Privacy Policy

1. General Information
We collect, process, and use your personal data in accordance with the provisions of this Privacy Policy and applicable data protection regulations, in particular the Swiss Data Protection Act (DSG) and the European General Data Protection Regulation (GDPR). However, the extent to which the GDPR applies depends on the specific circumstances of each individual case. This Privacy Policy sets forth which personal data we process about you. The term “process” encompasses any handling of personal data, such as collecting, disclosing, storing, or deleting it. We ask that you carefully read the following information to learn how and why we process your personal data and what rights you have in connection with such processing.

This Privacy Policy explains how we process personal data when
• you visit our website;
• you subscribe to our newsletter;
• you contact us via email, letter, or otherwise;
• you receive services from us or have another contractual relationship with us;
• you apply for a job with us;
• You are in contact with us in connection with other data processing activities related to our offerings.

We take appropriate security measures to protect your personal data and prevent threats. However, in today's world, security risks can never be completely ruled out.

2. Data Controller
We process personal data for various purposes. “Personal data” refers to any information that can be associated with an identified or identifiable natural person. If you have any concerns or questions regarding data protection, or if you wish to exercise your data protection rights, please feel free to contact the following person:

creativemindlab2 GmbH
Michael Koschak
"contact(at)creativemindlab2.ch"
"+41-(0)77 232 19 96"

3. Description and Scope of Data Processing
We process different types of personal data depending on the purpose. For contractual partners that are companies, we generally process less personal data—in these cases, we typically process data regarding the companies’ contact persons (e.g., name, email address, position within the company, and communication data). You provide us with much of the following personal data yourself. However, you are generally not obligated to do so. If you then provide us with data about other individuals (third parties), we assume that you are authorized to do so and that this data is also accurate. You automatically confirm this when you submit data about these third parties to us. Please ensure that the third parties concerned have been made aware of this Privacy Policy.

3.1 Basic Data and Contact Information
Master data consists of basic information that directly relates to you as an individual and your characteristics.

For example, we process the following master data:
• Last name, first name;
• Gender;
• Date of birth;
• Mailing address;
• Email address;
• Phone number;
• Nationality and residence permit status;
• Language preference information;
• Information from ID or passport;
• Information on professional role and employment (e.g., employment status, employer);
• Marital status.

Additional master data may be available and will be provided upon request. We receive this master data directly from you. However, under certain circumstances, we may also obtain personal data from third parties, such as our contractual partners, associations, and address brokers, as well as from publicly available sources, such as the Internet.

3.2 Contract Data
Contract data refers to information generated in connection with the conclusion or performance of a contract.

We process, for example, the following contract data:
• Information provided prior to the conclusion of a contract and information regarding the conclusion of the contract itself (e.g., regarding the subject matter of the contract), as well as information required or used for contract fulfillment.
• Date, details regarding the type, duration, and terms of the contract in question, and data regarding the termination of the contract.
• Customer history (contracts, etc.).
• Information regarding payments and payment terms, as well as mutual claims.
• Information regarding complaints, customer satisfaction, grievances, and feedback.
• Responses to customer and satisfaction surveys.
• Access data and logins.

Additional contract details are available and will be provided upon request.

3.3 Application Data
Application data refers to data collected in connection with your application to our company.

For example, this includes the following data:
• Basic information and contact details (see Section 3.1);
• Resume and cover letter;
• Employment and degree certificates;
• Information about your current job (e.g., notice period);
• Salary expectations;
• Information related to a job interview.

3.4 Communication Data
Communication data is data generated in connection with our communication with you.

For example, this includes the following data:
• Contact information, such as mailing address, email address, and phone number;
• The content of all correspondence;
• Details regarding the type, time, and other relevant information about the communication.

3.5 Behavioral and Preference Data
To tailor our offers and services to you, we strive to get to know you better. To do this, we process data about your behavior. Behavioral data consists of information about your use of our website. It may also be collected based on technical data. We may also use your other interactions with us as behavioral data, and we may link behavioral data with other information. This data then provides us with insights into your likely needs and interests. To this end, we analyze behavioral data. This allows us to gain an overall understanding of the preferences and likely behavior of you or groups of people with similar characteristics.

3.6 Location Data and Technical Data
When you visit our website, technical data is collected.

For example, this includes the following data:
• The end device’s IP address and device ID;
• Information about your device and its operating system;
• Information about your Internet service provider;
• Content accessed or logs recording the use of our systems;
• The date and time of your visit to the website, as well as your approximate location.

3.7 Other Possible Personal Data
Depending on the circumstances, we may also process the following data:

• In connection with administrative or judicial proceedings, data may be collected (e.g., evidence) that may also pertain to you.
• We may also be required to collect data for health protection purposes (e.g., in connection with safety protocols).
• We may also process photos or videos in which you may be recognizable (e.g., from events).
• We may collect data on who participates in which events.

4. Purpose of Processing
We use your personal data for the following purposes:
• To provide the services you have requested and to fulfill our obligations under any contracts entered into between you and us (performance of a contract);
• To improve our services;
• For communication (e.g., responding to your messages);
• For marketing and informational purposes (e.g., to ensure that our website is presented to you in the most engaging way possible);
• To maintain our IT security (in particular, to monitor the performance of our website);
• To review your job application (so that we can assess whether you are suitable for a position with us);
• To enable you to participate in interactive features, if you so desire;
• To inform you about changes to our services;
• For internal administrative purposes (e.g., for accounting or data archiving);
• To comply with legal requirements (e.g., to process complaints, prevent and investigate criminal offenses or other misconduct);
• To assert legal claims (if necessary, we also process personal data to enforce claims in court, out of court, and before authorities in Switzerland and abroad, or to defend ourselves against legal claims).

5. Principles of Data Processing
In our data processing activities, we adhere to various data protection principles, such as the principles of lawfulness, proportionality, purpose limitation, transparency—in particular, compliance with information obligations—and data security.

6. Data Processing in Connection with Social Media
When you contact us via social media and our profiles there, comment on content, or share posts, we collect information that we may use, for example, for marketing purposes. The respective social media platform provider also collects data on its own when you visit our profile. For more information on data processing by a social media provider itself, please refer to that provider’s privacy policy. On our website, we offer you the option to use a so-called social media plugin to integrate the respective provider’s features into our website. These plugins are disabled by default but are activated when you click on the social media icon on the website. You can direct requests for information and other data subject inquiries related to these social media providers directly to the provider in question.

Below is a list of the social media platforms that may be integrated into our website:

Facebook
Our websites and apps use remarketing tags from the social network Facebook. When you visit our pages, the remarketing tags establish a direct connection between your browser and the Facebook server. This informs Facebook that you have visited our site using your IP address and/or made a purchase. This allows Facebook to associate your visit to our site and any purchase you may have made with your Facebook user account. We may use the information obtained in this way to display Facebook Ads, as well as for marketing analyses and/or other targeting measures. Please note that we have no knowledge of the content of the transmitted data or its use by Facebook. The data controller for your information is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For more information, please see Facebook’s Privacy Policy at https://www.facebook.com/about/privacy.

X (formerly Twitter)
Twitter buttons are integrated into our website. They can be recognized by terms such as “Twitter” or “Follow,” accompanied by a stylized blue or black bird or an X. These buttons allow you to share a post or page from our website on Twitter or to follow us on Twitter. When you click this button, your browser establishes a direct connection to Twitter’s servers. The content of the Twitter buttons is transmitted directly from Twitter to your browser. Please note that we have no knowledge of the content of the transmitted data or how Twitter uses it. The entity responsible is International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, IRELAND. Further information on this can be found in Twitter’s Privacy Policy at https://twitter.com/privacy.

YouTube
YouTube may be integrated into our website. YouTube is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. YouTube’s Privacy Policy applies. For more information, please visit: https://www.youtube.com/intl/de_be/howyoutubeworks/user-settings/privacy.

Instagram
Our websites use features of the Instagram service, which is operated by Meta Platforms Ireland Limited. The corresponding plugins are marked with an Instagram logo, such as an “Instagram camera.” When you visit a page on our websites that contains such a plugin, your browser establishes a direct connection to Instagram’s servers. The plugin’s content is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the United States and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins—for example, by clicking the “Instagram” button—this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts. We hereby expressly point out that, as the provider of this website, we have no knowledge of the content or scope of the data transmitted, nor of its use by Instagram. For further information on this, please refer to Instagram’s Privacy Policy at https://help.instagram.com/155833707900388 and the general information at https://help.instagram.com. If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the Instagram plugins from loading by using browser add-ons, such as the script blocker “NoScript” (http://noscript.net).

LinkedIn
We use the marketing services of the social network LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”), as part of our online offerings. These services use cookies—text files that are stored on your computer. This enables us to analyze how you use the website. For example, this allows us to measure the effectiveness of our ads and show users products they have previously expressed interest in. The information collected includes, for example, details about your operating system, browser, the website you visited immediately before accessing our site (referrer URL), which pages you visited, which offers you clicked on, and the date and time of your visit to our website. The information generated by the cookie regarding your use of this website is transmitted in pseudonymized form to a LinkedIn server in the U.S. and stored there. LinkedIn does not, therefore, store the name or email address of the respective user. Rather, the data mentioned above is assigned only to the user for whom the cookie was generated. This does not apply if the user has permitted LinkedIn to process data without pseudonymization or if the user has a LinkedIn account. You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of this website to their full extent. You can also object to the use of your data directly with LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. We use LinkedIn Analytics to analyze and regularly improve the use of our website. The statistics we collect enable us to enhance our offerings and make them more interesting for you as a user. All LinkedIn companies have adopted the Standard Contractual Clauses to ensure that the data transfers to the U.S. and Singapore necessary for the development, operation, and maintenance of the services take place lawfully. If we request consent from users, the legal basis for processing is Article 6(1)(a) of the GDPR. Otherwise, the legal basis for the use of LinkedIn Analytics is Article 6(1)(1)(f) of the GDPR. Third-party provider information: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; User Agreement and Privacy Policy.

7. Information About Online Advertising Technologies and Cookies
We use online advertising technologies, such as cookies, on our website. We use these to measure the user-friendliness and success of the website and our online advertising campaigns.

7.1 What are online advertising techniques, such as cookies?
When we track you, we can distinguish your visits from those of other users so that we can ensure the website functions properly and conduct statistical analyses. Each time you visit a page, you are recognized as an individual visitor and can thus be distinguished from other people, for example, by the server assigning a unique identifier to your browser (this is referred to as a “cookie”). Cookies are automatically stored on your device when you visit our website. We use cookies, for example, to save settings between your visits to the website or to collect statistical and technical data. However, you can configure your browser to reject cookies, store them only for a single session, or delete them early.
7.2 Which cookies and online advertising technologies do we use?
We use analytics services to help us optimize our website. In
, we explain how our most important analytics service providers work, using examples. Other third-party providers of similar tools generally process personal data in a similar manner.

Our websites use the following cookies in particular:

Google AdWords Conversion Tracking and Google Remarketing
We use Google Conversion Tracking to collect statistical data on the use of our websites and to analyze this data for the purpose of optimizing our websites for you. Google AdWords places a cookie on your computer if you arrived at our website via a Google ad. These cookies expire after 30 days and are not used to identify you personally. If a user visits certain pages on the AdWords customer’s website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. Each AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of different AdWords customers. The information collected via the conversion cookie is used to generate conversion statistics for AdWords customers who have opted in to conversion tracking. AdWords customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. As part of Google Remarketing, cookies are used to collect your browsing behavior in an anonymized form for marketing purposes and to tailor advertising offers to your interests. These technologies do not, in principle, collect or store any personal data that would allow your identity to be determined.

Google Places API
To make location-based searches easier for our customers and to automatically autocomplete address data, we use the Google Places API. The data collected through searches powered by the Google Places API is subject to Google’s Terms of Service. Google processes data regarding the user’s use of Places. For more information, click here. https://developers.google.com/maps/terms.

Google Marketing Platform / DoubleClick
We use Google’s DoubleClick feature on our websites to analyze website usage and to enable us, Google, and other advertisers who partner with DoubleClick to present you with ads relevant to your interests. To do this, a cookie is stored on your computer’s hard drive. This cookie assigns a pseudonymous identification number (ID) to your browser and collects information about the ads displayed in your browser and how they are accessed. The information collected by the cookie regarding your use of websites is generally transmitted to a Google server in the U.S. and stored there. Based on the information collected, your browser is assigned categories relevant to your interests. These categories are used to display interest-based advertisements. In addition to changing your browser settings, you can also permanently disable the DoubleClick cookie using a browser plug-in. Your consent serves as the legal basis for the collection of these cookies.

Google Analytics, Google Firebase
We use Google Analyticsand Google Firebase(analytics services provided by Google Inc.) on our websites and apps to analyze user behavior. Analyzing how our services are used allows us to tailor them even better to our customers’ needs. Google may transfer anonymized usage information to third parties if required by law or if such third parties process this data on Google’s behalf. Google will neither store your IP address nor associate it with other data held by Google. Google Analytics uses cookies to analyze the websites. Google may use the information generated by the cookies to evaluate your use of the website. You can prevent the installation of cookies by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to fully utilize all features of all websites and apps. Furthermore, we use Google Firebase to report errors that occur in the apps. If an app crashes, information about the crash—such as device type, app version, operating system version, and technical data about the mobile device—is sent to Firebase. This information does not include the IP address or any personally identifiable information.

Google reCAPTCHA
We use reCAPTCHA on our websites. reCAPTCHA is a service provided by Google. reCAPTCHA helps us optimize our services and protect against cyberattacks. With reCAPTCHA, we can determine whether you are a human and not a robot or other spam software. reCAPTCHA collects personal data from our website visitors to determine whether the actions on the website are actually performed by a human. For this purpose, the IP address and, if necessary, other data required by Google for the service may be transmitted to Google.

Google Tag Manager
To enable us to monitor the system's stability, performance, and installation quality, and to obtain data for diagnostic purposes, Google Tag Manager collects certain aggregated data regarding tag firing. This data does not include IP addresses or measurement IDs associated with any specific individual.

Google Fonts
We use Google Fonts on our websites. These tools are provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For Europe and Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. For more information on Google’s privacy policy, please visit: https://policies.google.com/privacy. By accepting cookies on our websites and apps, you consent to Google’s processing of the collected data as described above, unless the collected data is already technically necessary for the smooth operation of the websites and apps and thus constitutes a legitimate interest on our part.

Use of Adobe Fonts
We use Adobe Fonts for the visual design of our website. Adobe Fonts is a service provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe), which grants us access to a font library. To integrate the fonts we use, your browser must establish a connection to an Adobe server in the U.S. and download the font required for our website. As a result, Adobe receives the information that our website was accessed from your IP address. For more information about Adobe Fonts, please see Adobe’s privacy policy, which you can access here: Adobe Fonts

Adobe Analytics, Adobe Target, Adobe Campaign, Adobe Launch
We use Adobe Analytics to automatically collect data about your use of our websites and (mobile) applications when you visit them. This allows us to understand how our services are used and gain insights into user behavior.
We use Adobe Target to test personalized experiences in real time in order to deliver more relevant content. The anonymous information generated by the cookie regarding your use of our services is transmitted to Adobe’s servers and stored there. We use Adobe Campaign to send our users targeted information via email and push notifications. We use Adobe Launch on our websites. Data is forwarded to the specified tags in the manner described via the tag management system. Cookies may also be used in this process. However, the data is not stored in the tag management system. The service provider is the U.S.-based company Adobe Inc. For the European region, Adobe Systems Software Ireland Companies, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, is responsible. For more information on Adobe’s privacy policy, please visit: https://www.adobe.com/de/privacy.html. By accepting cookies on our websites and apps, you consent to the processing of the collected data by Adobe as described above, unless the collected data is already technically necessary for the smooth operation of the websites and apps and thus constitutes a legitimate interest on our part.

Additional tools are available and will be provided upon request.

8. Integration of Third-Party Services and Content
In order to provide you with information that is as interesting and comprehensive as possible, we sometimes use third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds, or graphics from other websites. This always requires that the providers of this content (hereinafter referred to as “third-party providers”) receive your IP address. Without this IP address, the third-party providers cannot send the content to your browser. We embed this content on our site to provide you with useful information or to facilitate a process for you without any further data processing. Our legitimate interest lies in being able to offer you this content as a service. Furthermore, certain services are only activated in the sense described above when you actively select them. In these cases, data processing is based on your consent. If you do not want this content, you can adjust the corresponding settings in your browser. We strive to use only content whose respective providers use the IP address solely for the purpose of delivering the content. However, we have no control over whether third-party providers store the IP address, for example, for statistical purposes. To the best of our knowledge, we inform users of this.
Below is a list of third-party providers that may be integrated into our website:

Newsletter We may occasionally send you—that is, if we have an existing customer relationship with you, or if we do not, based on your consent—tips, advice, and information about our services and offers via various communication channels such as emails (newsletters), downloadable documents, and push notifications (apps). If you sign up for a newsletter on our website, we will send you a confirmation email that you must use to confirm your subscription (double opt-in). You can unsubscribe from the newsletter at any time. At the bottom of the newsletter, you will find the link “Unsubscribe from the newsletter.” You can disable push notifications at any time through the device settings on your mobile device. Unsubscribing from the newsletter or disabling push notifications does not automatically result in the deletion of your personal data. If you wish to have your data deleted, you can notify the contact point mentioned above (Section 1). Withdrawal of consent does not affect the lawfulness of data processing prior to the withdrawal. We sometimes incorporate visible and invisible image elements into our newsletters and other marketing emails—to the extent permitted—which, when retrieved from our servers, allow us to determine whether and when you have opened the email, so that we can measure and better understand how you use our offerings and tailor them to your needs. You can block this in your email program. By consenting to receive newsletters and other marketing emails, you agree to the use of these techniques. Documents containing information are regularly made available for download on our websites. In return, based on your consent, we collect data such as your name, address, ownership status, phone number, email address, etc., and use this data for marketing purposes—such as personalizing the newsletter and developing a customer profile—as well as for internal sharing to offer you potential products. Consent must be given immediately before downloading the documents. You may revoke your consent through the contact point mentioned above (Section 1).

Additional tools are available and will be provided upon request.

9. Data Security
All information you submit to us is stored on servers. Unfortunately, the transmission of information over the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet. However, we protect our website and other systems through technical and organizational measures against the loss, destruction, unauthorized access, alteration, or disclosure of your data by unauthorized persons. In particular, your personal data is transmitted to us in encrypted form.

10. Disclosure of Your Personal Data
We disclose your personal data to service providers. This applies in particular to IT service providers, but may also—where necessary—include analytics service providers, debt collection agencies, credit bureaus, marketing service providers, etc. To the extent that these service providers process personal data as data processors, they are obligated to process personal data exclusively in accordance with our instructions and to implement data security measures. Data may also be disclosed to other recipients, such as courts and government agencies in the context of legal proceedings. In individual cases, we may also disclose personal data to other third parties for their own purposes, e.g., if you have given us your consent to do so or if we are legally obligated or authorized to disclose the data. Recipients of data (e.g., other companies or government agencies) are not limited to Switzerland. This applies in particular to certain service providers, which may be located outside the European Economic Area (EEA) and Switzerland. For example, we may transfer data to government agencies abroad if we are legally required to do so. Not all countries outside Switzerland and the EEA have the same level of data protection as Switzerland. Therefore, we compensate for lower levels of protection through appropriate contracts, particularly the so-called Standard Contractual Clauses issued by the European Commission and recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC).

11. Duration of Data Processing
We process your personal data for as long as necessary to fulfill the purpose of the processing (for data related to contracts, this is typically for the duration of the contractual relationship), as long as we have a legitimate interest in storing the data (e.g., to enforce legal claims or to ensure IT security), and as long as the data is subject to a statutory retention requirement (for example, certain data is subject to a ten-year retention period, which we are required to comply with). We will destroy or anonymize your personal data upon expiration of the retention or processing period, unless prohibited by legal or contractual obligations.

12. Your Rights
Under applicable data protection laws, you have certain rights that allow you to obtain further information about our data processing and to influence it.

These rights include, in particular, the following:
• You have the right of access. This means you can request information about our data processing. We are happy to assist you with this. You can also submit a so-called request for access if you would like further information and a copy of your data.
• You have the right to data portability. This means you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to have it transferred to a third party, provided that the relevant data processing is based on your consent or is necessary for the performance of a contract.
• You have the right to erasure and to object. This means you can object to our data processing, in which case we will no longer be able to process your data. You may then request that we erase your personal data. However, please note that we will continue to process and retain your data if we are legally required to do so.
• You have the right to rectification. This means you can correct or complete inaccurate or incomplete personal data, or have a so-called “dispute note” added to it.
• You have the right to withdraw your consent. This means you can withdraw your consent at any time, provided you have previously given your consent to data processing. The withdrawal takes effect immediately, meaning it applies only to the future and not to the past. However, we may continue to process your data on another legal basis even after you withdraw your consent.

If you exercise your data subject rights, we must verify your identity (for example, by requesting a copy of your ID). The data subject rights listed are subject to legal requirements and restrictions. This means that it may not always be possible to fully exercise these rights. For example, we may still need to continue processing your personal data to fulfill a contract with you, to protect our own legitimate interests, or to comply with legal obligations. To the extent permitted by law (e.g., to protect the privacy of third parties or to safeguard our own legitimate interests, such as the protection of trade secrets), we may restrict or deny your exercise of these rights. It should also be noted that you have the option of submitting your request to the competent data protection authority.

13. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time, effective for the future. The most current version is always available on our website. Please visit the website regularly to review the applicable provisions of this Privacy Policy.

As of: End of 2025