Our data protection declaration

1 Who are we and what are we about?

We are Anrok GmbH, Via Larisch 2, 7031 Laax, Switzerland, and are responsible for this website. This is our privacy policy (“DPA”), in which we provide you as the data subject with the information required to enable you to assert your rights and to ensure transparent data processing for you.

This DPA forms the basis on which we process all personal data that we receive in connection with your use of and interaction with this website or any other online presence managed by us, including our social media presences and our applications (“apps”) (collectively referred to as the“website“).

The website primarily offers paid services that enable users to complete subject-specific learning and assessment programs.

This website may contain links to and from the websites of our partner networks, advertising partners and affiliated companies. If you follow a link to any of these websites, please note that they have their own DSEs and we cannot be held liable or responsible for them.

This DSE is from 01.01.2024. We reserve the right to adjust these at any time. The DSE published here applies.

2 What personal data do we process from you, why and with whom do we share it?

2.1 When you visit our website

When you visit our website, our servers temporarily store every access in a log file. As with every connection to a web server, the following technical data is collected without any action on your part and stored by us until it is automatically deleted after 6 months at the latest:

the IP address of the requesting computer,
the name of the owner of the IP address range (usually your Internet access provider), the date and time of access,
the website from which the access was made (referrer URL) with the search term used, if applicable,
the name and URL of the retrieved file,
the status code (e.g. error message),
the operating system of your computer,
the browser you are using (type, version and language),
the transmission protocol used (e.g. HTTP/1.1).

This data is collected and processed for the purpose of enabling the use of our website (connection establishment), ensuring system security and stability in the long term and enabling the optimization of our website as well as for internal statistical purposes. To this end, we are supported by our partners, who are themselves subject to data protection regulations, which we have carefully selected and contractually obliged to comply with data protection, in particular with regard to data security. These are (with links to their respective DSEs):

AWS, Switzerland, Server, https://aws.amazon.com/privacy/?nc1=f_pr
Cloudflare, Inc, USA, CDN, https://www.cloudflare.com/de-de/privacypolicy/
Wordfence, USA, https://www.wordfence.com/privacy-policy/
Litespeed, USA, https://www.litespeedtech.com/company/privacy-policy
NitroPack, Bulgaria, https://nitropack.io/page/privacy

2.2 If you write to us via the contact form

This website allows you to contact us via the contact form. If you decide to contact us in this way, you agree that we may process your e-mail address, surname, first name, title, organization and the content of our conversation for the purpose of communicating with you until we are satisfied that you are satisfied, and then archive or delete the data in accordance with the legal requirements.

2.3 If you contact us by e-mail or telephone

If you decide to contact us by e-mail or telephone, you consent to us processing your e-mail address, surname, first name, title, organization (if applicable), telephone number and proposed date (if applicable) as well as the content of our conversation for the purpose of communicating with you until we are satisfied that you are satisfied and then archiving or deleting the data in accordance with the legal requirements. For communication with us via e-mail or telephone, we are supported by our partners, who are themselves subject to data protection regulations, which we have carefully selected and contractually obliged to comply with data protection, in particular with regard to data security. These are (with links to their respective DSEs):

Microsoft, Inc, USA, Office 365, https://www.microsoft.com/de-ch/trust-center/
Amazon AWS, https://aws.amazon.com/de/privacy/
Sendlayer, USA, https://sendlayer.com/privacy-policy/

2.4 When you open a customer account with us

You can open an account to use some of our services. To do this, we need personal data from you; otherwise we cannot open the account for you and cannot provide you with our services.

The creation and subsequent use of an account is voluntary. We need your name and e-mail address. We then process when you were logged in and for how long, your account settings and preferences, your interaction with the website, use of the services and to create and manage your customer account, including the following contact in this regard.

If you have an account, you are free to enter additional information about yourself in your profile, e.g. your picture, which you can also delete again.

This account data will be processed by us until you delete your account and then archived for as long as we are legally or contractually obliged to do so. Components of the account data that we are not obliged to archive are anonymized or deleted for statistical evaluation purposes.

We will delete your account and the associated data six months after your last login. Furthermore, the administrator of your organization who invited you has the right to delete invited users and their data.

For the management of customer accounts, from the creation of the account, use of the services, progress and success reports through to the deletion of the account, we are supported by our partners, who are themselves subject to data protection regulations, which we have carefully selected and contractually obliged to comply with data protection, in particular with regard to data security.

These are (with links to their respective DSEs):

Amazon AWS, https://aws.amazon.com/de/privacy/

2.5 If you buy our services directly from us

Our services are subject to a charge. This means that you or your organization will sign a contract with us or with our partners before you and your team get access to the services. For this purpose, we require data such as contact person, contact option and contact details as well as the name of the organization and, if applicable, billing address and payment method. On the one hand, this allows us to check the customer relationship with you or your organization and enter into it if necessary. On the other hand, this allows us to subsequently provide the services or goods requested by you or your organization for the purpose of processing the contract. We will store all of this in accordance with the legal requirements. After your purchase as an existing customer, we reserve the right to inform you by e-mail about our offers for goods or services similar to those already purchased, to invite you to events or to ask you to rate us and our performance if you do not refuse. In addition, we analyze the purchasing behavior of our existing customers individually and in segments in order to adapt our range to the demand forecast. This includes use for advertising purposes on social media (e.g. for so-called lookalike audience campaigns). If you use your customer account for your purchase, we will assign your transactions to this account. For contract processing, delivery, credit checks, analysis, communication, invoice and card payments, we are supported by our partners, who are themselves subject to data protection regulations, which we have carefully selected and contractually obliged to comply with data protection, in particular with regard to data security. These are (with links to their respective DSEs):

WooCommerce Ireland Ltd, Ireland, eCommerce provider, https://automattic.com/privacy/
Sendlayer, USA, https://sendlayer.com/privacy-policy/
BEXIO Switzerland, https://www.bexio.com/de-CH/richtlinien/datenschutz

2.6 When you invite team members

As the “Skin Organizer” and the “Tour Guide” of an organization, you are able to invite members of your organization to create an account and use our services. To do this, enter the surnames, first names and e-mail addresses of the members of your organization on our website. Based on your input, we will generate and send a personalized email invitation to these members, inviting them to create an account on our website on behalf of your organization. You, as the inviting administrator of an organization, are solely responsible for this submission, for ensuring that the information is correct and that we do not violate any law or otherwise act unlawfully when we invite these members to create their account on our website by email on your behalf as described.

2.7 When you use our services

The use of our services is recorded on a user and organization-specific basis so that you and your organization can track your progress and that of your team. As the administrator of your organization, you can see the usage and progress reports of the invited members. As a member and simple user of the services, you will see your own usage and progress reports. This usage data will be processed by us until you or your organization delete your account and then archived for as long as we are legally or contractually obliged to do so. Components of the usage data that we are not obliged to archive are anonymized or deleted for statistical evaluation purposes. If you book a personal coaching session with our Success Helpers, your data and the data of your team members will be made available to the respective Success Helpers on the website for the purpose of planning, implementing and evaluating the booked coaching session.

2.8 If you subscribe to our newsletter

If you decide to subscribe to our newsletter, you consent to us processing your e-mail address, surname, first name and your interaction with our newsletter in order to send you our newsletter by e-mail, to ensure that you receive it and, if necessary, to improve our offer based on your interaction. This includes use for other advertising purposes on social media (e.g. for so-called lookalike audience campaigns). You can revoke your consent at any time via the options provided in the newsletter itself with effect for the future. For the creation, dispatch, confirmation of receipt and interaction tracking of our newsletter, we are supported by our partners, who in turn are subject to data protection regulations, which we have carefully selected and contractually obliged to comply with data protection, in particular with regard to data security. These are (with links to their respective DSEs):

Sendlayer, USA, https://sendlayer.com/privacy-policy/

2.9 If you contact us via chat bot or use the chat bot

This website allows you to contact us via chat bot or use the chat bot. If you decide to contact us in this way, you consent to us processing your e-mail address, surname, first name, title, organization (if applicable), telephone number and appointment proposal as well as the content of our conversation for the purpose of communicating with you until we are convinced that you are satisfied, and then archiving or deleting the data in accordance with the legal requirements.

For communication with us via chat bot, we are supported by our partners, who are themselves subject to data protection regulations, which we have carefully selected and contractually obliged to comply with data protection, in particular with regard to data security.

These are (with links to their respective DSEs):

Amazon AWS, https://aws.amazon.com/de/privacy/

2.10 If you use our forum

This website allows you to exchange information with other users on our forum. If you decide to use this function, you consent to us processing your account identity and the content of the conversation for the purpose of allowing communication until you delete your account, and then archiving or deleting the data in accordance with legal requirements.

3 Which technologies from which third-party providers have we embedded?

We use various technologies from (other) third-party providers on our website, e.g. for analysis, segmentation, marketing, integration of social media, security, media presentation, CRM integration, etc.. In their respective privacy policies, they explain which data they process for which purposes, for how long, with whom they share it, what rights you have and how you can exercise them. If necessary, you can refuse this processing, in which case we will provide you with the relevant links below. You can also make the appropriate settings in your Internet browser yourself to prevent, for example, that cookies are stored on your device or tracking technologies are used. Depending on the provider, you can make and manage these settings in your Internet browser under privacy, security or data protection settings. These third-party providers are (with links to their respective DSEs and opt-out options where applicable):

InnoCraft Ltd, New Zealand, website analysis matomo.org, https://matomo.org/gdpr-analytics/
Cloudflare, Inc, USA, CDN, https://www.cloudflare.com/de-de/privacypolicy/
Litespeed, USA, https://www.litespeedtech.com/company/privacy-policy
NitroPack, Bulgaria, https://nitropack.io/page/privacy
Wordfence, USA, https://www.wordfence.com/privacy-policy/
Amazon AWS, https://aws.amazon.com/de/privacy/
YouTube, Google Ireland Limited, Ireland, media presentation, https://policies.google.com/privacy?hl=de
Google Charts, Google Ireland Limited, Ireland, creation of non-personalized charts for data visualizations, https://policies.google.com/privacy?hl=de
OpenAI, L.L.C., USA, ChatGPT, evaluation of content and creation of summaries via the API (no processing of personal data) https://openai.com/policies/data-processing-addendum
Microsoft Azure, USA, evaluation of content and creation of summaries via the OpenAI API (no processing of personal data), https://azure.microsoft.com/en-us/support/legal/ and https://privacy.microsoft.com/de-de/privacystatement

4 Do we disclose your personal data abroad?

We work with various partners in Germany and abroad (see above). These are generally located in countries that have an adequate level of data protection. Should the disclosure to individual countries require additional protection, we ensure this by agreeing standard data protection clauses approved by the authorities with such partners or by relying on the self-certification of such partners under the relevant agreements.

5 What are your rights towards us?

You have the right:

to request information about, correction or deletion of your personal data from us;
ask us to restrict the processing of your personal data, in particular to object to the processing of your personal data for marketing purposes; and
to request that we provide you or a natural or legal person authorized by you with a digital file of your personal data (data portability).

You can revoke your consent to the processing of your personal data for the specified purposes at any time with effect for the future.

You also have the right to lodge a complaint with the competent authority (Federal Data Protection and Information Commissioner).

6 How can you exercise your rights against us?

If you have any questions about this DSE or how to exercise your rights, please contact us,

to contact us in writing either by post (see above) or
to contact us via e-mail as follows: erfolg(at)erfolgsucher.com
or contact us via the contact form: to the contact form