Last update: 28.08.2023

The Pri­va­cy State­ment describes how and why I col­lect, process, and use per­son­al data. The respon­si­ble han­dling of data has always been a sig­nif­i­cant con­cern for me. I con­tin­u­ous­ly make adjust­ments to enhance the pro­tec­tion of my cus­tomers‘ per­son­al data. Safe­guard­ing your per­son­al data is of great impor­tance to me.

 

Data I Collect:

— Gen­er­al Per­son­al Data:

I process your gen­er­al per­son­al data, which includes any infor­ma­tion relat­ed to an iden­ti­fi­able nat­ur­al per­son. A nat­ur­al per­son is con­sid­ered iden­ti­fi­able if the avail­able infor­ma­tion allows con­clu­sions to be drawn about their identity.

Exam­ple: Your name, IP address, and home address are con­sid­ered per­son­al data.

— Pro­vid­ed Data:

You often pro­vide me with your per­son­al data your­self. When­ev­er you enter and sub­mit your per­son­al data to me, it is con­sid­ered pro­vid­ed data. The trans­mis­sion of data to me is gen­er­al­ly vol­un­tary, but in some cas­es, it may be nec­es­sary to access my services.

Exam­ple: You enter your data in a con­tact form or sign up for a newsletter.

— Col­lect­ed Data:

When you use my ser­vices, I may col­lect some of your data with­out your active involve­ment. This data usu­al­ly includes infor­ma­tion about your device and user behavior.

Exam­ple: I col­lect data about the oper­at­ing sys­tem of the device you used to access my website.

— Prod­uct Development:

I strive to improve my offer­ings con­tin­u­ous­ly. For this pur­pose, I use your per­son­al data for the devel­op­ment and enhance­ment of my prod­ucts and services.

Exam­ple: I col­lect data about vis­i­tor behav­ior on the web­site to con­stant­ly improve user-friendliness.

— Data Sharing:

I may share your per­son­al data with com­pa­nies that have the auton­o­my to decide how they use the data. This is often done to com­ply with legal require­ments, trans­fer an open claim to a debt col­lec­tion agency, or detect fraud­u­lent activities.

Exam­ple: A legal require­ment oblig­ates me to share your data with an authority.

— World­wide Data Processing:

I col­lab­o­rate with providers from around the world to process your per­son­al data. This enables me to ben­e­fit from glob­al offer­ings and access the best and most reli­able ser­vices. How­ev­er, the coun­try to which the data is export­ed may not have the same data pro­tec­tion stan­dard as Switzerland.

Exam­ple: I use the ser­vices of a cloud provider like Google, which is based in the USA.

 

1. What Do I Do?

Joel Bur­ri — Brand­ing, Design & Illus­tra­tion locat­ed at Hohlstrasse 440A in 8048 Zurich oper­ates the web­site joelburri.ch (here­inafter referred to as “I” or “me”). On this web­site, you can learn about my stu­dio, use my online ser­vices, and get in touch with me. Safe­guard­ing your per­son­al data is of great impor­tance to me. In this Pri­va­cy State­ment, I inform you trans­par­ent­ly and com­pre­hen­si­bly about the data I col­lect through my web­site and how I han­dle it.

 

2. I inform you about:

• The data col­lect­ed on joelburri.ch
• Under which con­di­tions I process your data and for what purpose
• How long I retain your data
• When shar­ing data with third par­ties is permissible
• How I process your data (indi­vid­ual data pro­cess­ing operations)
• When and how you can object to data processing
• Your rights and how to exer­cise them

 

3. Def­i­n­i­tions:

— 3.1 What Are Per­son­al Data?

Per­son­al data includes any infor­ma­tion relat­ing to a spe­cif­ic or iden­ti­fi­able nat­ur­al per­son. This includes, for exam­ple, name, address, date of birth, email address, or phone num­ber. Data about per­son­al pref­er­ences, such as hob­bies or mem­ber­ships, also fall under per­son­al data.

— 3.2 What Are Par­tic­u­lar­ly Sen­si­tive Per­son­al Data?

Data on reli­gious, ide­o­log­i­cal, polit­i­cal, or trade union views or activ­i­ties; data on health, and, where applic­a­ble, infor­ma­tion on admin­is­tra­tive or crim­i­nal pros­e­cu­tions and sanc­tions, as well as data on social assis­tance mea­sures, are con­sid­ered par­tic­u­lar­ly sen­si­tive per­son­al data. If nec­es­sary and appro­pri­ate, I may col­lect and process par­tic­u­lar­ly sen­si­tive per­son­al data. In such cas­es, their pro­cess­ing is sub­ject to stricter confidentiality.

— 3.3 What Is the Pro­cess­ing of Per­son­al Data?

Pro­cess­ing means any han­dling of per­son­al data, irre­spec­tive of the means and pro­ce­dures used, in par­tic­u­lar the col­lec­tion, stor­age, reten­tion, use, mod­i­fi­ca­tion, dis­clo­sure, archiv­ing, dele­tion, or destruc­tion of data.

— 3.4 What Is the Dis­clo­sure of Per­son­al Data?

This refers to the trans­mis­sion or mak­ing acces­si­ble of per­son­al data, for exam­ple, pub­lish­ing or dis­clos­ing it to a third party.

 

4. How Can You Con­tact Me?

If you have any ques­tions or con­cerns regard­ing the pro­tec­tion of your data by me, you can always con­tact me via email at . The respon­si­ble par­ty for the data pro­cess­ing car­ried out through this web­site is:

Joel Yan­nic Burri
Hohlstrasse 440A
8048 Zurich

 

5. Will My Pri­va­cy State­ment Always Remain the Same?

I may change this Pri­va­cy State­ment at any time. The changes will be pub­lished on joelburri.ch, and you will not be sep­a­rate­ly informed.

 

6. Gen­er­al Principles:

— 6.1 What Data Do I Col­lect from You, and Who Pro­vides Me with This Data?

Pri­mar­i­ly, I process per­son­al data that you pro­vide to me or that I col­lect while oper­at­ing my web­site. In some cas­es, I may also receive per­son­al data about you from third par­ties. The cat­e­gories may include:

• Per­son­al mas­ter data (name, address, date of birth, etc.)
• Con­tact data (mobile num­ber, email address, etc.)
• Finan­cial data (e.g., account information)
• Online iden­ti­fiers (e.g., cook­ie iden­ti­fiers, IP addresses)
• Loca­tion and traf­fic data
• Audio and visu­al recordings
• Par­tic­u­lar­ly sen­si­tive data (e.g., bio­met­ric data or health-relat­ed information)

— 6.2 Under What Con­di­tions Do I Process Your Data?

I process your data in good faith and for the pur­pos­es defined in this Pri­va­cy State­ment. I ensure trans­par­ent and pro­por­tion­ate data pro­cess­ing. If, excep­tion­al­ly, I can­not adhere to these prin­ci­ples, data pro­cess­ing may still be law­ful if there is a legal basis. Such legal basis may include:

• Your con­sent
• The per­for­mance of a con­tract or pre-con­trac­tu­al measures
• My legit­i­mate inter­ests, pro­vid­ed that your inter­ests do not out­weigh them

— 6.3 How Can You Revoke Your Consent?

If you have giv­en con­sent for the pro­cess­ing of your per­son­al data for spe­cif­ic pur­pos­es, I will process your data based on that con­sent, unless anoth­er legal basis applies. You can revoke your con­sent at any time by send­ing an email to the address spec­i­fied in the imprint. Revok­ing your con­sent will not affect any data pro­cess­ing that has already tak­en place.

— 6.4 In Which Cas­es Can I Share Your Data with Third Parties?

— Gen­er­al Principle

I may be required to use the ser­vices of third par­ties or affil­i­at­ed com­pa­nies and have them process your data. I ensure, by con­tract, that these third par­ties and affil­i­at­ed com­pa­nies com­ply with data pro­tec­tion require­ments. Addi­tion­al­ly, I may be oblig­ed to dis­close your data to author­i­ties. I will only share your per­son­al data if:

• You have con­sent­ed to it
• It is nec­es­sary for con­tract per­for­mance or pre-con­trac­tu­al mea­sures and the enforce­ment of my rights
• There is a legal oblig­a­tion to do so
• I have a legit­i­mate inter­est, pro­vid­ed your oppos­ing inter­ests do not out­weigh mine
• Inter­na­tion­al Data Transfer

In the course of data pro­cess­ing, your per­son­al data may be trans­ferred to com­pa­nies abroad for pro­cess­ing pur­pos­es. These com­pa­nies are sub­ject to the same data pro­tec­tion oblig­a­tions as I am. The trans­fer may take place world­wide. If the lev­el of data pro­tec­tion in the des­ti­na­tion coun­try does not match that of the EEA area, I will con­duct a risk assess­ment before­hand and ensure, by con­tract, that the same lev­el of pro­tec­tion is guar­an­teed as in the EEA area (e.g., by using the EU Commission’s stan­dard con­trac­tu­al claus­es or oth­er legal­ly man­dat­ed mea­sures). If my risk assess­ment is neg­a­tive, I will imple­ment addi­tion­al tech­ni­cal mea­sures to pro­tect your data. You can access the EU Commission’s stan­dard con­trac­tu­al claus­es here.

— 6.5 How Long Do I Retain Your Data?

I only store per­son­al data as long as nec­es­sary to ful­fill the spe­cif­ic pur­pos­es for which the data was col­lect­ed. Data stored dur­ing your vis­it to my web­site will be retained for twelve months. An excep­tion applies to analy­sis and track­ing data, which may be retained for a longer peri­od. Con­trac­tu­al data will be stored for a longer peri­od due to legal require­ments. For instance, I must retain busi­ness com­mu­ni­ca­tion, con­clud­ed con­tracts, and book­ing receipts for up to 10 years. Once such data is no longer need­ed to pro­vide the ser­vices, it will be blocked and used only for invoic­ing and tax purposes.

— 6.6 How Do I Pro­tect Your Data?

I will secure­ly store your data and take all rea­son­able mea­sures to pro­tect it from loss, unau­tho­rized access, mis­use, or alter­ation. My con­trac­tu­al part­ners with access to your data are oblig­at­ed to com­ply with data pro­tec­tion reg­u­la­tions. In some cas­es, I may need to for­ward your inquiries to affil­i­at­ed com­pa­nies. In such cas­es, your data will also be treat­ed con­fi­den­tial­ly. With­in my web­site, I use the SSL (Secure Sock­et Lay­er) pro­to­col in con­nec­tion with the high­est encryp­tion lev­el sup­port­ed by your browser.

— 6.7 What Rights Do You Have?

— 6.7.1 Right to Information:

You have the right to request infor­ma­tion about the data I store about you at any time. Please send your request togeth­er with proof of iden­ti­ty to . You also have the right to receive your data in a com­mon file for­mat if I process your data auto­mat­i­cal­ly, and you have giv­en con­sent for such pro­cess­ing, or if you have pro­vid­ed the data in con­nec­tion with the con­clu­sion or exe­cu­tion of a con­tract. I may restrict or deny the pro­vi­sion of infor­ma­tion or data if it con­flicts with my legal oblig­a­tions, legit­i­mate inter­ests, or the inter­ests of third par­ties. The pro­cess­ing of your request is sub­ject to the statu­to­ry pro­cess­ing peri­od of 30 days. How­ev­er, I may extend this peri­od due to a high vol­ume of requests, legal or tech­ni­cal rea­sons, or if I require fur­ther infor­ma­tion from you. You will be informed about any exten­sion in writ­ing in a time­ly manner.

— 6.7.2 Dele­tion and Correction:

You have the right to request the dele­tion or cor­rec­tion of your data at any time. I may reject the request whether legal reg­u­la­tions require me to retain or not alter the data, or if there is a per­mis­si­ble rea­son that con­tra­dicts your request. Please note that exer­cis­ing your rights may con­flict with con­trac­tu­al agree­ments and may have cor­re­spond­ing effects on con­tract ful­fill­ment (e.g., ear­ly con­tract ter­mi­na­tion or cost implications).

— 6.7.3 Legal Remedies:

If you are affect­ed by the pro­cess­ing of per­son­al data, you have the right to enforce your rights in court or file a com­plaint with the com­pe­tent super­vi­so­ry author­i­ty. The com­pe­tent super­vi­so­ry author­i­ty in Switzer­land is the Fed­er­al Data Pro­tec­tion and Pub­lic Access Com­mis­sion­er.

 

7. Indi­vid­ual Data Pro­cess­ing Oper­a­tions and Their Purpose:

— 7.1 Pro­vi­sion of the Web­site and Cre­ation of Log Files:

— What Infor­ma­tion Do I Receive, and How Do I Use It?

When you vis­it joelburri.ch, cer­tain data is auto­mat­i­cal­ly stored on my servers or servers of ser­vices and prod­ucts that I use and/or have installed for the pur­pos­es of sys­tem admin­is­tra­tion, sta­tis­tics, back­up, or track­ing. This data includes:

• The name of your inter­net ser­vice provider
• Your IP address (under cer­tain circumstances)
• The ver­sion of your brows­er software
• The oper­at­ing sys­tem of the device used to access the URL
• The date and time of access
• The web­site from which you accessed the URL
• The search terms you used to find the URL
• Why Am I Allowed to Process This Data?

I pri­mar­i­ly use the per­son­al data col­lect­ed by me to enter into and ful­fill con­tracts with my cus­tomers and busi­ness part­ners, espe­cial­ly with­in the scope of design projects from my cus­tomers and the pro­cure­ment of prod­ucts and ser­vices from my sup­pli­ers. Addi­tion­al­ly, I use this data to com­ply with my legal oblig­a­tions both domes­ti­cal­ly and inter­na­tion­al­ly. If you are act­ing on behalf of such a cus­tomer or busi­ness part­ner, your per­son­al data might also be affect­ed in this capacity.

Fur­ther­more, I process per­son­al data from you and oth­er indi­vid­u­als, as far as per­mit­ted and as seems appro­pri­ate to me, par­tic­u­lar­ly for the fol­low­ing pur­pos­es, in which I (and some­times third par­ties) have a legit­i­mate inter­est cor­re­spond­ing to the purpose:

• Offer­ing and improv­ing my ser­vices, offer­ings, web­site, and oth­er plat­forms where I am present
• Com­mu­ni­ca­tion with third par­ties and han­dling their inquiries (e.g., job appli­ca­tions, media inquiries)
• Exam­i­na­tion and opti­miza­tion of pro­ce­dures for needs analy­sis in order to direct­ly address cus­tomers, as well as the col­lec­tion of per­son­al data from pub­licly acces­si­ble sources for cus­tomer acquisition
• Adver­tis­ing and mar­ket­ing (includ­ing event orga­ni­za­tion), unless you have object­ed to the use of your data (if I send you adver­tise­ments as an exist­ing cus­tomer, you can object at any time, and I will then add you to a sup­pres­sion list against fur­ther adver­tis­ing mailings)
• Mar­ket and opin­ion research, media monitoring
• Asser­tion of legal claims and defense in con­nec­tion with legal dis­putes and offi­cial proceedings
• Pre­ven­tion and inves­ti­ga­tion of crim­i­nal offens­es and oth­er mis­con­duct (e.g., con­duct­ing inter­nal inves­ti­ga­tions, data analy­sis for fraud prevention)
• Ensur­ing the oper­a­tion of my busi­ness, espe­cial­ly IT, my web­sites, apps, and oth­er platforms

— Why Am I Allowed to Process This Data?

This data can­not be attrib­uted to any spe­cif­ic indi­vid­ual, and it is not com­bined with oth­er data sources. The stor­age of log files is nec­es­sary to ensure the func­tion­al­i­ty of the web­site and the secu­ri­ty of my infor­ma­tion tech­nol­o­gy sys­tems. This is my legit­i­mate interest.

— How Can You Pre­vent Data Collection?

The data is stored only for the peri­od nec­es­sary to achieve the pur­pose of its col­lec­tion. Accord­ing­ly, the data is delet­ed after the end of each ses­sion. The stor­age of log files is essen­tial for the oper­a­tion of the web­site; there­fore, you can­not object to this.

— 7.2 Track­ing Pixels:

I may use track­ing pix­els on my web­site. Track­ing pix­els are also known as web bea­cons. Track­ing pix­els, includ­ing those from third par­ties whose ser­vices I use, are small, usu­al­ly invis­i­ble images that are auto­mat­i­cal­ly retrieved when you vis­it my web­site. Track­ing pix­els can col­lect the same infor­ma­tion as serv­er log files. I use them for the same pur­pos­es as log files, and you can­not pre­vent data collection.

— 7.3 Evaluations:

Some of your per­son­al data is auto­mat­i­cal­ly processed for the pur­pose of eval­u­at­ing cer­tain per­son­al aspects. Such eval­u­a­tions are pri­mar­i­ly used to pro­vide you with tar­get­ed infor­ma­tion and advice on cer­tain ser­vices or prod­ucts and to con­duct appro­pri­ate adver­tis­ing mea­sures, includ­ing mar­ket and opin­ion research.

— 7.4 Contact:

— Email:

— What Infor­ma­tion Do I Receive, and How Do I Use It?

You have the option to con­tact me via email. When you con­tact me via email, the fol­low­ing data is processed:

• Email address
• Con­tent, sub­ject, and date of your email
• Con­tact infor­ma­tion pro­vid­ed by you (e.g., name, pos­si­bly phone num­ber, address)
• Why Am I Allowed to Process This Data?

Your infor­ma­tion is stored to process the inquiry and to fol­low up on any sub­se­quent ques­tions. The legal basis for this pro­cess­ing includes pre-con­trac­tu­al mea­sures and my legit­i­mate inter­ests in address­ing your inquiry.

— Secu­ri­ty Notice:

I inform you that emails can be read or altered dur­ing trans­mis­sion by unau­tho­rized third par­ties. Emails can be reject­ed by the spam fil­ter if they are iden­ti­fied as spam due to cer­tain characteristics.

— 7.5 Suc­cess and Reach Measurement:

— How Does Suc­cess and Reach Mea­sure­ment Work?

My noti­fi­ca­tions and mes­sages may con­tain web links or count­ing pix­els that track whether a spe­cif­ic mes­sage was opened and which web links were clicked. Such web links and count­ing pix­els may also cap­ture per­son­al data regard­ing the use of noti­fi­ca­tions and messages.

— Why Am I Allowed to Process This Data?

I need this sta­tis­ti­cal data col­lec­tion for the suc­cess and reach mea­sure­ment to offer noti­fi­ca­tions and mes­sages effec­tive­ly, user-friend­ly, secure­ly, and reli­ably based on the needs and read­ing habits of the recip­i­ents, includ­ing mar­ket and opin­ion research.

— 7.6 Cookies:

— How Do Cook­ies Work?

My web­site uses cook­ies. Cook­ies are data records that are stored on your device’s oper­at­ing sys­tem through the brows­er when you access my web­site. Cook­ies do not cause any dam­age to your com­put­er and do not con­tain viruses.

— What Infor­ma­tion Do I Receive, and How Do I Use It?

Most of the cook­ies I use are so-called “ses­sion cook­ies”. They are auto­mat­i­cal­ly delet­ed after your vis­it. Oth­er cook­ies remain stored on your device until you delete them. These cook­ies enable me to rec­og­nize your brows­er on your next vis­it, allow­ing me to save cer­tain set­tings (such as lan­guage pref­er­ences or loca­tion infor­ma­tion) so that you do not have to enter them again when you revis­it the website.

— Why Am I Allowed to Use Cookies?

I use cook­ies to make my web­site more user-friend­ly, effec­tive, and secure. The use of cook­ies and the pro­cess­ing of data relat­ed to it are based on my legit­i­mate inter­ests in achiev­ing the men­tioned purposes.

— How Can You Pre­vent Data Col­lec­tion via Cookies?

The cook­ies are stored on your com­put­er, and you have full con­trol over their use. You can delete them com­plete­ly or deac­ti­vate or restrict their trans­mis­sion by chang­ing the set­tings in your brows­er. If you deac­ti­vate cook­ies for my web­site, some func­tions of the web­site may not be ful­ly available.

— 7.7 Google Web Fonts:

— How Does Google Web Fonts Work?

I use web fonts on my web­site to dis­play fonts uni­form­ly, which are pro­vid­ed, among oth­ers, by Google. When you access one of my pages, your brows­er loads the required web fonts into your brows­er cache to dis­play texts and fonts correctly.

— What Infor­ma­tion Do You Share with Me, and How Is It Used?

Your brows­er estab­lish­es a con­nec­tion to Google’s servers, allow­ing Google to learn that my web­site was accessed via your IP address. If your brows­er does not sup­port web fonts, a default font will be used on your computer.

— Why Am I Allowed to Use Google Web Fonts?

The use of Google Web Fonts is in the inter­est of a con­sis­tent and appeal­ing pre­sen­ta­tion of my online offers. For more infor­ma­tion about Google Web Fonts, see the Google Web Fonts FAQs.

 

8. What Else Needs To Be Considered:

I do not assume that the EU Gen­er­al Data Pro­tec­tion Reg­u­la­tion (“GDPR”) is applic­a­ble in my case. How­ev­er, if this were to excep­tion­al­ly apply to cer­tain data pro­cess­ing activ­i­ties, then sole­ly for the pur­pos­es of the GDPR and the data pro­cess­ing activ­i­ties falling under it, the fol­low­ing Sec­tion 8 also applies.

I base the pro­cess­ing of your per­son­al data par­tic­u­lar­ly on the grounds that:

• It is nec­es­sary as described in Sec­tion 6 and 7 for the ini­ti­a­tion and ful­fill­ment of con­tracts, as well as their admin­is­tra­tion and enforce­ment (Arti­cle 6(1)(b) of the GDPR).
• It is nec­es­sary for the legit­i­mate inter­ests pur­sued by me or by third par­ties, as described in Sec­tions 6 and 7, par­tic­u­lar­ly for com­mu­ni­ca­tion with you or third par­ties, oper­at­ing my web­site, improv­ing my elec­tron­ic offer­ings, reg­is­ter­ing for spe­cif­ic offers and ser­vices, secu­ri­ty pur­pos­es, com­pli­ance with Swiss law and inter­nal reg­u­la­tions for risk man­age­ment and cor­po­rate gov­er­nance, and for oth­er pur­pos­es such as train­ing and edu­ca­tion, admin­is­tra­tion, evi­dence and qual­i­ty assur­ance, orga­ni­za­tion, exe­cu­tion, and fol­low-up of events, and safe­guard­ing fur­ther legit­i­mate inter­ests as out­lined in Sec­tions 6/7 (Arti­cle 6(1)(f) of the GDPR).
• It is legal­ly required or per­mit­ted based on my man­date or posi­tion under the law of the EEA or a mem­ber state (Arti­cle 6(1)© of the GDPR), or it is nec­es­sary to pro­tect your vital inter­ests or those of oth­er nat­ur­al per­sons (Arti­cle 6(1)(d) of the GDPR).
• You have sep­a­rate­ly con­sent­ed to the pro­cess­ing, for exam­ple, through an appro­pri­ate dec­la­ra­tion on my web­site (Arti­cle 6(1)(a) and Arti­cle 9(2)(a) of the GDPR).