Data Protection of Kurkuma Communication GmbH
1. Responsible Entity and Contact
2. Collection and Processing of Personal Data
The processing of personal data occurs in the following categories:
- Customer data from customers for whom we provide or have provided services.
- Personal data that we indirectly receive from our customers during service provision.
- Digital visitor data when clicking on our website.
- Customer address data when using our newsletter.
- Customer data regarding personal profile/interests due to participation in an event organized by us.
- Various data when we communicate in any way (locally, temporally, factually different).
- Data in other contractual relationships, e.g., as a supplier, service provider, or consultant.
- Personal data in applications.
- Data when we are legally obliged to do so.
- Data that we use in connection with data protection or compliance with laws.
3. Categories of Personal Data
The following categories of personal data are collected by us, depending on the purpose:
- Contact information (e.g., name, first name, address, phone number, email)
- Personal customer information (e.g., date of birth, nationality, marital status, profession, title, job title, passport/ID number, AHV number)
- Data about your creditworthiness and corporate data as well as financial information (bank accounts)
- Data related to specific orders/contracts
- Website data (e.g., IP address, device information (UDI), browser information, website usage (analysis and use of plugins, etc.))
- Data from applications (e.g., resume, work certificates)
- Advertising and marketing information as well as personal interests (e.g., newsletter registration, interest in specific topics, specializations)
- Security and network data (e.g., visitor lists, access controls, network and mail scanners, phone call lists)
4. For what purposes do we process the data?
For our customers' personal data, this includes the following information:
- Contact information (e.g., name, first name, address, phone number, email, other contact information)
- Personal information (e.g., date of birth, nationality, marital status, profession, title, job title, passport/ID number, AHV number, family relationships, etc.)
- Data about your creditworthiness and your entries in various registers or possibly sanction lists, as well as data in specialized databases and from digitally publicly accessible sources
- Financial information (e.g., data on bank accounts, investments, or holdings)
- Business data, depending on the order/contract
- Particularly sensitive personal data
We process this personal data for the described purposes based on the following legal grounds:
- Conclusion or execution of a contract with the affected person or in favor of the affected person, including contract initiation and possible enforcement (e.g., delivery contract, sales contract, service contract)
- Fulfillment of a legal obligation (e.g., if we have to collect and/or disclose data due to a legal obligation)
- Protection of legitimate interests (e.g., for administrative purposes, to improve our quality, ensure security, manage risks, enforce our rights, defend against claims, or examine potential conflicts of interest)
- Consent (e.g., to send you marketing information)
4.2. Indirect Data Processing from Service Provision
For the personal data of persons related to our customers, this includes the following information:
- Contact information (e.g., name, first name, address, phone number, email, other contact information, marketing data)
- Personal information (e.g., date of birth, nationality, marital status, profession, title, job title, passport/ID number, AHV number, family relationships, etc.)
- Financial information (e.g., data on bank accounts, investments, or holdings)
- Contract or business data, depending on the order or contract
- Particularly sensitive personal data
We process this personal data for the described purposes based on the following legal grounds:
- Conclusion or execution of a contract with the affected person or in favor of the affected person (e.g., when we fulfill our contractual obligations)
- Fulfillment of a legal obligation (e.g., when we fulfill our duties as an audit firm or are obliged to disclose information)
- Protection of legitimate interests, in particular our interest in providing optimal performance to our customers.
This includes the following information:
- Contact information (e.g., name, first name, address, phone number, email)
- Other information that you transmit to us via the website
- Automatically transmitted technical information to us or our service providers, information about user behavior or website settings (e.g., IP address, UDI, device type, browser, number of clicks on the page, opening the newsletter, clicking on links, etc.)
We process this personal data for the described purposes based on the following legal grounds:
- Protection of legitimate interests (e.g., for administrative purposes, to improve our quality, analyze data, or promote our services)
- Consent (e.g., for the use of cookies or the newsletter)
This includes the following information:
- Contact information (e.g., name, first name, address, phone number, email)
- Personal information (e.g., profession, function, title, employer Kurkuma Communication GmbH, eating habits, special interests & inclinations, feedback)
- Images or videos
- Payment information (e.g., bank account)
We process this personal data for the described purposes based on the following legal grounds:
- Fulfillment of a contractual obligation with the affected person or in favor of the affected person, including contract initiation and possible enforcement (enabling participation in the event)
- Protection of legitimate interests (e.g., conducting events, disseminating information about our event, providing services, efficient organization)
- Consent (e.g., to send you marketing information or create image material)
4.6. Data from Communication (Phone, Visits, etc.)
We process the following information in particular:
- Contact information (e.g., name, first name, address, phone number, email)
- Communication metadata (e.g., IP address, duration of communication, communication channel)
- Recordings of conversations, e.g., during video conferences
- Other information that the user uploads, provides, or creates during the use of the video conferencing service, as well as metadata used for maintaining the provided service. Additional information about the processing of personal data by "Zoom" or "Microsoft Teams" can be found in their privacy policies.
- Personal information (e.g., profession, function, title, employer Kurkuma Communication GmbH)
- Time and reason for the visit
We process this personal data for the described purposes based on the following legal grounds:
- Fulfillment of a contractual obligation with the affected person or in favor of the affected person, including contract initiation and possible enforcement (provision of a service)
- Protection of legitimate interests (e.g., security, traceability, and management and administration of customer relationships)
We process the following information in particular:
- Contact information (e.g., name, first name, address, phone number, email)
- Personal information (e.g., profession, function, title, employer Kurkuma Communication GmbH)
- Application documents (e.g., cover letter, certificates, diplomas, resume)
- Evaluation information (e.g., assessment by personnel consultants, reference information, assessments)
We process this personal data for the described purposes based on the following legal grounds:
4.8. Suppliers, Service Providers, Other Contractual Partners
We process the following information in particular:
- Contact information (e.g., name, first name, address, phone number, email)
- Personal information (e.g., profession, function, title, employer Kurkuma Communication GmbH)
- Financial information (e.g., bank account data)
We process this personal data for the described purposes based on the following legal grounds:
- Conclusion or execution of a contract with the affected person or in favor of the affected person, including contract initiation and possible enforcement
- Protection of legitimate interests (e.g., avoiding conflicts of interest, protecting the company, enforcing legal claims)
6. Web and Newsletter Analysis
7. Data Transfer and Data Transmission
The following categories of recipients may receive personal data from us:
- Other service providers (e.g., IT service providers, hosting providers, suppliers, consultants, trustees, lawyers, insurance companies)
- Third parties within the framework of our legal or contractual obligations, authorities, government institutions, courts
8. Duration of Storage of Personal Data
We take appropriate technical and organizational security measures to protect your personal data:
- From unauthorized access (confidentiality)
- To ensure it is available when needed (availability)
- From misuse and alterations (integrity)
- To ensure it is processed in a traceable manner (traceability)
10. Obligation to Provide Personal Data
In connection with our processing of personal data, you have the following rights:
- Right to information about the personal data stored about you, the purpose of processing, the origin, and the recipients or categories of recipients to whom personal data is disclosed.
- Right to correction if your data is not correct or incomplete.
- Right to restrict the processing of your personal data.
- Right to request the deletion of processed personal data.
- Right to data portability.
- Right to object to data processing or to revoke consent to the processing of personal data at any time without giving reasons.
- Right to lodge a complaint with a competent supervisory authority, if legally provided.
12. Amendment of the Privacy Policy
We expressly reserve the right to change this privacy policy at any time.
