contractual partners, as this data transfer results from these contracts. If you work for such a contractual partner yourself, we may also transfer data about you to them in this context. The recipients also include contractual partners with whom we cooperate. We share your data with our partners (third parties) to provide you with the best possible service. Where we work with banks, the disclosure of data allows conclusions to be drawn about a potential banking relationship. Partner banks may also notify us to confirm the successful conclusion of a new banking relationship. To this extent, you release the bank(s) concerned from the obligation to maintain bank customer confidentiality and data protection. If we pass on data to external service providers, technical and organizational measures will be taken to ensure that the data is passed on in compliance with the statutory provisions on data protection. If you voluntarily provide us with personal or company-related data, we will not use, process, or pass on this data beyond the scope permitted by law or specified by you in a declaration of consent. Furthermore, we will only pass on your data to external service providers if this is necessary for the processing of the contract and they have agreed to the corresponding confidentiality and due diligence regulations. Furthermore, we will only pass on your data if we are obliged to do so by law or by official or court orders. If you work for such a contractual partner yourself, we may also transfer data about you to them in this context. The recipients also include contractual partners with whom we cooperate. Other persons: This refers to other cases where the inclusion of third parties arises from the purposes set out in para. 4 results. All these categories of recipients may in turn involve third parties, so that your data may also become accessible to them. We can restrict processing by certain third parties (e.g., IT providers), but not by other third parties (e.g., authorities, banks, etc.).

8. Does your personal data also end up abroad?

As described in section 7, we also disclose data to other entities, not only within Switzerland. Your data may therefore be processed in Europe and other countries. If a recipient is located in a country without adequate legal data protection, we contractually require the recipient to comply with applicable data protection laws (for this purpose, we use the revised standard contractual clauses of the European Commission, accessible here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), unless they are already subject to a legally recognized framework ensuring data protection, or we can rely on an exemption provision. An exception may apply, particularly in the case of legal proceedings abroad, overriding public interests, or if contract performance necessitates such disclosure, if you have consented, or if it involves data you have made publicly accessible and have not objected to its processing. Please also note that data exchanged via the internet is often routed through third countries, meaning your data can end up abroad even if the sender and recipient are in the same country. Facebook may use this information for advertising, market research, and designing Facebook pages based on demand. For this purpose, Facebook creates usage, interest, and relationship profiles, e.g., to evaluate your use of our website concerning the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website, and to provide other services associated with Facebook use. Further information can be found in Facebook's privacy policy at https://www.facebook.com/about/privacy/. If you do not want Facebook to associate visits to our pages with your Facebook user account, please log out of your Facebook account before using our website.

9. How long do we process your data?

We process your data for as long as necessary to fulfill our processing purposes, comply with legal retention periods, and protect our legitimate interests in documentation and evidence. Further details on retention and processing durations can be found under the individual data categories in section 3 or for cookie categories in section 12. If there are no legal or contractual obligations to the contrary, we will delete or anonymize your data after the retention or processing period has expired as part of our standard procedures.

10. How do we protect your data?

We implement robust security measures to ensure the confidentiality, integrity, and availability of your personal data. These measures protect against unauthorized or unlawful processing and guard against risks such as loss, accidental alteration, unauthorized disclosure, or access. For more information, please visit: http://www.linkedin.com/legal/privacy-policy.

11. What rights do you have?

To help you control the processing of your personal data, you also have the following rights in connection with our data processing, depending on the applicable data protection law:

• The right to request information from us as to whether and which of your data we are processing;
• The right to have us correct data if it is inaccurate;
• The right to request the deletion of data;
• The right to request that we provide certain personal data in a commonly used electronic format or transfer it to another controller;
• The right to revoke consent insofar as our processing is based on your consent;
• The right to obtain, on request, further information necessary for the exercise of these rights;
• The right to make individual decisions in the case of automated individual decisions (para. 6) to express your point of view and to request that the decision be reviewed by a natural person.

If you wish to exercise any of the above rights against us, please contact us in writing, at our premises or, unless otherwise stated or agreed, by email; our contact details are set out in para. 2. In order for us to be able to exclude abuse, we must identify you (e.g. with a copy of your identity card, unless otherwise possible). Please note that conditions, exceptions or restrictions apply to these rights under applicable data protection law (e.g. to protect third parties or trade secrets). We will inform you accordingly if necessary. If you do not agree with our handling of your rights or data protection, please let us know (para. 2). In particular, if you are in the EEA, the UK or Switzerland, you also have the right to complain to the data protection supervisory authority in your country. A list of authorities in the EEA can be found here: https://edpb.europa.eu/about-edpb/board/members_de. You can reach the UK supervisory authority here: https://ico.org.uk/global/contact-us/. You can reach the Swiss supervisory authority here: https://www.edoeb.admin.ch/edoeb/de/home/der-edoeb/kontakt/adresse.html.

12. Do we use online tracking and online advertising techniques?

We use various technologies on our website that enable us and third parties we have engaged to recognize you when you use our website and, in some circumstances, to track you across multiple visits. We inform you about this in this section. Essentially, this is so that we can distinguish your accesses (via your system) from those of other users, ensuring the website's functionality and enabling evaluations and personalization. We do not aim to infer your identity, even though we or third parties engaged by us can identify you through a combination with registration data. Even without registration data, the technologies used are designed to recognize you as an individual visitor each time you access the site, for example, by our server (or the servers of third parties) assigning you or your browser a specific identification number (so-called 'cookie'). We use such techniques on our website and allow certain third parties to do so as well. You can program your browser to block, deceive, or delete existing cookies or alternative techniques. You can also enhance your browser with software that blocks tracking by certain third parties. You can find more information about this on the help pages of your browser (usually under the keyword 'data protection') or on the websites of the third parties that we list below. A distinction is made between the following cookies (techniques with comparable functions such as fingerprinting are included here): Necessary cookies: Some cookies are necessary for the website to function as such or for certain functions. For example, they ensure that you can switch between pages without losing information entered in a form. They also ensure that you remain logged in. These cookies are only temporary ('session cookies'). If you block them, the website may not work. Other cookies are necessary so that the server can save decisions or entries made by you beyond one session (i.e., one visit to the website) if you use this function (e.g., language selected, consent given, the function for automatic login, etc.). These cookies have an expiry date of up to 24 months. Performance cookies: In order to optimize our website and corresponding offers and to better adapt them to the needs of users, we use cookies to record and analyze the use of our website, possibly even beyond the session. We do this through the use of third-party analytics services. We have listed these below. Performance cookies also have an expiry date of up to 24 months. Details can be found on the websites of the third-party providers. Marketing cookies: We and our advertising partners aim to target advertising effectively, displaying it only to those we wish to reach. Our advertising partners are listed below. For this purpose, we and our partners use cookies, with your consent, to record accessed content or concluded contracts. This allows us and our partners to show you advertisements that may interest you on our website and other sites displaying our or our partners' ads. These cookies expire between a few days and 12 months, depending on the situation. If you consent to these cookies, you will see relevant advertising. Without consent, you will still see ads, but they will be less targeted. Besides marketing cookies, we use other techniques to manage online advertising on other sites and reduce wastage. For instance, we may share users' email addresses with advertising platforms (e.g., social media). If these individuals are registered with the same email address, the platforms will show them our ads. The platforms do not receive personal email addresses of unknown individuals. However, they learn that these individuals are in contact with us and what content they accessed. We may also integrate third-party offers on our site, especially from social media providers. These offers are deactivated by default. Once activated (e.g., by clicking a button), the providers can see you are on our site. If you have an account with the provider, they can link this information to you and track your online activity. These providers process this data independently. We currently use services from the following providers and advertising partners (if they use your data or set cookies on your device for advertising): Google Analytics: Google Ireland (based in Ireland) provides the 'Google Analytics' service and acts as our processor. Google Ireland relies on Google LLC (based in the USA) as its processor (both 'Google'). Google uses performance cookies to track visitor behavior on our site (duration, frequency of page views, geographical origin, etc.) and compiles reports for us. We have configured the service to anonymize IP addresses in Europe before forwarding them to the USA. We have disabled 'Data sharing' and 'Signals' settings. Although we assume the shared information is not personal data for Google, Google may draw conclusions about visitors' identities for its purposes, create personal profiles, and link this data to Google accounts. If you consent to Google Analytics, you agree to such processing, including transferring personal data (e.g., usage data, device information, IDs) to the USA and other countries. More information on Google Analytics' data protection is available here.[https://support.google.com/analytics/answer/6004245] If you have a Google account, you can find further details on processing by Google here: https://policies.google.com/technologies/partner-sites?hl=de. Google AdSense: Our website uses Google AdSense, an advertising integration service provided by Google Inc. ('Google'). For this ad integration service, Google AdSense uses 'cookies', which are text files placed on your computer to help the website analyze how users use the site. Additionally, Google AdSense uses web beacons (invisible graphics). Based on the web beacons, information such as visitor traffic on websites can be evaluated. Cookies and web beacons are used to generate information about the use of our website, including your IP address. The delivery of advertising formats is then transmitted to a Google server in the USA and stored there, as with Google Analytics. The stored information may then be passed on by Google to their contractual partners. However, the information collected by Google about your IP address will not be merged with other data stored by you. If this collection of information based on your visit to our site is not in your interest, you can prevent the storage or installation of cookies by selecting the appropriate settings in your browser software. At the same time, we would like to inform you that in this case, you will not be able to use all the functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can find this information at: http://www.linkedin.com/legal/privacy-policy. Instagram: So-called social plug-ins from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"), are used on our website. The plug-ins are marked with an Instagram logo, for example in the form of an "Instagram camera". You can find an overview of the Instagram plug-ins and their appearance here: http://blog.instagram.com/post/36222022872/introducinginstagram-badges. When you call up a page of our website that contains such a plug-in, your browser establishes a direct connection to the servers of Instagram. The content of the plug-in is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the in-formation that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plug-ins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts. For the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and setting options for protecting your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/. If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram be-fore visiting our website. You can also completely prevent the loading of Instagram plug-ins with add-ons for your browser, e.g. with the script blocker "No Script" (http://noscript.net/). Facebook: Plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304,USA are integrated on our pages. You can recognize these by the Facebook logo or the "Like" button on our site. You can find an overview of possible Facebook plugins at the following link: http://developers.facebook.com/docs/plugins/. Due to these Facebook plugins (Like button), a direct connection is established between your browser and the Facebook server if you visit our pages. Through your visit, Facebook receives information that you have visited our pages with your IP address. If you click on the Facebook "Like" button on our pages while you are logged into your Facebook account, the content of our pages will be linked to your Facebook profile. Consequently, Facebook can associate your visit to our site with your user account. We, as the service provider, point out that we, as the website provider, have no knowledge of the content of the transmitted data or its use by Facebook. Therefore, we refer to the following link to obtain further information regarding Facebook's privacy policy: http://de-de.facebook.com/policy.php. If you do not want Facebook to associate your visit to our website with your Facebook user account, we ask you to log out of your Facebook user account when you visit our website. Pinterest: We use the pinterest.com service on our website. Pinterest.com is a service of Pinterest, Inc., 808Brannan St, San Francisco, CA 94103, USA. Through the integrated "Pin it" button on our site, Pinterest receives the information that you have accessed the corresponding page of our website. If you are logged in to Pinterest, Pinterest can assign this visit to our site to your Pinterest account and thus link the data. The data transmitted by clicking the "Pin it" button is stored by Pinterest. For more information on the purpose and scope of data collection, its processing and use, as well as your rights in this regard and setting options for protecting your privacy, please refer to the Pinterest privacy policy, which you can access at http://pinterest.com/about/privacy/. To prevent Pinterest from associating your visit to our website with your Pinterest account, you must log out of your Pinterest account before visiting our website. YouTube: Our Internet pages contain at least one plug-in from YouTube, which belongs to Google Inc. SanBruno, CA 94066 USA. As soon as you visit a page of our website that is equipped with a YouTube plugin, a connection to the YouTube servers is established. In the process, the YouTube server is informed which particular page of our website you have visited. If, on top of this, you are logged into your YouTube account, you would enable YouTube to assign your surfing behavior directly to your personal profile. You can negate this possibility of association if you log out of your account beforehand. For further information on the collection and use of your data by YouTube, please refer to the information on data protection at http://www.youtube.com/t/privacy.

13. Disclosure of data to third parties

We share your information with our partners (third parties) to provide you with the best possible service. When we collaborate with banks, the data transfer may reveal information about a potential banking relationship. Partner banks can also notify us to confirm the successful establishment of a new banking relationship.

You release the relevant bank(s) from the obligation to maintain bank-client confidentiality and data protection to this extent.

If we forward data to external service providers, technical and organizational measures are taken to ensure that the forwarding complies with legal data protection provisions.

If you voluntarily provide us with personal or company-related data, we will not use, process, or forward this data beyond the scope permitted by law or specified by you in a declaration of consent. Beyond that, we only pass on your data to external service providers if necessary for contract execution and if they have agreed to the corresponding confidentiality and due diligence provisions. Additionally, we only pass on your data if we are legally obliged to do so by official or court orders. This Data Privacy Policy does not form part of any contract with you. We may amend this privacy policy at any time. The version published on this website is the current version.