Privacy Policy

Thank you for visiting our website.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit our site. Our data protection practices are in accordance with the legal regulations of the Swiss Federal Act on Data Protection (FADP) and the EU’s General Data Protection Regulation (GDPR). The following data protection declaration serves to fulfil the information obligations arising from the FADP and the GDPR. These can be found, for example, in Art. 8 ff. FADP as well as Art. 13 ff. of the GDPR.

The owner or controller within the meaning of Art. 3 letter i FADP or Art. 4 No. 7 GDPR is the person who alone or jointly with others decides on the purposes and means of the processing of personal data. The controller pursuant to Art. 4 No. 7 GDPR is also the recipient of the personal data within the meaning of Art. 4 No. 9 GDPR. Any third party recipient is identified separately.

With regard to our website, the owner or responsible person is:

CryptoMountain Rocks
c/o B.ACADEMY GmbH
Baarerstrasse 10
6300 Zug

info@cryptomountain.rocks
0041 41 486 07 07

Your data subject rights

You can exercise the following rights at any time using the contact details provided by our data protection officer:

Information about your data stored by us and its processing,
Correction of inaccurate personal data,
Deletion of your data stored by us,
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations,
object to the processing of your data by us and
Data portability, provided that you have consented to the data processing or have concluded a contract with us.

If you have given us consent, you can revoke this at any time with effect for the future.

You may at any time submit a complaint to a supervisory authority, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the responsible body.

‍

Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the device (e.g. computer, mobile phone, tablet, etc.) used to access it.

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user’s system accessed our website (referrer tracking);
(8) Message whether the retrieval was successful;
(9) Amount of data transmitted

This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, so that individual site visitors cannot be identified.

Legal basis for the processing of personal data

Personal data is processed in accordance with the principle of legality (Art. 4 FADP) and the principle of good faith (Art. 2 CC) and Art. 6 para. 1 lit. f GDPR (legitimate interest).

Purpose of data processing

The temporary (automated) storage of data is necessary for the course of a website visit in order to enable delivery of the website. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat abuse and eliminate malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimise the website and to generally ensure the security of our information technology systems.

Duration of storage

The deletion of the aforementioned technical data takes place as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Possibility of objection and deletion

You can object to the processing at any time in accordance with Article 21 of the GDPR and request deletion of the data in accordance with Article 17 of the GDPR. You can find out which rights you have and how to exercise them in the lower section of this privacy policy.

‍

Special functions of the website

Our site offers you various functions, during the use of which personal data is collected, processed and stored by us. We explain below what happens to this data:

Contact form(s)

What personal data is collected and to what extent is it processed?

The data you have entered in our contact forms, which you have entered in the input mask of the contact form.

Legal basis for the processing of personal data

Personal data is processed in accordance with the principle of lawfulness (Art. 4 FADP) and the principle of good faith (Art. 2 CC) as well as Art. 6 para. 1 lit. a GDPR (consent through unambiguous confirmatory action or conduct).

Purpose of data processing

We will only use the data collected via our contact form or contact forms for processing the specific contact request received through the contact form. Please note that in order to fulfil your contact request, we may also send you e-mails to the address you have provided. The purpose of this is so that you can receive confirmation from us that your enquiry has been correctly forwarded to us. However, the sending of this confirmation e-mail is not obligatory for us and is only for your information.

Duration of storage

After processing your request, the collected data will be deleted immediately, unless there are legal retention periods.

Possibility of objection and deletion

Necessity of providing personal data

The use of the contact forms is on a voluntary basis. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our website. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the required information on the contact form, you will either not be able to send the enquiry or we will not be able to process your enquiry due to a lack of information.

‍

Disclosure of information to third parties

Personal data is processed in accordance with the principle of legality (Art. 4 FADP) and the principle of good faith (Art. 2 CC).

The disclosure of information to third parties depends on the scope of the activities or offers of our website or our business model described below.

As a matter of principle, we only keep your information for as long as necessary and treat it confidentially. Exceptions to this are the transfer of personal data to debt collection service providers, to public bodies and authorities and to private individuals, who have a right to it due to legal regulations, court decisions or official orders as well as the transfer to authorities for the purpose of initiating legal proceedings or for law enforcement purposes if our legally protected rights are attacked.

‍

Use of Google Analytics

Nature and purpose of the processing:

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these web pages, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the internet, other related services shall then be provided.

Legal basis for the processing of personal data:

The legal basis for data processing is your consent in our information banner regarding the use of cookies and web tracking (consent through clear confirming action or behaviour) in accordance with Art. 13 Para. 1 FADP and Art. 6 Para. 1 lit. a GDPR.

Recipient:

The recipient of the data is Google as an order processor. For this purpose, we have concluded the corresponding order processing agreement with Google.

Storage period:

The data is deleted as soon as it is no longer required for our recording purposes.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield. We have also concluded standard data protection clauses with Google for the use of Google Analytics.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Withdrawal of consent:

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to disable Google Analytics.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. This will install an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

Profiling:

With the help of the tracking tool Google Analytics, the behavior of visitors to the website can be evaluated and interests can be analyzed. For this purpose, we create a pseudonymous user profile.

‍

Use of Google Maps

Nature and purpose of the processing:

On this website we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.

You can find more information about data processing by Google in the Google privacy policy. There you can also change your personal privacy settings in the Privacy Center.

Detailed instructions on how to manage your own data in connection with Google products can be found here.

Legal basis:

The legal basis for the transmission of personal data is your consent pursuant to Art. 4 para. 5 FADP or Art. 13 para. 2 FADP and pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.

Recipient:

By visiting the website, Google receives information that you have called up the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.

If you do not want the assignment in your profile at Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Storage period:

We do not collect any personal data through the integration of Google Maps.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website or only to a limited extent.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

‍

Use of Google Tag Manager

What personal data is collected and to what extent is it processed?

On our site, we use the Google Tag Manager service of the company Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: http://www.google.com/ (hereinafter: Google Tag Manager). Google Tag Manager offers a technical platform for executing and bundling other web services and web tracking programmes by means of so-called “tags”. In this context, Google Tag Manager stores cookies on your computer and analyses your surfing behaviour (so-called “tracking”), insofar as web tracking tools are executed using Google Tag Manager. This data sent by individual tags integrated in Google Tag Manager is merged, stored and processed by Google Tag Manager under a uniform user interface. All integrated “tags” are listed separately again in this data protection declaration. You can find more information on the data protection of the tools integrated in Google Tag Manager in the respective section of this data protection declaration. When you use our website with the integration of Google Tag Manager tags activated, data, such as your IP address and your user activities in particular, are transmitted to servers of Google Ireland Limited. With regard to the web services integrated by means of Google Tag Manager, the regulations in the respective section of this data protection declaration apply. The tracking tools used in Google Tag Manager ensure that the IP address is anonymised by Google Tag Manager before transmission by means of IP anonymisation of the source code. In doing so, Google Tag Manager is only enabled to record IP addresses anonymously (so-called IP masking).

Legal basis:

Purpose of data processing:

On our behalf, Google will use the information obtained by means of the Google Tag Manager to evaluate your visit to this website, to compile reports on website activity and to provide us with other services related to website and internet usage.

Duration of storage:

Google will store the data relevant to the function of Google Tag Manager for as long as is necessary to fulfil the booked web service. The data collection and storage is anonymised. If there is a reference to a person, the data will be deleted immediately, insofar as this is not subject to any legal obligations to retain data. In any case, the data will be deleted after expiry of the retention period.

Possibility of objection and deletion:

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser or activating the “Do Not Track” setting of your browser. In addition, you can prevent the collection of the data generated by the Google cookie and related to your use of the website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=de. Google’s security and privacy policy can be found at https://policies.google.com/privacy.

‍

Use of Google Fonts

We use on our site the service Google Fonts of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: http://www.google.com/. According to the assessment of Swiss authorities, the processing takes place in safe third countries. You can find Switzerland’s list of states at the following link: https://www.edoeb.admin.ch/edoeb/en/home/data-protection/handel-und-wirtschaft/transborder-data-flows.html. The transfer of personal data also takes place to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection of the GDPR applies to the transfer.

We use the Google Fonts service to be able to integrate attractive fonts on our website in order to be able to show you our website in a visually better version. The service may also be used on our website if other Google services are reloaded on our website that require Google Fonts fonts to run. This is the case, for example, if our website uses Google services that require Google Fonts to run.

For the processing itself, the service or we collect the following data: Data on fonts, IP address of the page visitor, statistics on the use of fonts and other data from Google services related to our website.

If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transmitted to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. when using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Google Cloud and Google Ads in accordance with the Google privacy policy. You can access the certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

You can revoke your consent at any time. You will find more information on revoking your consent either with the consent itself or at the end of this privacy policy.

For further information on the handling of transmitted data, please refer to the provider’s privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

‍

Use of YouTube

Nature and purpose of processing

On some of our websites, we embed YouTube videos and Facebook/Instagram linking. The operators of the corresponding plugins are YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter “YouTube”) and Facebook Inc, Menlo Park, California. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account first.

If a YouTube video is started, the provider uses cookies that collect information about user behaviour.

Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider’s data protection declarations, where you will also find further information on your rights in this regard and setting options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

Legal basis

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent.

Recipient

Calling up YouTube automatically triggers a connection to Google.

Storage period and revocation of consent

Anyone who has deactivated the storage of cookies for the Google ad programme will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at “YouTube” can be found in the provider’s data protection declaration at:

https://www.google.de/intl/de/policies/privacy/

Third country transfer

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision mandatory or required

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

‍

Integration of external web services and processing of data outside the EU

On our website, we use active content from external providers, so-called web services. By calling up our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside of Switzerland and the EU. You can prevent this by installing an appropriate browser plug-in or deactivating the execution of scripts in your browser. This may result in functional restrictions on Internet pages that you visit.

‍

Use of CloudFlare

We use on our site the service CloudFlare of the company Cloudflare, Inc., 101 Townsend St, 94107 San Francisco, United States, e-mail: support@cloudflare.com, website: https://www.cloudflare.com/de-de/. Your personal data will be transferred to so-called unsafe third countries. In doing so, we have obligated the partners involved with suitable bases to comply with data protection laws applicable in Switzerland (usually EU standard contractual clauses) in accordance with Art. 6 para. 2 let. a FADP. You have given your consent to this or there is a direct connection between the state and the conclusion of the contract. The transfer of personal data also takes place to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection of the GDPR applies to the transfer.

The legal basis for the transmission of personal data is our legitimate interest in processing pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.

Cloudflare is a so-called content delivery network that provides security functions in addition to splitting the website across several servers. Cloudflare also acts as a reverse proxy for our website.

You can access the certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnZKAA0.

With regard to the processing, you have the right of objection listed in Art. 21 GDPR. You can find more information at the end of this privacy policy.

For further information on the handling of transmitted data, please refer to the provider’s privacy policy at https://www.cloudflare.com/privacypolicy/.

‍

Use of Hotjar

We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback.

Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

For further details, please see the ‘about Hotjar’ section of Hotjar’s support site: https://help.hotjar.com/hc/en-us/categories/115001323967-About-Hotjar

‍

Use of Vimeo

We use on our site the service Vimeo of the company Vimeo, Inc., 555 West 18th Street, 10011 New York, United States, e-mail: Privacy@vimeo.com, website: http://www.vimeo.com/. Your personal data will be transferred to so-called unsafe third countries. In doing so, we have obligated the partners involved with suitable bases to comply with data protection laws applicable in Switzerland (usually EU standard contractual clauses) in accordance with Art. 6 para. 2 let. a FADP. You have given your consent to this or there is a direct connection between the state and the conclusion of the contract. From the EU’s perspective, the data processing takes place in a third country for which there is no adequacy decision by the EU Commission. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.

Videos from the Vimeo platform are integrated on our website via the Vimeo service.

You can revoke your consent at any time. You will find more information on revoking your consent either with the consent itself or at the end of this privacy policy.

For further information on the handling of transmitted data, please refer to the provider’s privacy policy at https://vimeo.com/privacy.

The provider also offers an opt-out option at https://vimeo.com/privacy.

‍

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

‍

Right to data portability

Pursuant to Article 20 of the GDPR, you have a right to the transfer of personal data relating to you. We will provide the data in a structured, common and machine-readable format. The data can be sent either to you or to a person responsible named by you.

We will provide you with the following data upon request:

Data collected on the basis of consent (Art. 13 para. 1 FADP as well as Art. 6 para. 1 let. a GDPR);
Data that we have received from you in the context of existing contracts (Art. 13 para. 2 let. a FADP as well as Art. 6 para. 1 let. b GDPR and Art. 9 para. 2 let. a GDPR);
Data that has been processed as part of an automated procedure.

We will transfer the personal data directly to a responsible person of your choice as far as this is technically feasible. Please note that we are not permitted to transfer data that interferes with the overriding interests of third parties, or only to a limited extent, in accordance with Article 9 (1) b of the FADP and Article 20 (4) of the GDPR.

‍

Change to our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

‍Questions for the data protection officer

If you have any questions regarding data protection, please e-mail us: info@cryptomountain.rocks

CRYPTO MOUNTAIN

c/o B.ACADEMY GmbH
Baarerstrasse 10
6300 Zug

info@cryptomountain.rocks
+41 41 486 07 07