3. General Information and Mandatory Disclosures

Data Protection 

We take the protection of your personal data very seriously and treat it confidentially and in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (revDSG). 

Please note that data transmission over the Internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible. 

Information on the Data Controller 

Data Controller:
Inga Seischab
Gruesshaldenstrasse 23
CH-6390 Engelberg / OW
Switzerland 

Additional business address (EU):
Botheplatz 26
D-69126 Heidelberg
Germany 

Email: info@changewaters.de 

The data controller is the natural person who determines the purposes and means of processing personal data. 

Storage Duration 

Unless a more specific storage period is stated, personal data will be stored only for as long as necessary to fulfill the purpose of processing.
If you request deletion or revoke consent, your data will be deleted unless statutory retention obligations apply. In such cases, deletion takes place after the retention period expires. 

Legal Bases for Data Processing 

Personal data is processed on the following legal bases: 

• Consent (Art. 6(1)(a) GDPR) 
• Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
  
• Legal obligation (Art. 6(1)(c) GDPR)
  
• Legitimate interest (Art. 6(1)(f) GDPR) 

The specific legal basis is explained in the relevant sections of this privacy policy. 

Recipients of Personal Data 

Personal data is shared with third parties only where necessary for contract performance, legal obligations, or legitimate interests, or where consent has been given. 

Where data processors are used, processing is carried out on the basis of valid data processing agreements. 

Revocation of Consent 

You may revoke consent at any time. The legality of data processing carried out prior to revocation remains unaffected. 

Right to Object (Art. 21 GDPR) 

If personal data is processed on the basis of legitimate interests, you have the right to object at any time for reasons arising from your particular situation.
If personal data is processed for direct marketing purposes, you may object at any time. In such cases, the data will no longer be processed for these purposes. 

Right to Lodge a Complaint 

You have the right to lodge a complaint with a supervisory authority, in particular in your country of residence, place of work, or the place of the alleged infringement. 

Right to Data Portability 

You have the right to receive data processed on the basis of consent or contract in a structured, commonly used, machine-readable format. 

Information, Correction, and Deletion 

You have the right to obtain information about your stored personal data and to request correction or deletion at any time. 

Objection to Unsolicited Advertising 

The use of contact data published on this website for unsolicited advertising is hereby objected to. Legal action may be taken in the event of unsolicited advertising.