Privacy Policy
1. General
The protection of your personal data is a particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions (FADP, GDPR).
2. Controller
The controller responsible for data processing on this website is:
Kai Schnider
Email: info@einbuergerungsquiz.ch
Further details available on request by email.
3. Data collected
We collect and process the following data:
- On registration: email address, password (stored only as a hash, never in plain text)
- On purchase: email address, product purchased, amount, date and time, payment status and Stripe transaction number. After you buy full access or the video course, we automatically create an account with your email address, through which you use your access. We do not receive card numbers or other payment data (section 8).
- During use with an account: learning progress (which questions you answered correctly or incorrectly), test results, language, duration of your access, time of your last login
- During use without an account: a random identifier in the
guest_tokencookie, the number of free questions answered and your IP address. We use the IP address only to limit the number of free questions per address and day, to prevent abuse. - Automatically: IP address, browser type, access time and page requested (server logs kept by our host)
4. Purpose of data processing
We use your data to:
- Provide and improve our services
- Manage your user account and your progress
- Process payments
- Communicate with you, for example access details and reminders by email
- Protect the free quota against abuse
- Measure our audience, i.e. understand how visitors find and use the site (section 7)
5. Hosting
The website and its database (accounts, progress, orders) are hosted by lima-city (TrafficPlex GmbH, Bremen, Germany). The host keeps the server logs mentioned above.
The videos of the video course and their preview images are delivered from our own server at Hetzner Online GmbH in Germany (video.swapit.ch). When they load, this server technically processes your IP address and the requested file.
Our own visitor counter (section 7) runs on the same server.
6. Cookies and browser storage
To run the website we set our own, technically necessary cookies:
ebt_session: session and login status, up to 7 daysguest_token: counter for free questions without an account, 30 dayslanguage: chosen language, 1 year
If you object to being counted by our visitor counter (section 7), your browser stores this choice in the entry kat_aus.
If you answer free questions without an account, your browser stores in the entry eq_free_stats which questions you answered correctly or incorrectly, so the site can show your results. This entry stays in your browser and is not sent to us.
You can delete or block cookies in your browser at any time. Without the necessary cookies, login and free questions do not work.
7. Our own visitor counter
To see which pages are read and where visitors come from, we count page views with our own visitor counter. It runs on the server t.lizenzdrache.ch at Hetzner Online GmbH in Germany, sets no cookies and does not pass the stored data on to third parties. Requests to t.lizenzdrache.ch pass through the Cloudflare network (Cloudflare, Inc., USA), which forwards them and technically processes your IP address in doing so.
For each page view we store the times at which you open and leave the page, the page viewed (of the parameters in the address, only campaign details such as utm_source and ref), the address of the referring page without parameters, the country, the main language of the browser, and the device type, browser and operating system without version. If you arrive via an advert, we only record that it was an advert, not its identifier. When you click a link to another website, we only record the name of the target website.
We do not store your IP address or the full browser identification. To count visits, we form a shortened checksum from the IP address, the browser identification and a random key. The key is created anew every day and deleted after two days; after that, not even we can trace the checksum back to an IP address. We delete the entries after 400 days.
The legal basis is our legitimate interest in improving the website according to how it is actually used (Art. 31 FADP; for visitors from the EU, Art. 6(1)(f) GDPR).
Objection: if you do not want to be counted, open any page of this website with ?kat=aus added to the address. Your browser then stores only this choice (entry kat_aus); ?kat=an reverses it.
8. Payments via Stripe
We process payments through Stripe Checkout, a service of Stripe Payments Europe, Ltd. (Dublin, Ireland). When you start a purchase, we redirect you to a Stripe payment page and pass on your email address, the product and the amount. You enter your payment details directly with Stripe. You can pay by card, TWINT or PayPal. If you choose TWINT or PayPal, TWINT AG (Switzerland) or PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) also processes your data.
Stripe confirms to us whether the payment succeeded and gives us a transaction number. We neither see nor store card numbers or bank details. Stripe also uses the data to prevent fraud and may transfer it to the United States. Further information can be found in Stripe’s privacy policy.
9. Sending emails
We send you emails when you have bought or requested something: a confirmation after registration, confirmation and access details after a purchase, download links for the e-book, links to reset your password and a reminder one day before your access expires. The emails pass through a relay server we operate and are delivered by the email service Brevo (Sendinblue SAS, Paris, France). Brevo processes your email address, the content of the email and the delivery status.
10. YouTube videos
On our video page we embed videos from our YouTube channel. The preview thumbnails are hosted on our own server; simply opening the page does not transmit any data to YouTube. Only when you actively play a video is a connection established to YouTube (Google Ireland Limited) in privacy-enhanced mode (youtube-nocookie.com). Data such as your IP address may then be transmitted to Google. Further information can be found in Google’s privacy policy.
11. Fonts
The fonts on this website (Gabarito and Lexend) are delivered together with the pages from our host’s server (section 5). Your browser does not connect to Google or any other font provider for this.
12. Study plan by email (newsletter)
On the quiz results page you could voluntarily request a study plan by email. The form is no longer on the site. For registered addresses: we use the double opt-in procedure and only add an address after the link in the confirmation email has been clicked. Without this confirmation we send nothing.
Data processed: email address, language, where on the site you signed up, optionally your quiz result as a percentage, as well as IP address and time of sign-up and of confirmation. We keep these two IP addresses and timestamps solely as proof of your consent, which we must be able to demonstrate in the event of a dispute.
Purpose and legal basis: sending the requested study content and information about our paid offers, based on your consent. You can withdraw your consent at any time without giving reasons, via the unsubscribe link at the end of every email or by an informal email to info@einbuergerungsquiz.ch. After withdrawal we send nothing further.
Retention: we keep the data until you withdraw consent. After you unsubscribe, we keep the address only as long as necessary to avoid writing to you again by mistake.
13. Disclosure of data
We do not sell any data. Your data is received only by the service providers named in sections 5 to 12, to the extent necessary for the respective purpose, and by authorities where there is a legal obligation. Most of these providers are based in Switzerland or the EU. Google, Stripe and Cloudflare may also transfer data to the United States.
14. Data security
We employ technical and organisational security measures to protect your data against manipulation, loss or unauthorised access. Our security measures are continuously improved in line with technological developments.
15. Your rights
You have the right to:
- Information about your stored data
- Correction of inaccurate data
- Deletion of your data
- Restriction of processing
- Data portability
- Object to audience measurement (section 7)
Write to us at info@einbuergerungsquiz.ch to exercise your rights. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).
16. Retention period
We only store your data for as long as necessary to fulfil the purposes stated or for as long as statutory retention periods apply.
17. Changes
We reserve the right to amend this privacy policy to reflect changed legal requirements or changes to the service.