Cookie Explanation

Our website also uses so-called cookies. These are small text files whose information is stored on the end device (e.g. smartphone) or in the browser when a website is called up in the Internet browser. Among other things, they can be read by the web server of such a website. Cookies are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on the end device. Session cookies are automatically deleted at the end of your visit to the website. Persistent cookies (e.g. selected language version “German”) remain stored on your device until you delete them yourself, revoke your consent to the use of cookies or activate automatic deletion when you close the web browser on your device.

Some of our cookies are so-called functional cookies (hereinafter also referred to as “necessary cookies”) for the technical provision of the website. These are necessary so that we can provide you with the functions and enable you to use our website as fully as possible. The processing is based on the legal basis of the performance of the contract for the processing of cookies or on our legitimate interest in the technically error-free and optimized provision of our website and its services (performance of the contract pursuant to Art. 6 para. 1 lit. b GDPR and our legitimate interest pursuant to lit. f GDPR).

We also use the web analysis and tracking cookies described below, which are divided into “preference cookies”, “statistics cookies” and “marketing cookies”. These are technically unnecessary cookies that are not required for the actual operation of the website, but which can record and evaluate user behavior and help website operators to improve the website and offers. Their use requires your prior express consent; if consent to the storage of cookies has been requested and granted, they will be processed exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR). You can informally revoke your consent to the use of these cookies at any time without giving reasons (see “Your rights” below).

Preference cookies allow a website to remember certain information and settings that affect the behavior or settings of the website itself, such as your preferred language. Without your consent, this will not affect the regular use of our website, but it may make browsing the site less functional.

Statistical cookies help us understand how visitors interact with our website. They allow us to count website visits, track behavior, and determine traffic sources, among other things. This allows us to measure and improve the performance of our website. Without your consent, the regular use of our website will not be affected, but we will not be able to adapt it to the needs of our website visitors or detect any errors.

Marketing cookies are used to select the advertising displayed to you on our website. This allows us to capture and evaluate your interests when visiting the website in order to target advertising to a website user.

You can revoke your previously given consent to the use of cookies at any time without giving reasons and delete cookies using the "Empty Cache" function. However, if you would like to avoid the use of cookies in advance, you can, for example, deactivate/block or restrict the saving/storing of cookies in your browser (e.g., restrict third-party cookies), or set your web browser to notify you as soon as a cookie is sent. Blocking cookies may result in the website's functions being used only to a limited extent.

Below you will find an overview of the cookies used on our website that require your consent and a detailed description of their respective providers (third-party cookies). A third-party cookie is a cookie that is placed on our website but does not originate from the actual domain visited by the website user, but from another address or an external provider whose services we use. We use third-party providers, among others, who may process your data in the USA. In this context, we would like to point out that the European Commission does not currently certify an adequate level of EU data protection in the USA, and corresponding protection cannot therefore be guaranteed here:

1. Google Analytics

We use Google Analytics, a web analytics tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses a tracking code to create a random, unique ID linked to your browser cookie. This allows you to be recognized as a new user or, if you visit our website again, as a "returning" user. The collected data is stored together with this user ID. Interactions made by a website user through the use of the Bluecode website (e.g., clicking on a link) are measured and stored on our website using cookies and app instance IDs, and then sent to the Google Analytics servers and stored there.

After Google has processed your data, we receive reports about your user behavior on our website (target groups, ads, etc.).

We use Google Analytics to analyze and regularly improve the use of our website. Using the statistics obtained, we can improve our offering and make it more interesting for you as a user (the legal basis is your consent to the use of third-party cookies in accordance with Art. 6 (1) (a) GDPR, as well as our legitimate interest in analyzing website visitor behavior for the continuous optimization and improvement of our website in accordance with Art. 6 (1) (f) GDPR).

You can deactivate the processing of your data in Google Analytics by downloading and installing a corresponding browser add-on: https://support.google.com/analytics/answer/181881?hl=en. However, deactivation only applies to data collection by Google Analytics.

Further information on Google's terms of use, data protection, and the legal framework for data transfers (standard contractual clauses, adequacy decisions) can be found here: https://policies.google.com/?hl=de&gl=de and at https://policies.google.com/privacy/frameworks?hl=de.

We use Google Tag Manager as part of Google Analytics. This is a solution for organizing the individual tracking tools, which allows us to centrally integrate and manage code sections (tags) of tracking tools that we use on our website. The tags can, among other things, track your activities on our website, collect browser data, and integrate buttons. The data collected shows us what interests our website users most and where we can improve our services. Google Tag Manager itself does not collect any personal data and does not set any cookies itself (a "cookieless" domain). It acts as a mere "administrator" of the implemented 7 tags. The tool triggers other tags, which in turn may collect data that Google Tag Manager does not access. (The legal basis is your consent in accordance with Art. 6 (1) (a) and our legitimate interest in improving our offering and our website technically and economically by analyzing the behavior of website visitors (Art. 6 (1) (f) GDPR).

2. Youtube

Our website may use plug-ins from the YouTube site operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. With the help of our embedded YouTube videos, we provide you with additional content in addition to text and images. When you visit our website equipped with a YouTube plug-in, YouTube sets at least one cookie that stores your IP address and our URL as soon as you start playing a video. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, YouTube can assign your interactions on our website to your profile using cookies. This includes data such as session duration, technical information such as browser type, screen resolution, etc. Other data may include any ratings, sharing content via social media, or adding content to your favorites on YouTube. If you are not logged into your account, only data with a unique identifier linked to your device, browser, or app (e.g., preferred language) will be retained. However, much interaction data will not be saved because fewer cookies are set. (The legal basis is your consent to the use of third-party cookies in accordance with Art. 6 (1) (a) GDPR and our legitimate interest in optimizing our website to offer you a positive user experience in accordance with Art. 6 (1) (f) GDPR). Further information on how user data is handled can be found here: https://policies.google.com/privacy?hl=en.

3. Facebook Pixel

We use the "visitor action pixel" from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") on our website. This allows us to track the actions of website users who have seen or clicked on a Facebook ad and reached our website. When the Facebook pixel is triggered, it stores your actions on our website in one or more cookies, which allow Facebook to compare data such as your IP address with the data from your Facebook account. Facebook then deletes this data. This allows us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected is anonymous and not visible to us, meaning we do not know the personal data of individual website users. The data is only used in the context of placed advertisements. If you are logged into your Facebook account, your visit to our website will be automatically assigned to your Facebook account. (The legal basis is your consent to the use of third-party cookies in accordance with Art. 6 (1) (a) GDPR and our legitimate interest in better adapting our website advertising measures to your wishes and interests in accordance with Art. 6 (1) (f) GDPR). Facebook can link the data to your Facebook account and also use it for its own advertising purposes, in accordance with Facebook's data protection guidelines and legal framework for data transfers (standard contractual clauses, adequacy decisions) https://www.facebook.com/about/privacy/ and https://www.facebook.com/business/gdpr.

4. OpenStreetMap

We use map sections from the online map tool “OpenStreetMap” on our website, provided by the OpenStreetMap Foundation, St. John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, UK. This is a free world map that was digitally created by users themselves. When you use this function, information about your interactions with the digital map, your IP address, browser data, device type, operating system, and the day and time of use of the service is collected and transmitted to OpenStreetMap and stored there. Tracking software is used to record user interactions. The service provider specifies the analysis tool “Piwik” for this purpose. The service provider does not pass on personal data to third parties unless there is a legal requirement. The third-party provider “Piwik” does store your IP address, but only in abbreviated form. Using this map service, we can show you the acceptance points that accept Bluecode as a payment method. (The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR, as well as our legitimate interest in optimizing our online service in accordance with Art. 6 (1) (f) GDPR).

For more information, please see the OpenStreetMap Foundation’s privacy policy:
https://wiki.osmfoundation.org/wiki/Privacy_Policy.

We offer a newsletter in which we would like to regularly inform you about current Bluecode events and offers. To receive the newsletter, you must provide your email address. By agreeing to receive the newsletter, you consent to its receipt. (The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR).

You can revoke your consent to receive the newsletter or unsubscribe at any time without giving reasons at the end of each newsletter. Upon revocation, your personal data will be deleted immediately.

Data Processing for Applications

If you apply to us in writing, by email, or via contact form, we will process your personal data for the purpose of initiating an employment relationship. If we wish to process your data for other purposes, we will separately request your consent. This may be done, for example, to maintain records so that we can use your data for future and similar job advertisements (the legal basis is your consent in accordance with Art. 6 (1) (a) GDPR).

In the case of applications, your personal data will generally be deleted 6 months after the end of the application process, unless you have expressly stated that we may keep your documents on file. If you accept the position for which you applied, we will process the personal data you provided during the application process within the scope of the employment relationship and only for as long as statutory retention periods require.

Automated Decision-Making

Automatisierte Entscheidungen bedeuten, dass eine Entscheidung, die Sie betrifft, automatisch auf der Grundlage einer Computerbestimmung (unter Verwendung von Softwarealgorithmen) ohne unsere menschliche Überprüfung getroffen wird. ImZusammenhang mit dem Bluecode System erfolgen keine automatisierten Entscheidungsfindungen.

Security

We have taken technical and organizational security measures to protect your personal data from loss, destruction, manipulation, and unauthorized access. All our employees and all third parties involved in data processing are obligated to comply with data protection law and treat personal data confidentially.

When personal data is collected and processed, the information is transmitted in encrypted form to prevent misuse by third parties. Our security measures are continuously revised in line with technological developments.

Your Rights

As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:

• Information: According to Art. 15 GDPR, you have the right to request information about whether and, if so, to what extent we process personal data concerning you.
• Correction: You have the right to request that we correct your data in accordance with Art. 16 GDPR.
• Erasure: You have the right to request that we erase your personal data in accordance with Art. 17 GDPR.
• Restriction: You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
• Data portability: You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format and to transmit this data to another controller.
• Revocation of consent: If you have given us separate consent to data processing, you can revoke this consent at any time in accordance with Art. 7 (3) GDPR. Such a revocation does not affect the legality of the processing carried out based on the consent up to the time of revocation.
• Right of objection: In accordance with Art. 21 GDPR, you have the right to object to any processing based on the legal basis of Art. 6 (1) (e) or (f) GDPR. If we process personal data about you for the purpose of direct marketing, you can object to this processing in accordance with Art. 21 (2) and (3) GDPR.

Regarding your data subject rights listed above, as well as questions regarding the collection, processing or use of personal data, please contact:

• office@bluecode.com / datenschutz@spt-payments.com

‍We will provide you with the relevant information about the measures promptly, and in any event within one month of receiving your request. This period may be extended by a further two months if necessary due to the complexity and number of requests. However, we will inform you of any possible extension and the reasons for it within one month of receiving your request.

You also have the option of filing a complaint with the competent national data protection supervisory authority. The data protection supervisory authority responsible for us is the Swiss Data Protection Authority.