In this Privacy Policy, we, goinsideout (hereinafter referred to as ‘we’ or ‘us’), explain how we collect and otherwise process personal data. This is not an exhaustive description; where applicable, other privacy policies or general terms and conditions, terms of participation and similar documents may govern specific matters. Personal data refers to any information relating to an identified or identifiable individual.

If you provide us with personal data relating to other individuals (e.g. family members, colleagues), please ensure that these individuals are aware of this privacy policy and only disclose their personal data to us if you are authorised to do so and if such personal data is accurate.

This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation (‘GDPR’) and the Swiss Data Protection Act (‘DSG’). However, whether and to what extent these laws apply depends on the individual case.

1.           Data controller

goinsideout, Ledergasse 6, 6375 Beckenried, info@goinsideout.com, is the data controller responsible for the data processing described here, unless otherwise stated in individual cases. If you have any data protection concerns, you can contact us at the above address or via the contact form on our website.

2.           Collection and processing of personal data

We primarily process personal data that we receive from our association members, customers and other partners – and from other individuals involved – in the course of our activities, or that we collect from users whilst operating our websites, apps and other applications.

Where permitted, we also obtain certain data from publicly available sources (e.g. debt collection registers, land registers, commercial registers, the press, the internet) or receive such data from public authorities and other third parties. In addition to the data you provide to us directly, the categories of personal data we receive about you from third parties include, in particular, information from public registers, information we obtain in connection with administrative and judicial proceedings, information relating to your professional roles and activities (so that we can, for example, with your assistance, conclude and process transactions with your employer ), information about you contained in correspondence and meetings with third parties, credit reports (where we conduct business with you personally), information about you provided to us by people in your circle (family, advisers, legal representatives, etc.) so that we can conclude or process contracts with you or involving you (e.g. references, your delivery address, powers of attorney, information relating to compliance with legal requirements such as anti-money laundering and export restrictions, information from our banks, insurance companies, distribution partners and other contractual partners regarding your use of or provision of services (e.g. payments made, purchases made), information about you from the media and the internet (where appropriate in specific cases, e.g. in the context of a job application, press review, marketing/sales, etc.), your addresses and, where applicable, interests and other socio-demographic data (for marketing purposes), data relating to your use of the website (e.g. IP address, MAC address of your smartphone or computer, details of your device and settings, cookies, date and time of your visit, pages and content accessed, functions used, referring website, location data).

3.           Purposes of data processing and legal basis

We use the personal data we collect primarily for our research and association activities, for organising seminars and workshops, for concluding and fulfilling contracts with customers and business partners, and for complying with our legal obligations both in Switzerland and abroad. If you work for such a customer or business partner, your personal data may also be affected in this capacity.

In addition, we process your personal data and that of other individuals, to the extent permitted and where we deem it appropriate, for the following purposes, in which we (and occasionally third parties) have a legitimate interest commensurate with the purpose:

• Offering and further developing our products, services, websites, apps and other platforms on which we operate;

• Communicating with third parties and processing their enquiries (e.g. job applications, media enquiries);

• Reviewing and optimising procedures for needs analysis for the purpose of directly addressing members and customers, as well as collecting personal data from publicly available sources for the purpose of member and customer acquisition;

• Advertising and marketing (including the organisation of events), provided you have not objected to the use of your data (if we send you advertising as an existing customer, you may object to this at any time; we will then place you on a block list to prevent further advertising);

• Market and opinion research, media monitoring;

• Asserting legal claims and defending ourselves in connection with legal disputes and regulatory proceedings;

• Prevention and investigation of criminal offences and other misconduct (e.g. conducting internal investigations, data analysis to combat fraud);

• Ensuring the smooth running of our operations, in particular our IT systems, websites, apps and other platforms;

• Video surveillance to enforce our right to admit or exclude persons from our premises, and other measures relating to IT, building and facility security, and the protection of our members, employees and other individuals, as well as assets belonging to us or entrusted to us (such as access controls, visitor lists, network and email scanners, and telephone recordings);

• The purchase and sale of business units, companies or parts of companies, and other corporate transactions, and the associated transfer of personal data, as well as measures for business management and, where necessary, to comply with legal and regulatory obligations and internal policies.

​

Where you have given us your consent to process your personal data for specific purposes (for example, when you sign up to receive newsletters or undergo a background check), we will process your personal data within the scope of and on the basis of this consent, provided we have no other legal basis and such a basis is required. Consent that has been given may be withdrawn at any time; however, this will not affect any data processing that has already taken place.

4.           Cookies / Tracking and other technologies relating to the use of our website
4.1        Cookies

We typically use ‘cookies’ and similar technologies on our websites and apps to identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you are using when you visit our website or install our app. This enables us to recognise you when you visit this website again or use our app, even if we do not know who you are. In addition to cookies that are used solely during a session and deleted after your visit to the website (‘session cookies’), cookies may also be used to store user preferences and other information for a specific period (e.g. two years) (‘persistent cookies’). However, you can configure your browser to reject cookies, store them only for a single session, or delete them early. Most browsers are set by default to accept cookies. We use persistent cookies to save your user settings (e.g. language, auto-login), to help us better understand how you use our services and content, and to display offers and adverts tailored to you (which may also occur on other companies’ websites; however, these companies will not be informed by us of your identity – even if we ourselves know it – as they will only see that the same user is on their website who has also visited a specific page on our site). Some of the cookies are set by us at , whilst others may be set by contractual partners with whom we collaborate. If you block cookies, certain features (such as language selection, the shopping basket and the ordering process) may no longer work.

By using our websites and apps, and by consenting to receive newsletters and other marketing emails, you agree to the use of these technologies. If you do not wish to do so, you must adjust the settings in your browser or email programme accordingly, or uninstall the app if this cannot be adjusted via the settings.

4.2        Google AnalyticsWe occasionally use Google Analytics or similar services on our websites. This is a service provided by third parties who may be located in any country in the world (in the case of Google Analytics, this is Google Ireland (based in Ireland); Google Ireland relies on Google LLC (based in the USA) as its data processor (both ‘Google’), www.google.com), which enables us to measure and analyse website usage (non-personal data). Permanent cookies set by the service provider are also used for this purpose. We have configured the service so that visitors’ IP addresses are truncated by Google in Europe before being forwarded to the USA, thereby preventing them from being traced. We have disabled the ‘Data sharing’ and ‘Signals’ settings. Although we can assume that the information we share with Google does not constitute personal data for Google, it is possible that Google may use this data for its own purposes to draw conclusions about the identity of visitors, create personal profiles and link this data to these individuals’ Google accounts. Insofar as you have registered with the service provider yourself, the service provider is also aware of you. The processing of your personal data by the service provider is then carried out under the service provider’s responsibility in accordance with its privacy policy. The service provider merely informs us of how our respective website is used (no information about you personally).

4.3        Social Media Plug-InsWe also use so-called plug-ins from social networks such as Facebook, X, YouTube, Pinterest or Instagram on our websites. You can see these in each case (typically via corresponding icons). We have configured these elements so that they are disabled by default. If you enable them (by clicking on them), the operators of the respective social networks may record that you are on our website and where, and may use this information for their own purposes. The processing of your personal data is then carried out under the responsibility of that operator in accordance with its privacy policy. We do not receive any information about you from them.

5.           Data disclosure and data transfer abroadWe disclose personal data to third parties in the course of our association’s and business activities and for the purposes set out in section3 , insofar as this is permitted and we deem it appropriate, whether because they process this data on our behalf or because they wish to use it for their own purposes. This applies in particular to the following parties:

• Our service providers (such as banks and insurance companies), including data processors (such as IT providers);

• Retailers, suppliers, subcontractors and other business partners;

• Customers;

• Domestic and foreign authorities, government bodies or courts;

• The media;

• The general public, including visitors to websites and social media;

• Competitors, industry organisations, associations, organisations and other bodies;

• Other parties in potential or actual legal proceedings;

all of the above collectively as recipients.

​

Some of these recipients are based in Germany, but they may be located anywhere in the world. In particular, you should expect your data to be transferred to all countries in which goinsideout operates, notably other European countries.

If a recipient is located in a country without adequate statutory data protection, we contractually oblige the recipient to comply with the applicable data protection regulations, unless they are already subject to a legally recognised framework for ensuring data protection and we cannot rely on an exemption provision. An exception may apply, for example, in the case of legal proceedings abroad, but also in cases of overriding public interest, or where the performance of a contract requires such disclosure, where you have given your consent, or where the data in question has been made publicly available by you and you have not objected to its processing.

6.           Retention period for personal dataWe process and store your personal data for as long as is necessary to fulfil our contractual and legal obligations or for the purposes otherwise pursued by the processing; this includes, for example, for the duration of your entire membership or business relationship (from the initiation and execution of a contract through to its termination), as well as beyond this period in accordance with statutory retention and documentation obligations. It is possible that personal data may be retained for the period during which claims may be brought against our association and to the extent that we are otherwise legally obliged to do so or where legitimate interests so require (e.g. for evidential and documentation purposes). As soon as your personal data is no longer required for the purposes mentioned above, it will, in principle and where possible, be deleted or anonymised. For operational data (e.g. system logs), shorter retention periods of twelve months or less generally apply.

7.           Data security

We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access and misuse.

8.           Obligation to provide personal data

As part of your membership or our business relationship, you must provide the personal data necessary for the establishment and administration of a membership or business relationship and the fulfilment of the associated statutory or contractual obligations (you are not generally under a legal obligation to provide us with data). Without this data, we will generally not be able to admit you as a member or to conclude or fulfil a contract with you (or the organisation or person you represent). Furthermore, the website cannot be used if certain details required to secure data transmission (such as your IP address) are not disclosed.

9.           Rights of the data subject

Under the data protection legislation applicable to you and to the extent provided for therein (such as under the GDPR), you have the right to access, rectification, erasure, the right to restrict data processing and, in other cases, to object to our data processing activities – in particular those carried out for direct marketing purposes and other legitimate interests in processing – as well as the right to receive certain personal data for the purpose of transferring it to another organisation (so-called data portability). Please note, however, that we reserve the right to invoke the restrictions provided for by law, for example where we are obliged to retain or process certain data, have an overriding interest in doing so (insofar as we are permitted to rely on this), or require such data to assert claims. Should any costs be incurred by you, we will inform you in advance. We have already provided information on the possibility of withdrawing your consent in section3 . Please note that exercising these rights may conflict with statutory obligations or contractual agreements and may have consequences such as, for example, early termination of the contract or financial implications. In such cases, we will inform you in advance, unless this is already regulated by contract.

Exercising such rights generally requires you to provide clear proof of your identity (e.g. by providing a copy of your ID if your identity is otherwise unclear or cannot be verified). To exercise your rights, you may contact us at the address given in section1 .

Furthermore, every data subject has the right to seek legal redress or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

10.      Changes
We may amend this privacy policy at any time without prior notice. The current version published on our website shall apply. Where the privacy policy forms part of an agreement with you, we will inform you of any changes by email or by other appropriate means in the event of an update.