IDOL

IDOL

Controller:
theidol.ch
Email: info@theidol.ch
Tel: +41 79 761 28 97.

We respect your privacy and comply with the EU’s GDPR (General Data protection Regulation) and Switzerland’s revised FADP (Federal Act on Data Protection)(in force Sep 1, 2023) in collecting and processing your data. This policy explains what personal data we collect, why we collect it, and how we use and protect it.

Information We Collect

• Website Usage Data: We use Google Analytics (Google LLC, USA) to collect standard analytics data (pages visited, time on site, device/browser information, and anonymized IP). This helps us understand and improve our site. These analytics cookies and identifiers are considered personal data under GDPR, so we only activate them with your explicit consent.
• Social Media and Messaging: Our site includes widgets/links for Instagram, Telegram, Facebook, and WhatsApp. If you interact with these (e.g. contact us or follow us), those platforms may collect information about you (such as your user handle or profile data) according to their privacy policies. We do not control their data practices, but note that these providers (Meta/Facebook, Telegram, etc.) may operate servers outside Switzerland/EU.
• Contact Information: If you use a contact form or email us, we collect the personal data you provide (name, email, message content) to respond to your inquiry. We do not collect payment or financial data since there are no online transactions.
• Cookies & Tracking: We use cookies and similar tracking technologies. Essential (necessary) cookies are always enabled to operate the website (e.g. user preferences, session cookies) and do not require consent. Analytics cookies (e.g. Google Analytics) are used to analyze site usage; these are enabled only with your consent. Advertising/Targeting cookies may track browsing to show you relevant content or limit ad frequency; these also require your opt‑in consent. You can manage or withdraw cookie consents at any time (see Cookies section below).

How We Use Your Data

We use collected data only for legitimate purposes:

• Service Delivery & Improvement: To operate and improve our website (making it responsive and user-friendly) and to understand website traffic using Google Analytics.
• Communication: To respond to your inquiries or requests sent via forms or social/chat widgets.
• Analytics & Marketing (with consent): With your permission, we analyse usage patterns and allow relevant advertising (through analytics and ad cookies). These functions help us measure the effectiveness of our content and ensure we serve relevant information. You may refuse or withdraw this consent at any time.

All processing is based on appropriate legal grounds: necessary site operations rely on legitimate interest, while analytics and advertising processing rely on your explicit consent. We never sell your personal data.

Cookies and Tracking Technologies

What are cookies? Cookies are small text files placed on your device to store information (e.g. login status, preferences). They can be first‑party (set by our site) or third‑party (set by external services). We explain the types we use:

• Strictly Necessary Cookies: Required for website functionality (e.g. session cookies, security). They are enabled by default and cannot be turned off. We do not need consent for these.
• Analytics Cookies: Used by Google Analytics to collect anonymised usage statistics (pages viewed, clickpaths). These cookies do not identify you personally, but they help us improve our site. We only set them if you opt in via the cookie banner.
• Advertising/Targeting Cookies: May be set by our advertising or social partners. They collect data on your browsing activity to deliver interest-based content or limit ad frequency. We do not set these unless you consent. Note that enabling these cookies may share your browsing info with third-party advertising networks.

Managing Cookies: On first visit, our cookie banner lets you toggle Analytics and Advertising cookies. Only essential cookies are always on. You must actively check the boxes to enable analytics or advertising cookies. This gives you an informed, unambiguous choice – complying with Swiss and EU requirements. You can change your preferences at any time: use our cookie settings link (in the banner or site footer) or your browser’s cookie controls. Most browsers allow you to delete or block cookies; consult your browser’s help for instructions.

For details on the exact cookies we use and their purpose, please see our full Cookie Policy (linked at the bottom of the banner). Generally, cookies expire between one session and up to 12 months depending on type (see the Cookie Policy for specifics).

Third-Party Services and Data Sharing

We use certain third-party services that may access your data:

• Google Analytics: Google LLC (USA) processes analytics data. Google provides privacy controls (e.g. IP anonymization). Data sent to Google may be transferred outside Switzerland/EU. Google is a participant in the Swiss-US Data Privacy Framework, meaning it has certified adequate protection measures.
• Meta Platforms: The Instagram, Facebook, and WhatsApp widgets involve Meta Platforms Inc. (USA). Meta is also certified under the Swiss-US and EU-US Data Privacy Frameworks. Personal data passed to Meta services will be handled according to Meta’s privacy policies.
• Telegram: Telegram Messenger Ltd. may collect data if you use its widget. Data may be transferred abroad under contractual safeguards.

We do not share your data with other third parties except as described (e.g. our service providers). When required (e.g. analytics, social media plugins), these providers act as independent controllers for the data they collect.

International Data Transfers

Because our tools/providers are global, your data may be transferred to countries outside Switzerland/EU (notably the USA). Switzerland and the EU recognise other countries as “adequate” or allow transfers with safeguards. For example, the USA is recognised as adequate under the Swiss-US Data Privacy Framework (since Sept 2024) for organizations certified under that framework. Google, Microsoft, Amazon and others are certified, allowing data flow without extra agreements. In other cases, we rely on EU/Swiss Standard Contractual Clauses and your consent. Transfers are always protected by appropriate measures to meet GDPR/FADP requirements.

Data Retention

We keep personal data only as long as necessary for the purposes above or as required by law. For instance, analytics data in Google Analytics is retained in aggregated form (default up to 14 months, or as set in our GA settings) before being deleted or anonymised. Inquiries and contact messages are kept for as long as needed to address them (typically up to 1–2 years). We regularly review and securely delete data that is no longer needed.

Your Rights (Under GDPR and Swiss FADP)

You have rights over your personal data. Under both the EU GDPR and Swiss FADP, these include the right to:

• Be Informed: Know what data we hold and why. (This policy provides that information.)
• Access: Request confirmation of whether we process your data and obtain a copy of your personal data and processing details.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure (“Right to be forgotten”): Request deletion of your personal data if it’s no longer needed or unlawfully processed.
• Restriction: Request that we pause processing of your data (e.g. while we verify a concern).
• Portability: Receive your personal data in a machine-readable format and have it transferred to another controller (for data you provided with consent or under contract). (New under FADP.)
• Objection: Object to processing based on legitimate interests or direct marketing; if you object, we will stop that processing unless we have compelling grounds.
• Withdraw Consent: If you gave consent (e.g. for cookies), you can withdraw it at any time. It will be as easy to withdraw as to give it. This won’t affect processing done before withdrawal.

To exercise any right, please contact us (see below). We will respond without undue delay and at most within one month. If you are not satisfied, you have the right to complain with a supervisory authority (in Switzerland: the Federal Data Protection and Information Commissioner – FDPIC; in the EU: the authority in your country). Under Swiss law, you may also directly request information and correction/destruction of your data.

Security

We implement appropriate technical and organisational measures to safeguard your data (e.g. encrypted connections, access controls). We monitor our systems to prevent unauthorised access, data loss or alteration. In case of a data breach that risks your rights, we will notify the FDPIC and affected individuals as required by law.

Contact Information

If you have questions or want to exercise your rights, please contact us:

Data Controller: theidol.ch
Email: info@theidol.ch
Tel: +41 79 761 28 97.

You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or with your EU Data Protection Authority.

Thank you for trusting us with your personal data. We are committed to transparency and will update this policy as needed (changes will be noted by the “Last updated” date above).