Privacy Policy
Last updated:
We attach great importance to handling your personal data transparently and in accordance with the applicable data protection regulations. Below, we inform you in detail about the processing of personal data when using our website in accordance with the Swiss Data Protection Act (FADP) and – insofar as applicable – the General Data Protection Regulation of the European Union (GDPR).
1. Controller
The controller responsible for the data processing described in this privacy policy is:
Arena Ventures AG
Alte Landstrasse 15
8706 Meilen, ZH
Switzerland
E-mail: info@arena-ventures.com
UID: CHE-195.831.649 MWST
Commercial Register: Commercial Register Office of the Canton of Zurich
Management: Barbara Fischer
Note on the Data Protection Officer
No Data Protection Officer (DPO) or data protection advisor has been appointed pursuant to Art. 10 FADP / Art. 37 GDPR, as the legal requirements for a mandatory appointment are not met. If you have any questions about data protection or wish to assert your data subject rights, please contact the controller named above directly.
2. Collected Data
We process personal data that we receive from you during your visit to our website and when you contact us directly or sign up for our newsletter.
2.1 When visiting the website (server log files)
When you visit our website, information is automatically sent to our website's server by the browser used on your end device. The following data is collected without your intervention and stored until automatic deletion:
IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer and the name of your access provider
2.2 When contacting us
If you contact us by e-mail or via a form on the website, the data you provide (in particular your e-mail address, name, phone number, and the content of the message) will be stored to answer your inquiry and process any follow-up questions.
2.3 When subscribing to the newsletter
If you sign up for our newsletter, we collect the data you enter (at least your e-mail address and optionally your name for a personal greeting) as well as your consent, the date and the IP address of the registration.
2.4 Through analysis tools, tag managers and cookies
By using cookies and comparable technologies, usage and interaction data (e.g. click behavior, duration of visit, device settings) are processed. Detailed information on this can be found in Sections 4 and 5.
3. Purpose of Data Processing
Your personal data is processed exclusively for the following purposes:
Provision and optimization of the website: Ensuring a smooth connection setup, a convenient use of our website, as well as guaranteeing system security and stability.
Contract initiation and customer service: Processing inquiries, communicating with interested parties, customers, and business partners.
Sending newsletters and marketing information: Sending information about our services, projects, and current offers (provided consent has been given).
Reach measurement and user analysis: Statistical evaluation of user behavior to design the website in line with demand and for continuous optimization of our online presence.
Legal obligations: Compliance with statutory retention periods and protection of our own legal claims.
Legal Basis for Processing
Insofar as the GDPR is applicable, we base the processing on the following legal grounds:
Art. 6 para. 1 lit. a GDPR: Consent for specific processing purposes (e.g. analysis cookies, newsletter delivery).
Art. 6 para. 1 lit. b GDPR: Performance of a contract or implementation of pre-contractual measures.
Art. 6 para. 1 lit. f GDPR: Safeguarding our overriding legitimate interests in the safe and efficient provision of our online service.
Insofar as the Swiss FADP is applicable, processing is carried out in accordance with the principles of Art. 6 FADP (lawfulness, good faith, proportionality, transparency, and purpose limitation).
4. Use of Framer (Hosting & Web-Builder)
Our website is created and hosted using the platform Framer (Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands).
When you visit our website, your data (in particular IP address, server log files, and technical connection information) are processed on the servers of Framer or their sub-processors. This ensures the technical functionality, performance, and security of our website.
Provider's privacy policy: Further information on data processing by Framer can be found in Framer's privacy policy at: https://www.framer.com/legal/privacy/
Legal basis / justification: The use of Framer is based on our overriding legitimate interest in a professional, secure, and reliable presentation of our company (Art. 6 para. 1 lit. f GDPR / Art. 6 FADP).
5. Analysis Tools, Tag Managers & Email Marketing
In order to understand user behavior on our website, optimize our services, and send newsletters, we use the following services.
5.1 Google Tag Manager
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) or for users outside the EEA Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
How it works: The Google Tag Manager is an auxiliary service and does not itself process personal data of users in terms of profiling. The service merely triggers other tags (such as Google Analytics or Hotjar), which in turn may collect data. Google Tag Manager does not access this data.
IP address and technical data: When Google Tag Manager is called up, your browser establishes a connection to Google's servers. Your IP address is collected by Google to provide the service and ensure the execution of the integrated scripts.
Order processing & third-country transfer: Insofar as data is transferred to the USA, Google relies on adequacy decisions (e.g. EU-U.S. Data Privacy Framework or Swiss-U.S. Data Privacy Framework) as well as Standard Contractual Clauses (SCC).
Google Privacy Policy: https://policies.google.com/privacy
5.2 Google Analytics
We use Google Analytics, a web analysis service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
How it works: Google Analytics uses cookies and similar technologies to analyze your use of the website. The information generated is usually transmitted to a Google server and stored there. We have activated IP anonymization, so your IP address is shortened before transmission.
Purpose: On behalf of Arena Ventures AG, Google uses this information to evaluate the use of the website, compile reports on website activity, and provide other services related to website usage.
Objection / Opt-Out: You can prevent the collection of the data generated by the cookie by installing the available browser plugin: https://tools.google.com/dlpage/gaoptout.
Google Privacy Policy: https://policies.google.com/privacy
5.3 Hotjar (Microsoft / Hotjar)
We use Hotjar, an analysis service from Hotjar Ltd. (Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta; associated with Microsoft / ContentSquare).
How it works: Hotjar helps us understand the user experience (e.g. duration of visit, clicks, navigation). Hotjar works with cookies to collect data such as anonymized IP addresses, screen size, device type, browser, and location (country only).
Pseudonymization: Hotjar stores information in a pseudonymized user profile. It is not merged with data to identify individual persons.
Objection / Opt-Out: You can object to the collection of data by Hotjar at: https://www.hotjar.com/legal/compliance/opt-out/
Hotjar Privacy Policy: https://www.hotjar.com/legal/policies/privacy/
5.4 MailerLite (Newsletter Dispatch)
For sending our email newsletter, we use the service MailerLite (MailerLite Limited, 38 Mount Street Upper, Dublin 2, D02 PR89, Ireland).
How it works & Data processing: When you sign up for our newsletter, the data you enter (email address, optional name) as well as the IP address and time of registration are stored on MailerLite's servers. MailerLite allows us to analyze interactions with the newsletters sent (e.g. open and click rates) to continuously improve our email communication.
Double Opt-In: Registration usually takes place using a double opt-in procedure, where you receive a confirmation email after registering to verify your address.
Revocation & Unsubscribing: You can revoke your consent to receive our newsletter at any time with effect for the future and unsubscribe from the newsletter. You will find a corresponding unsubscribe link at the end of each newsletter. Alternatively, you can communicate your revocation at any time by email to info@arena-ventures.com.
MailerLite Privacy Policy: Further information on data processing by MailerLite can be found at: https://www.mailerlite.com/legal/privacy-policy.
6. Rights of the Data Subjects
As a data subject affected by data processing, you have the following rights under the Swiss FADP and – if applicable – under the GDPR:
Right to information (Art. 25 FADP / Art. 15 GDPR): You have the right to request confirmation at any time as to whether personal data concerning you is being processed and to receive information about this data and the associated information.
Right to rectification (Art. 32 FADP / Art. 16 GDPR): You have the right to request the immediate correction of incorrect or the completion of your personal data stored by us.
Right to erasure / "Right to be forgotten" (Art. 32 FADP / Art. 17 GDPR): You have the right to request the erasure of your personal data, provided the legal requirements are met and no statutory retention obligations or overriding interests prevent this.
Right to restriction of processing (Art. 32 FADP / Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data, provided that the accuracy of the data is disputed by you or the processing is unlawful.
Right to data portability (Art. 28 FADP / Art. 20 GDPR): You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request its transmission to another controller.
Right to withdraw consent (Art. 6 para. 11 FADP / Art. 7 para. 3 GDPR): You have the right to withdraw consent once given for the processing of data at any time with effect for the future.
Right to object (Art. 21 GDPR): If the processing is based on legitimate interests, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
Right to lodge a complaint with a supervisory authority:
In Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Bern (https://www.edoeb.admin.ch).
In the EU / EEA: Competent data protection supervisory authority at your place of residence, workplace, or place of the alleged infringement.
To exercise your rights, an informal notification by email is sufficient to: info@arena-ventures.com.
