In the course of processing, your personal data may be transferred to companies abroad. These companies are obligated to the same extent to data protection as we are. The transfer can take place worldwide.

If the data protection level does not correspond to that of Switzerland, we conduct a prior risk assessment and ensure contractually that the same protection as in Switzerland is guaranteed (e.g., through the new standard contractual clauses of the EU Commission or other legally mandated measures). If our risk assessment is negative, we take additional technical measures to protect your data. You can retrieve the EU Commission’s standard contractual clauses at the following link: https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de.

3.5 How Long Do We Keep Your Data?

We store personal data only as long as necessary to fulfill the purposes for which the data was collected.

Data that we store during your visit to our website is kept for twelve months. An exception applies to analysis and tracking data, which may be kept longer.

We keep contract data longer because we are legally required to do so. We must retain business communications, closed contracts, and booking receipts for up to 10 years. If we no longer need such data from you to perform our services, the data will be blocked and used only for accounting and tax purposes.

3.6 How Do We Protect Your Data?

We will keep your data secure and take all reasonable measures to protect your data from loss, access, misuse, or alterations.

Our contractors and employees who have access to your data are obligated to comply with data protection regulations. In some cases, it may be necessary to forward your requests to affiliated companies. Even in these cases, your data will be treated confidentially.

Within our website, we use the SSL (Secure Socket Layer) procedure in connection with the highest encryption level supported by your browser.

3.7 What Rights Do You Have?

a. Right to Information

You can request information about the data we have stored about you at any time. Please send your request for information along with proof of identity to info@carpe-sol.com.

You also have the right to receive your data in a common file format if we process your data automatically, and if:

• You have given your consent for the processing of this data; or
• You have disclosed data in connection with the conclusion or processing of a contract.

We may restrict or refuse to provide information or data release if this contradicts our legal obligations, legitimate own or public interests, or the interests of a third party.

Processing your request is subject to the legal processing period of 30 days. However, we may extend this period due to high request volume, legal or technical reasons, or because we need more details from you. You will be informed of the extension in a timely manner, at least in text form.

b. Deletion and Correction

You can request the deletion or correction of your data at any time. We may refuse the request if legal regulations require us to retain or maintain the data or if there is an authorization basis that opposes your request.

Please note that exercising your rights may conflict with contractual agreements and may have corresponding impacts on contract execution (e.g., premature termination of the contract or cost consequences).

c. Legal Recourse

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch.

3.8 Changes to the Privacy Policy

We can change this privacy policy at any time. The changes will be published on https://carpe-sol.com/, and you will not be separately informed.