DATA PROTECTION
Data protection declaration of MARKETINGLINK GmbH / SWISS CLASSIC WORLD Version published: January 31, 2025
In this privacy policy, we, MARKETINGLINK GmbH, Lucerne (hereinafter referred to as "we" or "us"), explain how we collect and process personal data. This is not an exhaustive description; other privacy policies, general terms and conditions, participation terms, or similar documents may govern specific matters.
This policy applies to all projects of MARKETINGLINK GmbH, particularly for SWISS CLASSIC WORLD, SWISS CLASSIC AWARD, SWISS CLASSIC WORLD RALLYE, SWISS CLASSIC TRADE, SWISS CLASSIC EVENT, as well as driving events such as Harder than Steel, Forever Young, and others.
Personal data includes all information that relates to an identified or identifiable individual.
If you provide us with personal data of other individuals (e.g., co-exhibitors, co-participants, acquaintances, or family members), please ensure that these individuals are aware of this privacy policy. Only share their personal data with us if you are authorized to do so and if the data is accurate.
This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation ("GDPR", specifically Art. 6(1)(f) GDPR), the Swiss Data Protection Act ("DSG"), and the revised Swiss Data Protection Act ("revDSG"). However, the applicability of these laws depends on the specific case.
1. Responsibility
The responsible party for the data processing described here is MARKETINGLINK GmbH, c/o Verkehrshaus der Schweiz, Lidostrasse 5, 6006 Lucerne. If you have any data protection-related concerns, you can contact us at the following address:
MARKETINGLINK GmbH
c/o Verkehrshaus der Schweiz
Lidostrasse 5
6006 Lucerne
Email: info@swissclassicworld.ch
If the GDPR applies, the legal basis for data processing is Art. 6(1)(f) GDPR.
2. Collection and Processing of Personal Data
We primarily process personal data that we receive in connection with our projects and engagements, business relationships with our customers, and other business partners, or that we collect from users while operating our websites, apps, and other applications. Where permitted and necessary for our business activities and contract execution, we also obtain certain data from publicly accessible sources (e.g., debt collection registers, land registers, commercial registers, press, internet) or receive such data from other companies in which we participate, our projects, authorities, and other third parties (e.g., credit agencies, address providers).
In addition to the data you provide directly to us, the categories of personal data we receive from third parties about you include:
-
Information from public registers
-
Details obtained in connection with official and judicial proceedings
-
Information related to your professional roles and activities (e.g., so we can conclude and execute transactions with your employer with your help)
-
Information about you from correspondence and meetings with third parties
-
Credit information (if we conduct business with you personally)
-
Information provided to us by people from your environment (family, advisors, legal representatives, etc.) to enable us to conclude or execute contracts with or involving you (e.g., references, delivery addresses, powers of attorney, information to comply with legal requirements such as anti-money laundering regulations and export restrictions)
-
Information from banks, insurance companies, distributors, and other contractual partners regarding services used or provided by you (e.g., payments made, purchases made)
-
Information about you from media and the internet (if relevant in a specific case, e.g., during an application process, press review, marketing/sales activities)
-
Your addresses, interests, and other sociodemographic data (for marketing purposes)
-
Data related to the use of our website (e.g., IP address, MAC address of your smartphone or computer, device and settings information, cookies, date and time of visit, accessed pages and content, functions used, referring website, location information)
3. Purposes of Data Processing and Legal Bases
We primarily use the personal data we collect to conclude and execute our contracts with customers and business partners, particularly in connection with the projects and events mentioned above, the trade of products with customers, services from our suppliers and subcontractors, creating and sending marketing services, and to comply with our legal obligations in Switzerland and abroad. If you act on behalf of such a customer or business partner, your personal data may naturally also be affected in this capacity.
In addition, we process personal data about you and other individuals—where permitted and deemed appropriate—for the following purposes, in which we (and sometimes third parties) have a legitimate interest consistent with the purpose:
-
Offering and further development of our services, websites, apps, and other platforms where we are present.
-
Communication with third parties and processing their inquiries (e.g., applications, media inquiries).
-
Reviewing and optimizing procedures for needs analysis to enable direct customer targeting and collecting personal data from publicly accessible sources for customer acquisition.
-
Advertising and marketing (including organizing events), provided you have not objected to the use of your data. If you are an existing customer, you can object to receiving advertising at any time, and we will add you to a do-not-contact list.
-
Market and opinion research, media monitoring.
-
Assertion of legal claims and defense in connection with legal disputes and administrative proceedings.
-
Prevention and investigation of crimes and other misconduct (e.g., conducting internal investigations, data analyses for fraud prevention).
-
Ensuring the operation of our business, particularly IT systems, our websites, apps, and other platforms.
-
Video surveillance to protect property rights and other measures to ensure IT, building, and facility security, as well as the protection of our employees, other individuals, and assets owned or entrusted to us (e.g., access control, visitor lists, network and email scanners, telephone recordings).
-
Purchase and sale of business units, companies, or parts of companies, as well as other corporate transactions, including the transfer of personal data, and measures for business management and compliance with legal, regulatory, and internal requirements.
Suppose you have given us consent to process your personal data for specific purposes (e.g., when subscribing to newsletters, purchasing products or services, or registering for an event). In that case, we process your personal data based on and within the scope of that consent, provided we do not have another legal basis and require such consent. Consent can be revoked at any time, but this will not affect data processing that has already taken place.
4. Data Disclosure and Transfer Abroad
As part of our business activities and the purposes outlined in section 3, we disclose data to third parties where permitted and deemed appropriate, either because they process the data on our behalf or because they wish to use it for their own purposes. This primarily involves the following entities:
-
Service providers (within the MARKETINGLINK GmbH network and externally, such as banks, insurance companies), including processors (e.g., IT providers);
-
Dealers, suppliers, subcontractors, subsidiaries, and other business partners;
-
Partners in projects (e.g., SWISS CLASSIC WORLD RALLYE, SWISS CLASSIC TRADE, and other projects, particularly those of MARKETINGLINK GmbH);
-
Customers;
-
Domestic and foreign authorities, offices, or courts;
-
Media;
-
The public, including visitors to websites and social media;
-
Competitors, industry organizations, associations, organizations, and other committees;
-
Purchasers or potential purchasers of business units or companies;
-
Other parties in potential or ongoing legal proceedings;
all are receivers.
These recipients are partly located domestically, but they could be anywhere in the world. You should particularly expect the transfer of your data to any countries where MARKETINGLINK GmbH obtains services and products or is represented by other offices, as well as to other countries in Europe and the USA, where our service providers are located (e.g., Microsoft, Mailchimp, Google, Amazon).
If a recipient is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with applicable data protection regulations (for this, we use the revised Standard Contractual Clauses of the European Commission, which can be accessed here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), unless they are already subject to a legally recognized framework ensuring data protection and we cannot rely on an exemption provision. An exemption may apply, for example, in legal proceedings abroad, in cases of overriding public interest, or when contract execution requires such disclosure, if you have consented, or if the data is made publicly available by you and you have not objected to its processing.
5. Duration of Retention of Personal Data
We process and store your personal data for as long as necessary to fulfil our contractual and legal obligations or other purposes pursued by the processing. This means, for example, for the duration of the entire business relationship (from initiation, processing, to the termination of a contract) and beyond, in accordance with legal retention and documentation requirements. It is possible that personal data may be retained for the period during which claims can be made against our company and to the extent we are otherwise legally obligated or legitimate business interests require it (e.g., for proof and documentation purposes). Once your personal data is no longer required for the above-mentioned purposes, it will generally be deleted or anonymized as far as possible. For operational data (e.g., system logs, logs), the retention periods are generally shorter, typically twelve months or less.
6. Data security
We take appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse, such as IT and network security solutions, access controls and restrictions, encryption of data storage and transmissions, and monitoring.
7. Obligation to Provide Personal Data
As part of our business relationship, you must provide the personal data necessary for initiating and conducting the business relationship and fulfilling the associated contractual obligations (in general, there is no legal obligation for you to provide us with data). Without this data, we will generally be unable to conclude or execute a contract with you (or the entity or person you represent). The website also cannot be used if certain information required to ensure data traffic (such as the IP address) is not disclosed.
8. Cookies / Tracking and Other Technologies in Connection with the Use of Our Website
We typically use "cookies" and similar technologies on our websites and apps that can identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you use when you visit our website or install our app. When you visit this website again or use our app, we can recognize you, even if we do not know who you are. In addition to cookies that are used only during a session and deleted after your visit to the website ("session cookies"), cookies can also be used to store user settings and other information over a certain period (e.g., two years) ("persistent cookies"). However, you can set your browser to reject cookies, store them only for a session, or delete them prematurely. Most browsers are preset to accept cookies. We use persistent cookies to save user settings (e.g., language, auto-login, shopping cart), to better understand how you use our offers and content, and to show you tailored offers and advertisements (this can also happen on websites of other companies; however, they will not know who you are unless we do, as they only see that the same user who visited our website is on their website). Some cookies are set by us, and others by partners with whom we collaborate. If you block cookies, some functionalities (e.g., language selection, shopping cart, order processes) may no longer work.
In our newsletters and other marketing emails, we sometimes include both visible and invisible image elements, which, when retrieved from our servers, allow us to determine whether and when you have opened the email. This helps us measure and better understand how you use our offers, so we can tailor them to you. You can block this in your email program; most programs are preset to do so.
By using our websites, apps, and consenting to receive newsletters and other marketing emails, you agree to the use of these techniques. If you do not wish this, you must adjust the settings in your browser or email program, or uninstall the app if it cannot be adjusted through settings.
8.1 Integration of Third-Party Services and Content
We use third-party content or service offerings in our online services based on our legitimate interests (i.e., interest in analyzing, optimizing, and operating our online services economically within the meaning of Art. 6(1)(f) GDPR) to integrate their content and services, such as videos or fonts (hereinafter referred to collectively as "Content").
This always requires that the third-party providers of this content perceive the user's IP address, as they would not be able to send the content to their browser without the IP address. The IP address is therefore necessary for displaying this content. We strive to only use content where the respective providers use the IP address solely for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. Through these "pixel tags," information such as visitor traffic on the pages of this website can be evaluated. The pseudonymized information may also be stored in cookies on the user's device and may contain technical information about the browser and operating system, referring websites, visit time, and other details about the use of our online services, and may also be combined with information from other sources.
8.2 Contact
When contacting us (e.g., via contact form, email, phone, or social media), the user's information will be processed to handle and manage the inquiry in accordance with Art. 6(1)(b) (within the scope of contractual/pre-contractual relationships), Art. 6(1)(f) (other inquiries) GDPR. The user's information may be stored in a Customer Relationship Management System ("CRM System") or a similar inquiry management system.
We delete the inquiries once they are no longer necessary. We review the necessity every two years; in addition, statutory archiving obligations apply.
8.3 Services of Google (Analytics, AdSense, ReCaptcha, Fonts)
We use Google Analytics on our website to measure and evaluate the usage of the website (legitimate interest according to Art. 6(1)(f) GDPR). For this purpose, permanent cookies are also used, which are set by the service provider.
We use Google AdSense to display non-personalized ads on our website, and we receive compensation for their display as well as other uses (legitimate interest according to Art. 6(1)(f) GDPR). For this purpose, usage data (e.g., shortened IP addresses) is processed.
We use Google Fonts to improve our search engine ranking, to use fonts cost-effectively, and to save space on our servers (legitimate interest according to Art. 6(1)(f) GDPR).
These are services provided by Google Ireland (headquartered in Ireland). Google Ireland relies on Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043 (headquartered in the USA) as the data processor. Google LLC is certified under the Data Privacy Framework, offering a guarantee to comply with European data protection standards (https://www.dataprivacyframework.gov/list). More information about data usage by Google can be found at https://support.google.com/analytics/answer/6004245?hl=en.
The service is configured so that the IP addresses of visitors are truncated by Google in Europe before being transferred to the USA, ensuring they cannot be traced back. We have disabled the "Data Sharing" and "Signals" settings. While we assume that the information we share with Google does not constitute personal data for Google, it is possible that Google may draw conclusions about the identity of visitors from this data, create personal profiles, and link these data to the Google accounts of these individuals.
8.4 Booking.com-Partnerprogram
We use the Booking.com partner program to place ads on our website and earn advertising reimbursement through an affiliate system (legitimate interest according to Art. 6(1)(f) GDPR). For this purpose, Booking.com uses cookies to track the source of bookings.
Booking.com is owned by Booking B.V., located at Oosterdokskade 163, 1011 DL, Amsterdam, Netherlands. Therefore, the data processing by Booking B.V. is subject to the GDPR. The privacy policy of Booking.com can be found at https://www.booking.com/content/privacy.de.html?label=gog235jc-1DCBQoggJCBWxlZ2FsSAdYA2gsiAEBmAEHuAEXyAEM2AED6AEB-AECiAIBqAIDuALxy429BsACAdICJGViZGY4OTBhLTFjNzctNGM5My04NjQyLWZiMjhlNjUzY2JkM9gCBOACAQ&sid=a00288e3ef470866d382aa80bc1898ad&aid=356980.
8.5 Whatsapp
We use WhatsApp as an information channel for individuals who have joined the WhatsApp group (legitimate interest according to Art. 6(1)(f) GDPR).
This service is provided by WhatsApp Ireland Limited, which is owned by WhatsApp LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (a subsidiary of Meta Platforms Inc.). WhatsApp LLC is certified under the Data Privacy Framework and thereby guarantees compliance with the European data protection level (https://www.dataprivacyframework.gov/list). Further information on data usage by WhatsApp LLC can be found at https://www.whatsapp.com/legal/privacy-policy-eea.
By using WhatsApp, you agree to their privacy terms.
8.6 Facebook Pixel, Custom Audiences and Facebook-Conversion
With Facebook Pixel, we can analyze and optimize our online offering. Furthermore, it is used to display advertisements to our target audience, thus making our marketing services efficient and effective (legitimate interest according to Art. 6 para. 1 lit. f GDPR).
This is a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Meta Platforms Ireland Limited is owned by Meta Platforms, Inc., 1601 Willow Rd, Menlo Park, CA 94025, USA. Meta Platforms Inc. is certified under the Data Privacy Framework and thus guarantees compliance with European data protection standards (https://www.dataprivacyframework.gov/list). For more information on data usage by Meta Platforms Inc., visit https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0.
8.7 Zoho
We use Zoho's CRM and email sending system to manage our customer relationships and to inform our prospects and customers easily and accurately (legitimate interest according to Art. 6 para. 1 lit. f GDPR).
Zoho is a service provided by Zoho Technologies, 4141 Hacienda Drive, Pleasanton, California 94588, USA, which has a branch in the Netherlands: Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands. The European data centers are located in the Netherlands; however, the transmission of data to other countries worldwide cannot be ruled out. In doing so, Zoho uses, among other things, standard contractual clauses based on the GDPR. For more information, please visit https://www.zoho.com/de/privacy.html.
8.8 Online presence in social media
We maintain an online presence on social networks and platforms to communicate with customers, prospects, and users active there and inform them about our services. When accessing these networks and platforms, the terms of service and data processing policies of their respective operators apply.
Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within the social networks and platforms, for example, by posting content on our online presence or sending us messages.
8.8.1 Social Media Plugins
We also use so-called plugins from social networks like WhatsApp, Facebook, YouTube, TikTok, LinkedIn, or Instagram on our websites. This is usually indicated to you by corresponding icons. We have configured these elements so that they are deactivated by default. If you activate them (by clicking), the operators of the respective social networks can register that you are on our website, where you are, and can use this information for their purposes. The processing of your personal data then takes place under the responsibility of this operator according to their privacy policy. We do not receive any information about you from them.
9. Rights of the Data Subject
You have the right to access, correct, delete, restrict the processing of your data, and to object to our data processing, especially for direct marketing purposes, profiling for direct advertising, and other legitimate interests in processing, as well as the right to request the transfer of certain personal data to another entity (data portability), as provided by applicable data protection laws (e.g., Articles 7(3) and 21 of the GDPR). However, please note that we reserve the right to invoke legal restrictions, such as when we are required to retain or process certain data, have a legitimate interest in doing so (if we are entitled to claim it), or need it for asserting claims. If any costs are involved, we will inform you beforehand. We have already informed you in Section 3 about the possibility to withdraw your consent. Please be aware that exercising these rights may conflict with contractual agreements, potentially leading to consequences such as early contract termination or cost implications. We will inform you in advance if this is the case, unless it has already been contractually regulated.
Exercising such rights typically requires you to prove your identity (e.g., by providing a copy of your ID, if your identity is otherwise unclear or cannot be verified). To assert your rights, you can contact us at the address provided in Section 1.
Additionally, every data subject has the right to enforce their claims in court or file a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
10. Changes
We may update this privacy policy at any time without prior notice. The most current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you of any updates via email or other appropriate means.
Baded on https://dsat.ch/