Privacy Policy

With this Privacy Policy, we, A-Block Technologies AG would like to inform you about how we process personal data within the scope of our respective business activities and inform you about your rights. We are aware of the importance of processing personal data for you as a data subject, and the protection of your privacy is of the utmost importance to us.

As an internationally operating law firm, respectively company, the EU General Data Protection Regulation (GDPR) is important to us in addition to the Swiss data protection regulations. We have aligned this data protection declaration to a uniform and stricter standard of the GDPR. This Privacy Notice must be read together with any other legal notices or terms and conditions provided or made available to you.

I. Name and address of the controller

A-Block Technologies AG is an independent controller, which decides on the purpose and means of processing personal data. If you have any questions regarding data protection, please do not hesitate to contact us:

II. Client relationship and contractual relationship with business partners

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

We primarily process personal data that we receive directly from our clients within the scope of our client relationships. It is also possible that we receive or collect data from business partners or other persons involved. Insofar as this is permitted and necessary, we also obtain data from publicly accessible sources (e.g. public registers, media, Internet) or receive such data from our clients and their employees, from authorities, (arbitration) courts and other third parties (e.g. counterparties, business partners and contractual partners of our clients).

In addition to the data that we receive directly from you, the categories of personal data that we receive from third parties include, but are not limited to, the following:

• Master data (e.g. names, addresses, functions, organizational affiliation, etc.)
• Contact data (email address, phone number, etc.)
• Content data (e.g. text and image files, videos, etc.)
• Usage data (e.g. access data)
• Meta/communication data (e.g. IP addresses)
• Information from public registers (debt collection registers, commercial registers, land registers)
• Information on compliance with legal requirements (e.g. combating money laundering and export restrictions)
• Information related to your professional functions and activities
• Information about you in correspondence and discussions with third parties
• Creditworthiness information (if we conduct business with you personally)
• Information from banks, insurance companies, distributors and other contractual partners from us on the use or provision of services by you (e.g. payments made/purchases made)
• Information from media and Internet about you (as far as this is indicated in the concrete case), as well as
• References for applications.

2. PURPOSES OF DATA PROCESSING AND LEGAL BASIS

We process the personal data collected in order to guarantee the performance of the relationship or for contract processing, invoicing and communication purposes. Furthermore, we process personal data, as far as permitted and necessary, also for the following purposes, in particular but not limited to those in which we (and also third parties) have a legitimate interest corresponding to the purpose:

• Measures for IT, building and plant security and protection of our employees and other persons and assets entrusted to us (e.g. access controls, visitor lists, network and mail scanners, telephone records);
• Any transactions under company law and the associated transfer of personal data as well as measures for business management and compliance with legal and regulatory obligations.
• Offer and further development of our offers and services
• Advertising and marketing (including the organisation of events), provided that you have not objected to the use of your data;
• Market and opinion research, media monitoring.

If you have given your consent to the processing of your personal data for certain purposes (e.g. to carry out a background check), we will process your personal data within the scope of and based on this consent, insofar as we have no other legal basis and we require such a basis. Any given consent can be revoked for the future at any time.

3. DURATION OF STORAGE

The personal data collected by us will only be stored for as long as it is necessary for the execution of the relationship (from the initiation to the termination of a contract) or the other purposes pursued with the processing and/or a legal obligation to store and document or a predominant private or public interest exists. As soon as the personal data collected by us are no longer required for the above-mentioned purposes, it will be deleted or anonymised.

III. Use of our website

A. PROVISION OF THE WEBSITE AND CREATION OF LOG FILES

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

• Information about the browser type and the version used
• The user's operating system
• The IP address of the user
• Date and time of access
• Websites from which the user's system accesses our website
• Page viewed on the website

The IP addresses are stored in the log files of our system. This does not apply to the other data which enable the assignment of the data to a user. These data are not stored together with other personal data of the user.

2. PURPOSES OF DATA PROCESSING AND LEGAL BASIS

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Our legitimate interest in data processing also lies in these purposes.

3. DURATION OF STORAGE

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the purpose of providing the website, this is the case when the respective session in question has ended.

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.

B. USE OF COOKIES

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

Our website uses cookies. Cookies are small text files that are automatically stored on the hard disk of your computer when you visit our website. The cookies do not pose any danger to the computer.

Technically necessary cookies increase the functionality of the website. Cookies that are not technically necessary increase the user-friendliness of the website.

Our cookies can be either session cookies (temporary cookies that identify you as a user and track your progress within our websites as long as your browser is open) or persistent cookies (cookies that allow our websites to "remember" who you are and what your preferences are within our websites and that remain on your computer or device even after you close your browser).

The user data collected in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data are not stored together with other personal data of the users.

2. PURPOSE OF DATA PROCESSING AND LEGAL BASIS

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized also after a page change.

We need cookies for the following applications:

• Adoption of language settings
• Transfer of filter settings (team, magazine articles, publications)

The user data collected by technically necessary cookies are not used to create user profiles.

Cookies that are not technically necessary are used for the purpose of improving the quality of our website and its contents. These cookies tell us how the website is used and enable us to continually optimize our services.

Our legitimate interest in the processing of personal data also lies in the aforementioned purposes.

3. DURATION OF STORAGE, POSSIBILITY OF OBJECTION AND WITHDRAWAL

The session cookies are deleted after a short time, but at the latest when you close your browser. With persistent cookies, the website remembers your preferences and settings so that they are available the next time you visit the website. Permanent cookies are deleted after a certain period of time.

As a user, you have full control over the use of cookies. You can prevent the use of cookies by clicking on the "refuse" button in the cookie banner. Furthermore, you can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that all functions of the website can no longer be used to their full extent.

C. NEWSLETTER

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

You can subscribe to newsletters on our website. We send our existing and potential clients information on blockchain, crypto and compliance issues at irregular intervals.

Your consent to the processing of the data will be obtained before or during registration and reference will be made to this data protection declaration. The data will be used exclusively for the dispatch of the newsletter.

2. PURPOSE OF DATA PROCESSING AND LEGAL BASIS

The collection of your e-mail address serves to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.

We process your personal data collected during registration for the newsletter based on your consent.

3. DURATION OF STORAGE

The data is deleted as soon as it is no longer required for the purpose of its collection. The user's e-mail address will therefore be stored as long as the newsletter subscription is active. If a client/business relationship exists between you and us pursuant to Section II, the provisions set out in Section II.4 shall apply.

The other personal data collected during the registration process will generally be deleted after a period of seven days.

4. POSSIBILITY OF OPPOSITION AND WITHDRAWAL

The subscription of the newsletter can be cancelled by the affected user at any time. For this purpose, there is a corresponding link in every newsletter. This also enables the withdrawal of the consent to the storage of personal data collected during the registration process.

D. CONTACT FORM AND E-MAIL CONTACT

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

A contact form is available on our website, which can be used for electronic contact. If a user makes use of this possibility, the data entered in the input mask will be transmitted to us and stored. These data are:

• First name and surname
• Company (voluntary)
• E-mail address (optional)
• Background and information about your request (voluntary)

The following data will also be stored at the time the message is sent:

• IP address
• Date and time of the sending process
• Page on which the form was filled out

Before sending the contact form we will refer to this privacy policy.

Alternatively, it is possible to contact us via the e-mail address provided. In this case the personal data transmitted by you by e-mail will be stored.

2. PURPOSES OF DATA PROCESSING AND LEGAL BASES

The processing of the personal data from the input mask or from the e-mail you have sent to us serves us solely to process the establishment of contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. This is also our legitimate interest in the processing of the data.

If the purpose of establishing contact is to conclude a contract, data processing is also necessary for the purpose of implementing pre-contractual measures as well as for the fulfilment and execution of the contract.

3. DURATION OF STORAGE

In order to ensure compliance with our contractual and legal obligations (in particular with regard to storage and documentation obligations as an accredited lawyer), we require access to all user communications. Consequently, the personal data from the contact form or the personal data sent by e-mail will be deleted at the earliest after 10 years.

The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

4. POSSIBILITY OF OBJECTION AND WITHDRAWAL

If data in the contact form is not clearly marked as voluntary and the processing is not carried out on the basis of a consent, we cannot provide our intended service if the consent for data processing is refused.

E. DATA TRANSFER TO THIRD PARTIES AND TRANSBORDER DATA FLOWS

1. IT PROVIDER

We work with third parties who provide services to us and may share your personal information with them, for example with IT providers who may have limited access to your personal information in software or system support.

2. USE OF MARKETING SERVICES

We may use Marketing Services from a variety of marketing service providers, on our website for our online marketing activities.

So-called web beacons are used and cookies are also set, which are stored on your computer and enable us to analyse your use of the website. The Marketing Service Providers evaluate the information collected (e.g. IP address, geographical location, type of browser, duration of visit and pages viewed) on our behalf in order to generate reports on the visit and pages viewed.

If newsletters are subscribed to as described in Section C and other documents are obtained, the Service Provider can also link a user's visits to our website to personal data (above all name/email address) on the basis of a consent given, thus recording personal data and informing users individually and purposefully about preferred subject areas.

We use all information collected exclusively to optimise our branding. This is also our legitimate interest in data processing.

If a collection by a Marketing Service Provider is generally not desired, the storage of cookies can be prevented at any time by appropriate browser settings (see above under point B.3).

3. WEB ANALYSIS BY GOOGLE ANALYTICS

3.1 SCOPE OF THE PROCESSING OF PERSONAL DATA

On our website we use Google Analytics. Google Ireland (based in Ireland) is our provider of “Google Analytics” and acts as our processor. Google Ireland relies on Google LLC (based in the US) as a processor for its services (both “Google”). Google uses performance cookies (see above) to track the behavior of visitors to our website (duration, frequency of pages viewed, geographic origin of access, etc.) and compiles reports for us on the use of our website on this basis. We have configured the service so that the IP addresses of visitors are shortened by Google in Europe before being forwarded to the US and thus cannot be traced. We have turned off the "Data Forwarding" and "Signals" settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google can draw conclusions about the identity of visitors from this data for its own purposes, create personal profiles and link this data to the Google accounts of these persons. If you consent to the use of Google Analytics, you explicitly agree to such processing, which also includes the transfer of personal data (in particular usage data for the website and app, device information and individual IDs) to the US and other countries not offering adequate data protection from a Swiss/EU perspective. Information on the data protection of Google Analytics can be found here and if you have a Google account, you can find further details on processing by Google here.

3.2 PURPOSES OF DATA PROCESSING AND LEGAL BASIS

The processing of the data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. In these purposes, our legitimate interest lies in the processing of the data. By anonymizing the IP address, the interest of users in the protection of their personal data is sufficiently taken into account.

3.3 DURATION OF THE STORAGE AS WELL AS OBJECTION AND WITHDRAWAL POSSIBILITY

The data is deleted as soon as it is no longer required for our recording purposes. As a user, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that all functions of the website can no longer be used to their full extent.

Information from the third party provider Google:

Address: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Terms of use: http://www.google.com/analytics/terms/de.html.

Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

4. DATA PROTECTION FOR PROTECTION FOR APPLICATIONS

The data controller shall collect and process the personal data of applicants for the purpose of the processing of the applications. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail or by means of a web form on the website to the controller.

5. DATA PROTECTION PROVISIONS ABOUT THE APPLICATION AND USE BY FACEBOOK

On this website, the controller has integrated components of the enterprise Facebook. Facebook is a social network.

A social network is a place for social meetings on the Internet, an online community, which usually allows users to communicate with each other and interact in a virtual space. A social network may serve as a platform for the exchange of opinions and experiences, or enable the Internet community to provide personal or business-related information. Facebook allows social network users to include the creation of private profiles, upload photos, and network through friend requests.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

With each call-up to one of the individual pages of this Internet website, which is operated by the controller and into which a Facebook component (Facebook plug-ins) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download display of the corresponding Facebook component from Facebook through the Facebook component. An overview of all the Facebook Plug-ins may be accessed under https://developers.facebook.com/docs/plugins/. During the course of this technical procedure, Facebook is made aware of what specific sub-site of our website was visited by the data subject.

If the data subject is logged in at the same time on Facebook, Facebook detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-site of our Internet page was visited by the data subject. This information is collected through the Facebook component and associated with the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated into our website, e.g. the “Like” button, or if the data subject submits a comment, then Facebook matches this information with the personal Facebook user account of the data subject and stores the personal data.

Facebook always receives, through the Facebook component, information about a visit to our website by the data subject, whenever the data subject is logged in at the same time on Facebook during the time of the call-up to our website. This occurs regardless of whether the data subject clicks on the Facebook component or not. If such a transmission of information to Facebook is not desirable for the data subject, then he or she may prevent this by logging off from their Facebook account before a call-up to our website is made.

The data protection guideline published by Facebook, which is available at https://facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook. These applications may be used by the data subject to eliminate a data transmission to Facebook.

6. DATA PROTECTION PROVISIONS ABOUT THE APPLICATION AND USE OF LinkedIn

The controller has integrated components of the LinkedIn Corporation on this website. LinkedIn is a web-based social network that enables users with existing business contacts to connect and to make new business contacts. Over 400 million registered people in more than 200 countries use LinkedIn. Thus, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, UNITED STATES. For privacy matters outside of the UNITED STATES LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed under https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-page of our Internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.

LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in on LinkedIn at the time of the call-up to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such a transmission of information to LinkedIn is not desirable for the data subject, then he or she may prevent this by logging off from their LinkedIn account before a call-up to our website is made.

LinkedIn provides under https://www.linkedin.com/psettings/guest-controls the possibility to unsubscribe from e-mail messages, SMS messages and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. The setting of such cookies may be denied under https://www.linkedin.com/legal/cookie-policy. The applicable privacy policy for LinkedIn is available under https://www.linkedin.com/legal/privacy-policy. The LinkedIn Cookie Policy is available under https://www.linkedin.com/legal/cookie-policy.

7. DATA PROTECTION PROVISIONS ABOUT THE APPLICATION AND USE OF X (Twitter)

On this website, the controller has integrated components of Twitter. Twitter is a multilingual, publicly-accessible microblogging service on which users may publish and spread so-called ‘tweets,’ e.g. short messages, which are limited to 280 characters. These short messages are available for everyone, including those who are not logged on to Twitter. The tweets are also displayed to so-called followers of the respective user. Followers are other Twitter users who follow a user’s tweets. Furthermore, Twitter allows you to address a wide audience via hashtags, links or retweets.

The operating company of Twitter is Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a Twitter component (Twitter button) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding Twitter component of Twitter. Further information about the Twitter buttons is available under https://about.twitter.com/de/resources/buttons. During the course of this technical procedure, Twitter gains knowledge of what specific sub-page of our website was visited by the data subject. The purpose of the integration of the Twitter component is a retransmission of the contents of this website to allow our users to introduce this web page to the digital world and increase our visitor numbers.

If the data subject is logged in at the same time on Twitter, Twitter detects with every call-up to our website by the data subject and for the entire duration of their stay on our Internet site which specific sub-page of our Internet page was visited by the data subject. This information is collected through the Twitter component and associated with the respective Twitter account of the data subject. If the data subject clicks on one of the Twitter buttons integrated on our website, then Twitter assigns this information to the personal Twitter user account of the data subject and stores the personal data.

Twitter receives information via the Twitter component that the data subject has visited our website, provided that the data subject is logged in on Twitter at the time of the call-up to our website. This occurs regardless of whether the person clicks on the Twitter component or not. If such a transmission of information to Twitter is not desirable for the data subject, then he or she may prevent this by logging off from their Twitter account before a call-up to our website is made.

The applicable data protection provisions of Twitter may be accessed under https://twitter.com/privacy?lang=en.

8. DATA PROTECTION PROVISIONS ABOUT THE APPLICATION AND USE OF YouTube

On this website, the controller has integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. YouTube allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.

The operating company of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.

YouTube’s data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

IV. Rights of the data subject

You have the right to access, correction, limitation of data processing, deletion of personal data, objection, revocation of the declaration of consent under data protection law for the future and data transferability within the framework of the data protection law applicable to you and to the extent provided for therein.

In addition, you have the right to assert your claims in court or to file a complaint with the responsible data protection authority. Switzerland's competent data protection authority is the Federal Data Protection and Information Commissioner.

RIGHT TO WITHDRAW AND OBJECT

If we process data on the basis of your consent, you have the right to withdraw your consent with effect for the future at any time.

In addition, you have the right to object to the processing of your data if we process it based on our legitimate interests or for direct marketing purposes.

Please note that even if you have decided to withdraw your consent, we may continue to process your personal data to the extent required or permitted by law.

V. Amendments to this privacy statement

We reserve the right to change this Privacy Policy at any time without notice. We will notify you of any changes by posting the updated Privacy Policy on our website. Any changes we make will be effective from the date we post them on our website.