Commitment to Compliance with Data Protection Legislation
Zone of Balance GmbH
Luzernerstrasse 42
5620 Bremgarten
We undertake to comply with the applicable data protection provisions of the revised Swiss Data Protection Act (revDSG) and of the European General Data Protection Regulation (EU GDPR).
The principles for processing personal data are set out, among other places, in Art. 6 revDSG and essentially comprise the following obligations, of which we are aware:
- Personal data may only be processed lawfully.
- They must be processed in good faith and in a proportionate manner.
- Personal data may only be collected for a specific purpose that is recognisable to the data subject; they may only be processed in a manner compatible with that purpose.
- Personal data are destroyed or anonymised as soon as they are no longer required for the purpose of processing.
- Anyone who processes personal data must satisfy themselves as to its accuracy. They must take all appropriate measures to ensure that data which are incorrect or incomplete with regard to the purpose of their collection or processing are corrected, deleted or destroyed. The appropriateness of the measures depends in particular on the type and scope of the processing and on the risk that the processing poses to the personality or fundamental rights of the data subjects.
In particular, we confirm the following:
1. Record of processing activities: If we have 250+ employees (headcount) or process sensitive data on a large scale or carry out high-risk profiling, we maintain a record of our activities.
2. Privacy policy: Any systematic collection of personal data that is not required by law is recorded in the privacy policy (DSE). We draw people's attention to the privacy policy (T&Cs, forms, apps, etc.). The privacy policy is published on our website, provided we have one.
3. Processors: If we entrust an IT provider or anyone else with the processing of our data, we conclude a data processing agreement (DPA).
4. Reporting data security breaches: If the confidentiality, integrity or availability of personal data is breached AND the risk of negative consequences for individuals is high, we report this to the Federal Data Protection and Information Commissioner (FDPIC).
5. Safeguarding the rights of data subjects: We identify the person correctly in advance. We provide a person with information about their own personal data and, on request, certain additional information. Any person may request correction of their data. Any person may request deletion of their data. In certain cases, we are obliged to disclose personal data.
6. Data protection by default: Where we offer privacy settings in apps, on websites, etc., these are preset to the minimum to ensure that the processing of personal data is limited to the minimum necessary for the intended purpose.
7. Confidentiality: Personal data entrusted to us that are necessary for professional purposes are kept confidential, or we clarify in advance that we will not keep the data confidential.
Bremgarten, 9 February 2026
Jennifer Vazquez Thaebthong Zone of Balance GmbH
Spam Protection with Google reCAPTCHA
We have implemented Google reCAPTCHA in forms on our website to verify whether the data entered in the forms comes from human visitors or from machines or automated programmes, also known as "bots". This tool automatically analyses the behaviour of website visitors as soon as they interact with the website, using various pieces of information such as IP address, length of stay and mouse movements. The data processed include usage data such as the web page accessed, the date and time of access and mouse movements, as well as communication data such as IP addresses, browser type and operating system. This processing is directed at website visitors and users of online services. The main purpose of this processing is to prevent misuse of our contact form and thereby increase security. The legal basis for this is our legitimate interest pursuant to Art. 6(1)(1)(f) GDPR. The recipients of the data are Google Ireland Ltd, located at Google Building Gordon House, Barrow St, Dublin 4, Ireland, (https://policies.google.com/privacy) and our website hosting provider. While your personal data are processed within the EU, the retention period for the processed data is determined by Google Ireland Limited. Further information can be found in the Google reCAPTCHA privacy policy: https://policies.google.com/privacy
Website Analytics (Creator Statistics)
When you visit our website, we collect information about your use through a web analytics tool provided by our hosting service. This tool collects and combines your IP address and your user agent, shortens them and stores these data using a hash function. This process creates a visitor identifier that is encrypted with a randomly generated value (SALT) that changes every 24 hours. This method ensures that your IP address cannot be reconstructed from the stored visitor identifier, so that your anonymity is preserved. In addition, we do not combine this information with other data, and it is stored only on the hosting provider's server.
We also process web analytics data, HTTP data and web analytics profile data. The web analytics tool we use creates and stores a web analytics profile containing details about your use of the website, such as page views, visit frequency, time spent on each page and the user agent of your device. This includes usage data (such as websites visited and access times) and communication data (such as browser type, operating system and IP addresses).
By processing these data, we aim to analyse user behaviour in aggregated form in order to improve the presentation and content of our website. The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR), in particular in carrying out web measurements in order to improve our products and our website.
The data collected are shared with our website hosting provider and processed within the EU.