Privacy policy
Thank you for visiting our website newaydata.com and for your interest in our company. The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us. Our data protection practice is in accordance with the legal regulations of the Liechtenstein Data Protection Act (Datenschutzgesetz, DSG), which implements the General Data Protection Regulation (GDPR). The following data protection declaration serves to fulfil the information obligations arising from the DSG and the GDPR. These can be found, for example, in Articles 13 and 14 of the GDPR.
Owner
The data controller within the meaning of Article 4 (7) of the General Data Protection Regulation (GDPR) is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
With regard to our website, the owner:
Neway Data AG
Gewerbeweg 6
9486 Schaanwald
Liechtenstein
E-mail: office@newaydata.com
Phone: +41 78 261 73 13
Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the device (e.g. computer, mobile phone, tablet, etc.) used to access it.
What personal data is collected and to what extent is it processed?
(1) Information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user’s system accessed our website (referrer tracking);
(8) Message whether the retrieval was successful;
(9) Amount of data transmitted
This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, so that individual site visitors cannot be identified.
Legal basis for the processing of personal data
Personal data is processed in accordance with the principles of lawfulness, fairness, and transparency (Article 5(1)(a) of the General Data Protection Regulation (GDPR)).
Purpose of data processing
The temporary (automated) storage of data is necessary for the course of a website visit in order to enable delivery of the website. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat abuse and eliminate malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimise the website and to generally ensure the security of our information technology systems.
Duration of storage
The deletion of the aforementioned technical data takes place as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.
Possibility of restriction, objection, correction and deletion
You can request correction or deletion of the data at any time. You can find out what rights you have and how to exercise them at the bottom of this privacy policy.
Special functions of the website
Our site offers you various functions, during the use of which personal data is collected, processed and stored by us. We explain below what happens to this data:
Booking request form
- Scope of the processing of personal data: We will process the data you enter in our booking request form (date, number of persons, etc.) to fulfil the following purpose.
- Legal basis for the processing of personal data: Personal data is processed in accordance with the principles of lawfulness, fairness, and transparency (Article 5(1)(a) of the General Data Protection Regulation (GDPR)).
- Purpose of data processing:: A pre-contractual exchange of information is necessary in order to check your booking so that we can prepare for the possible conclusion of a contract at a later date.
- Duration of storage: The data is deleted as soon as it is no longer required for processing the booking and there are no longer any legal retention obligations.
- Necessity of providing personal data: The information in the booking request form is required in order to process your booking properly. If you do not fill in the required fields or do not fill them in completely, we will not be able to process your booking request.
Contact form(s)
- What personal data is collected and to what extent is it processed: The data you have entered in our contact forms, which you have entered in the input mask of the contact form.
- Legal basis for the processing of personal data: Personal data is processed in accordance with the principles of lawfulness, fairness, and transparency (Article 5(1)(a) of the General Data Protection Regulation (GDPR))
- Purpose of data processing: We will only use the data collected via our contact form or contact forms for processing the specific contact request received through the contact form. Please note that in order to fulfil your contact request, we may also send you e-mails to the address you have provided. The purpose of this is so that you can receive confirmation from us that your enquiry has been correctly forwarded to us. However, the sending of this confirmation e-mail is not obligatory for us and is only for your information.
- Duration of storage: After processing your request, the collected data will be deleted immediately, unless there are legal retention periods.
- Possibility of restriction, objection, correction and deletion: You can request correction or deletion of the data at any time. You can find out what rights you have and how to exercise them at the bottom of this privacy policy.
- Necessity of providing personal data: The use of the contact forms is on a voluntary basis. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our website. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the required information on the contact form, you will either not be able to send the enquiry or we will not be able to process your enquiry due to a lack of information.
Newsletter registration form
- What personal data is collected and to what extent is it processed: By registering for the newsletter on our website, we receive the e-mail address entered by you in the registration field and, if applicable, further contact data, provided that you communicate this to us via the newsletter registration form.
- Legal basis for the processing of personal data: Personal data is processed in accordance with the principles of lawfulness, fairness, and transparency (Article 5(1)(a) of the General Data Protection Regulation (GDPR))
- Purpose of data processing: The data recorded in the registration form for our newsletter will be used by us exclusively for sending our newsletter, in which we inform you about all our services and news. After registration, we will send you a confirmation email containing a link that you must click to complete the registration for our newsletter (double opt-in). By doing so, you give your consent to data processing in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).
- Duration of storage: You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after unsubscribing, provided that there are no legal retention obligations. Likewise, your data will be deleted by us immediately in the event that your subscription is not completed. We reserve the right to delete without giving reasons and without prior or subsequent information.
- Possibility of restriction, objection, correction and deletion: You can request correction or deletion of the data at any time. You can find out what rights you have and how to exercise them at the bottom of this privacy policy.
- Necessity of providing personal data: If you would like to use our newsletter, you must fill in the fields marked as mandatory and confirm your e-mail address by clicking on the double opt-in link. The newsletter registration details are necessary in order to be able to make use of the newsletter offer. The information is used exclusively for sending our newsletter. If you do not fill in the mandatory fields, we will not be able to provide you with our newsletter service.
Disclosure of information to third parties
Personal data is processed in accordance with the principles of lawfulness, fairness, and transparency (Article 5(1)(a) of the General Data Protection Regulation (GDPR)).
The disclosure of personal data to third parties occurs only when this is necessary for the purposes of our website activities or our business model described below, and always based on a valid legal ground as defined in Article 6 GDPR.
We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. All data is treated confidentially and with integrity.
Exceptions to this principle of limited disclosure include the transfer of personal data:
- to debt collection service providers for the enforcement of outstanding claims, based on our legitimate interests (Article 6(1)(f) GDPR) or for the performance of a contract (Article 6(1)(b) GDPR);
- to public bodies, authorities, and private individuals who are legally entitled to receive such data due to statutory provisions, court decisions, or official orders, based on a legal obligation (Article 6(1)(c) GDPR);
- to authorities for the purpose of initiating legal proceedings or for law enforcement purposes, particularly when this is necessary for the establishment, exercise, or defence of legal claims (Article 9(2)(f) GDPR for special categories of data, or Article 6(1)(f) GDPR for general data).
Integration of external web services and processing of data outside the EU
On our website, we use active content from external providers, so-called web services. By calling up our website, these external providers may receive personal information about your visit to our website. This may involve processing of data outside of Switzerland. You can prevent this by installing an appropriate browser plug-in or deactivating the execution of scripts in your browser. This may result in functional restrictions on Internet pages that you visit. We use the following services:
Data security and data protection, communication by e-mail
Your personal data is protected by technical and organisational measures during collection, storage and processing so that it is not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal service for information requiring a high level of confidentiality.
Duration of data storage and rights of the data subject
Duration of storage
We store personal data only to the extent and for as long as necessary to fulfil the purposes for which the personal data was collected, we have a legitimate overriding interest in retaining the data or are legally obliged to do so.
Right to information
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed by us. If this is the case, you have the right to access the personal data and the information specified in Article 15 of the General Data Protection Regulation (GDPR). We will also be happy to provide you with a copy of the data.
Right of rectification
Pursuant to Article 16 of the General Data Protection Regulation (GDPR), you have the right to demand the rectification of inaccurate personal data stored by us (e.g., address, name, etc.). You also have the right to request the completion of incomplete personal data. Any corresponding adjustment will be made without undue delay.
Right to erasure
You have the right to have us delete the personal data we have collected about you if
- the data is either no longer required;
- the legal basis for processing has ceased to exist without replacement due to the revocation of your consent;
- there are no longer any legitimate reasons for processing the data;
- Your data is being processed unlawfully;
- a legal obligation requires this.
The right does not exist if
- the processing is necessary for the exercise of the right to freedom of expression and information;
- Your data has been collected on the basis of a legal obligation;
- processing is necessary for reasons of public interest;
- the data is necessary for the assertion, exercise or defence of legal claims.
Right of withdrawal
If you have given us your express consent to process your personal data (in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR)), you may withdraw this consent at any time. Please note that the lawfulness of processing based on consent before its withdrawal remains unaffected. Data for which we are legally obliged to retain will be deleted after the expiration of the statutory retention period.
How do you exercise your rights?
You can exercise your rights at any time by contacting us using the contact details below:
Neway Data AG
Gewerbeweg 6
9486 Schaanwald
Liechtenstein
E-mail: office@newaydata.com
Phone: +41 78 261 73 13
Right to data portability
Upon your request, we will provide you with the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. This applies to data that has been processed by automated means and is based on:
- your consent (in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR)); or
- a contract to which you are party (in accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR)).
Where technically feasible, we will also transfer this personal data directly to another controller of your choice. Please note that the exercise of this right shall not adversely affect the rights and freedoms of others (Article 20(4) GDPR).
Right to Lodge a Complaint with the Supervisory Authority and Right to an Effective Judicial Remedy
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the General Data Protection Regulation (GDPR). This right is stipulated in Article 77 of the General Data Protection Regulation (GDPR).
The supervisory authority for data protection in Liechtenstein is the Datenschutzstelle (DSS). For further information or to file a complaint, please visit their website or contact them directly:
Datenschutzstelle (DSS)
Kirchstrasse 8
Postfach 684
FL-9490 Vaduz
Website: https://www.datenschutzstelle.li/
Furthermore, you have the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning you. This right is provided for in Article 78 GDPR.
You also have the right to an effective judicial remedy where you consider that your rights under the GDPR have been infringed as a result of the processing of your personal data in non-compliance with the GDPR, without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority. This right is provided for in Article 79 GDPR.