Privacy Policy

Letzte Aktualisierung: 30.09.2026

Protecting your personal data is central to us. We place great value on transparency and traceability in how your personal data is collected, processed and used. With this privacy policy we want to inform you comprehensively about which data we process and to what extent, why we do so, to whom your data may be passed on, and what rights you have as a data subject under the Swiss Federal Act on Data Protection.

Contents

1. Controller and contact details

The party responsible for the collection, processing and use of your personal data within the meaning of the Swiss Federal Act on Data Protection is:

Unburnt by Cornelia Gürtler
Jungholzstrasse 16
8050 Zürich

Person responsible for data protection:
Cornelia Gürtler
info@unburnt.ch

2. Scope of this privacy policy

This privacy policy applies to all information and data collected, processed or used in connection with your use of our website www.unburnt.ch and all associated online services. It applies equally to all technologies and procedures we use to provide our services to you.

3. Legal bases for data processing

As a matter of principle, personal data is only processed where one of the following legal bases under the revised Swiss Data Protection Act (nDSG) and any other applicable provisions is met:

  • Consent: Where you have deliberately given your consent (for example a newsletter subscription or cookie settings), the processing is based on that consent.
  • Performance of a contract or pre-contractual measures: Your data is processed in order to conclude or perform a contract with you (for example registration, purchase processing, provision of services).
  • Legal obligations: Where we are legally obliged to process or retain certain data (for example accounting and tax records), the processing is based on that obligation.
  • Overriding legitimate interests: In selected cases we process your data in order to safeguard our legitimate interests (for example IT security, prevention of misuse, further development of our services), provided that no overriding interests of yours worthy of protection conflict with this.

4. Categories and origin of the personal data processed

In the course of your interactions with us we collect various types of personal data, in particular:

  • Basic personal data:Name, email address, postal address, telephone number, date of birth and similar, where you provide these to us, for example via a contact form, a registration or a purchase process.
  • Usage data:IP address, browser type, operating system, device type and similar. This data is recorded automatically when you access our web pages.
  • Communication data:Content you send us by email, contact form or chat (for example support enquiries, feedback).
  • Location data:Roughly stored location data (country, region), where we record it technically (for example via the IP address) or you deliberately provide it to us.
  • Sensitive personal data: If you voluntarily provide us with special categories of data (Art. 5 lit. c nDSG) – for example health data, biometric or genetic data – we treat these strictly confidentially and process them only where explicit consent has been given or a legal basis exists.

Origin of the data:

  • Collected directly from you: We receive most data directly from you (for example in the course of your registration, order or contact with us).
  • Automatic collection: For technical reasons, certain usage data is collected automatically when you visit our website (see above).
  • Third-party sources:Where you provide us with data via external services (for example payment transactions through a bank or the use of external authentication services), or where we receive it from publicly accessible directories, we indicate this origin accordingly and process only what is necessary for the respective purpose.

If we do not collect data directly from you, it may come from the following sources:

  • Public registers: Commercial register, Swiss company directories, professional associations.
  • External service providers: Address brokers, environmental portals, social media profiles (for example LinkedIn), where you have deliberately made this data publicly accessible.
  • Cooperation partners:Partner companies that pass data to us in connection with joint products or services, provided you have already consented there or another legal basis exists.

5. Purposes of data processing

We process your personal data for the following purposes:

  • Provision and operation of the website and online services
    Displaying content, answering enquiries, navigation on the website.
    Ensuring the availability and functionality of our IT systems.
  • Customer administration and support
    Adding to, updating and maintaining contact details in our system.
    Handling your support or service enquiries.
    Processing contracts, orders, payments and the delivery of goods or services.
  • Marketing and communication
    Sending newsletters, offers and promotional emails (only where consent has been given beforehand).
    Information about new products, promotions and events.
    Statistical evaluation and performance measurement of marketing campaigns, where expressly approved by you.
  • Analysis of user behaviour and web analytics
    Collection of anonymised usage statistics in order to continuously improve our online offering and make it more user-friendly.
    Technical monitoring and logging of access in order to detect and prevent misuse or attacks.
  • IT security and system administration
    Protecting our IT infrastructure and the data we process against unauthorised access, loss, destruction or manipulation.
    Carrying out backups, updates and security checks.

Fulfilment of legal obligations
Retention of business-relevant documents (for example invoices, contract documents) in accordance with commercial and tax law requirements.
Reports to authorities (for example tax authorities, law enforcement agencies) where required by law.

6. Services and technologies used

6.1 Server log files

On our website we keep server log files in which technical connection data is logged automatically when our pages are accessed.

Data collected
The following information is stored as part of log file recording:

  • IP address of your device
  • Date and time of the request
  • URL accessed and referrer (previous page)
  • Browser type, operating system and device data (user agent)
  • Access status or HTTP status code
  • Volume of data transferred

Purpose of the processing
We use the log file data exclusively in order to

  • ensure the operation and availability of our servers,
  • detect and rectify technical errors (for example faulty page requests),
  • identify and fend off attacks or unauthorised access attempts.

Legal basis
The collection of this technical data is necessary for the secure and trouble-free operation of our website. We rely here on our overriding legitimate interest in a functioning IT infrastructure.

Opt-out option

An opt-out is not possible here, because log file recording is technically necessary in order to provide and protect our services.

6.2 Cookies

We use cookies and comparable technologies on our website in order to enable its operation and to provide certain functions.

Data collected
Depending on the cookie category, the following data is collected and stored:

  • Session cookies: Temporary identifiers that identify devices during a browser session.
  • Persistent cookies: Long-term identifiers used to recognise returning visits.
  • Functional cookies: Settings such as language choice or layout preferences.
  • Security cookies: Tokens or hash values used to secure login sessions.

Purpose of the processing

  • Technically necessary cookies: Indispensable for the operation of shopping baskets, login sessions and load balancing.
  • Functional cookies: Storing your preferences in order to improve the user experience.
  • Security cookies: Protection against manipulation and CSRF attacks.

Legal basis
Cookies that are necessary for the operation of the website are based on our overriding legitimate interest in a functioning IT infrastructure. Functional and security cookies also fall under this.

Data recipients and transfers to third countries
Information recorded via cookies may — depending on the service used — be passed on to internal bodies and to external service providers. For details of recipients and possible transfers abroad, please refer to section 7 “Data recipients and categories of recipients” and section 8 “Transfers to third countries” of this privacy policy.

Opt-out option
You can prevent or restrict the setting of cookies through your browser settings. Please note that some functions of the website may then no longer be fully usable.

7. Data recipients and categories of recipients

Your personal data is generally only passed on where this is necessary to achieve the purposes set out in section 5 or where you have expressly consented to it. Possible recipients are:

  • Internal bodies: Our staff in IT, marketing, customer service, accounting and management – in each case only to the extent that they need the data for their tasks.
  • External service providers: We draw on specialised companies or freelancers who support us in delivering our services, for example:
    • Hosting and server providers: Operation of the website, databases
    • Email and newsletter service providers
    • Payment service providers and banks: Credit card processing, payment control
    • IT support, system administration, developers
    • External tax advisers, auditors, lawyers (where necessary)
    • Logistics and shipping service providers (for physical deliveries of goods)
    • Tracking, conversion and advertising service providers
  • Public authorities: Where we are legally obliged to pass certain data to authorities (for example in tax audits or criminal proceedings), we transmit only the necessary minimum.

Other recipients: In exceptional cases, and only with your express consent or on a legal basis (for example in the event of a sale or merger of the company), your data may pass to third parties. In such cases we will inform you in good time and transparently about the change of recipients.

8. Transfers to third countries

In the course of order processing, your personal data may be transferred to recipients abroad. Such recipients (for example hosting providers, payment gateways or external support service providers) are contractually bound to data protection in the same way as we are.

A transfer to countries that do not have a level of data protection equivalent to Swiss law is only possible if we have carried out a risk assessment beforehand and agreed appropriate safeguards. This is done in particular through:

  • Contractual safeguards:
    We rely on protective instruments recognised by the Federal Data Protection and Information Commissioner (FDPIC), for example the standard contractual clauses of the EU Commission or comparable agreements approved by the FDPIC.
  • Additional technical and organisational measures:
    If our risk assessment concludes that a risk to your personal rights remains, we additionally use encryption, pseudonymisation or other measures in order to guarantee an adequate level of data protection.

9. Retention period and deletion

We retain personal data only for as long as is necessary for the respective processing purpose.

Contract documents, by contrast, are subject to statutory retention periods and are therefore kept for longer. In particular, we are required to retain business correspondence, concluded contracts and accounting records for up to ten years (Art. 958f of the Swiss Code of Obligations, VAT Act). As soon as this data is no longer necessary for the provision of our services, we restrict its use and use it only for accounting and tax purposes.

10. Rights of data subjects

As a data subject you have various rights under the revised Swiss Data Protection Act (nDSG) which you can assert against the controller. Below you will find an overview of your main rights and the relevant legal bases:

  1. Right to information
    You can ask at any time whether we process personal data about you. You also have the right to be told what data this is, for what purpose we collect it, where we obtain it, to whom we pass it on where applicable, and how long we store it.
  2. Right to rectification and completion
    If the personal data we process is incomplete or incorrect, you can request that it be rectified or completed. We will correct your data without delay if we conclude that a correction is necessary.
  3. Right to erasure and restriction of processing
    • Erasure:
      You can request the erasure of your data if
      a) the data is no longer necessary for the purposes for which it was collected,
      b) you withdraw your consent and no other legal basis remains,
      c) the data has been processed unlawfully, or
      d) we are no longer legally obliged to retain it.
      In these cases we will erase your data unless there are compelling legal reasons for continued storage (for example tax-related retention obligations).
    • Restriction:
      You can request a restriction of processing if
      a) you dispute the accuracy of your data and we are verifying it,
      b) the processing is unlawful and you would prefer restriction to erasure,
      c) we no longer need your data for the original purposes but you still need it to assert, exercise or defend legal claims, or
      d) you have objected to the processing and it has not yet been established whether your legitimate interests or ours prevail.
      In these cases we block the data concerned until the matter has been clarified and use it only to defend legal claims or for other permitted purposes.
  4. Right to object
    Where we process your data on the basis of a legitimate interest, you can object to that processing at any time. We will then examine whether we have compelling legitimate grounds for continued processing; otherwise we will stop the processing. An objection to processing for advertising purposes (direct marketing) is possible at any time without giving reasons.
  5. Right to data portability
    You have the right to receive the personal data concerning you that we process on the basis of your consent or for the performance of a contract in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller, insofar as this is technically feasible.
  6. Right of withdrawal where consent has been given
    If you have given us consent to process certain data (for example for cookies, tracking or marketing measures), you can withdraw that consent at any time with effect for the future and without giving reasons. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.
  7. Right to complain to the Federal Data Protection and Information Commissioner (FDPIC)
    If you believe that your rights under the revised Swiss Data Protection Act have been infringed, you can lodge a complaint with the FDPIC.

Procedure for asserting your rights
To exercise your rights as a data subject, please contact our data protection office by email:

Email: info@unburnt.ch

We usually answer your enquiry within 30 days at the latest. Should your request be complex or should we need an extension, we will let you know and explain the reasons.

11. Information about statutory obligations to provide data

Providing certain data is necessary in order to perform a contract or to fulfil legal obligations. If you do not provide the required data, we cannot rule out the following consequences:

  • No registration or conclusion of a contract with us.
  • Delays in processing your enquiries or orders.
  • Refusal to provide certain services.

In every form, and during the conclusion of a contract, we indicate separately which data is mandatory and which can be provided voluntarily.

12. Data security

We store your personal data securely and take all appropriate technical and organisational measures to protect it against loss, unauthorised access, misuse or alteration. Our staff and all service and contractual partners who have access to your data are contractually obliged to maintain confidentiality and to comply with the applicable data protection provisions. Where necessary in the context of order processing, we may forward selected enquiries to affiliated or external companies; in these cases too, your data is treated in strict confidence.

When you visit our website we use the SSL/TLS procedure with the highest level of encryption supported by your browser. This protects all data you transmit to us against access by third parties while it is in transit. Please note that, despite all security precautions, data transmission on the internet can have security gaps over which we have no influence. Please therefore protect your access data, use up-to-date software and log out after every session in order to ensure the highest possible level of security.

13. Changes to this privacy policy

We may amend this privacy policy at any time. The current version is published here on our website; the date of the last update can be found at the beginning of the document.

The German version of this privacy policy is authoritative; translations are provided for ease of understanding.

14. Studienreport und E-Mail-Impulse

Auf der Seite unburnt.ch/studie-2026 können Sie den Studienreport «Arbeitsbelastung und Prävention im DACH-Raum 2026» kostenfrei anfordern. Ergänzend zu den vorstehenden Abschnitten gilt dafür Folgendes.

Welche Daten wir erheben. Pflichtangaben sind Ihr Vorname und Ihre E-Mail-Adresse. Freiwillig können Sie Unternehmen und Rolle angeben. Zusätzlich speichern wir automatisch den Zeitpunkt der Anmeldung, Ihre IP-Adresse sowie einen Hinweis darauf, über welchen Kanal Sie auf die Seite gelangt sind (zum Beispiel über einen bestimmten LinkedIn-Beitrag). Zeitpunkt und IP-Adresse dienen ausschliesslich dem Nachweis Ihrer Anmeldung.

Wofür wir die Daten verwenden. Vorname und E-Mail-Adresse verwenden wir, um Ihnen den Studienreport zuzusenden. Rechtsgrundlage ist die Durchführung vorvertraglicher Massnahmen auf Ihre Anfrage hin (Art. 6 Abs. 1 lit. b DSGVO) beziehungsweise das Schweizer Datenschutzgesetz. Die freiwilligen Angaben zu Unternehmen und Rolle helfen uns, künftige Inhalte besser auf die Leserschaft abzustimmen.

E-Mail-Impulse. Wenn Sie im Formular das entsprechende Kästchen aktivieren, erhalten Sie zusätzlich regelmässig E-Mails mit Impulsen zu Belastung, Prävention und Arbeitsgestaltung. Diese Einwilligung ist freiwillig und vom Bezug des Studienreports unabhängig – Sie erhalten den Report auch dann, wenn Sie das Kästchen nicht aktivieren. Rechtsgrundlage ist Ihre Einwilligung (Art. 6 Abs. 1 lit. a DSGVO). Sie können sie jederzeit mit Wirkung für die Zukunft widerrufen: über den Abmeldelink am Ende jeder E-Mail oder formlos per Nachricht an info@unburnt.ch.

Speicherung und Versand. Ihre Angaben werden in der Abonnentenverwaltung unserer Website (Plugin «Newsletter») auf unserem Webspace gespeichert. Der Versand der E-Mails erfolgt über unseren eigenen Mailserver beim Schweizer Anbieter hosttech GmbH, der insoweit als Auftragsverarbeiter tätig wird. Eine Weitergabe an weitere Dritte findet nicht statt; Ihre Daten werden weder verkauft noch für Werbung Dritter genutzt.

Keine Erfolgsmessung. Wir messen nicht, ob und wann Sie eine E-Mail öffnen oder welche Links Sie anklicken. Unsere E-Mails enthalten keine Zählpixel.

Speicherdauer. Wir speichern Ihre Daten, bis Sie sich abmelden oder der Verwendung widersprechen. Danach werden sie gelöscht. Den Nachweis der erteilten Einwilligung bewahren wir so lange auf, wie dies zur Erfüllung gesetzlicher Nachweispflichten erforderlich ist.

Ihre Rechte. Es gelten die im Abschnitt «Rechte der betroffenen Personen» beschriebenen Rechte. Für Auskunft, Berichtigung oder Löschung genügt eine Nachricht an info@unburnt.ch.