Privacy policy
1. An overview of data protection
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy set out below this text.
Data collection on this website
Who is responsible for the data collection on this website?
Data on this website is processed by the website operator. Their contact details can be found in the section “Information about the controller” in this privacy policy.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may, for example, be data you enter in a contact form or provide when placing an order.
Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour and for advertising purposes.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. In addition, you have the right to object to the processing of your personal data. You can contact us at any time about this and any other questions on data protection.
Analysis tools and third-party tools
When you visit this website, your browsing behaviour may be statistically analysed. This is done mainly with so-called analysis programs. Detailed information about these analysis programs can be found in the following privacy policy.
2. Hosting
We host the content of our website with the following provider:
External hosting
This website is hosted externally. The personal data collected on this website is stored on the hoster’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data and other data generated via a website.
External hosting serves to fulfil our contracts with potential and existing customers and is in the interest of a secure, fast and efficient provision of our online offering by a professional provider. Our hoster will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions with regard to this data.
We use the following hoster: Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil, Switzerland.
Data processing on our behalf
We have concluded a contract with the above-mentioned provider for the processing of personal data on our behalf. This ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with data protection law.
3. General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.
Applicable law
The processing of your personal data is governed by the Swiss Federal Act on Data Protection (FADP) and the associated Data Protection Ordinance (DPO). If you are located in the European Union, the EU General Data Protection Regulation (GDPR) may also apply.
Information about the controller
The controller responsible for data processing on this website is:
cross performance GmbH
Schanzstrasse 1
8330 Pfäffikon
Switzerland
Phone: +41 (76) 216 07 46
Email: info@crossequip.ch
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses or similar).
Legal basis and lawfulness of data processing
We process your personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Under Swiss law, private persons may process personal data provided that the processing principles – lawfulness, good faith, proportionality, purpose limitation and transparency (Art. 6 FADP) – are observed. Prior consent is generally not required for this; with this privacy policy we inform you transparently about our processing, and you have the right to object to processing at any time.
The storage of information on your device and access to it (e.g. by cookies or comparable technologies) is governed by Art. 45c of the Telecommunications Act (TCA): such processing is permitted if we inform you of its purpose and of your right to refuse it. We provide this information with this privacy policy.
We process sensitive personal data (Art. 5 let. c FADP) only to the extent necessary; where consent is required for this, we obtain it expressly. Where we ask you for consent (e.g. for sending the newsletter), you can withdraw it at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.
Recipients of personal data
In the course of our business activities, we work with various external parties. In some cases, this also requires the disclosure of personal data to these external parties. We only pass on personal data if this is necessary to fulfil a contract, if we are legally obliged to do so (e.g. disclosure to tax authorities), if we have a legitimate interest in the disclosure or if another legal basis permits it. When using processors, we only pass on personal data on the basis of a valid data processing agreement.
Disclosure of personal data abroad
We may disclose personal data to recipients abroad, in particular to the service providers named in this privacy policy (e.g. in the EU/EEA or in the USA). If data is disclosed to a country without an adequate level of data protection, we base this on appropriate safeguards within the meaning of Art. 16 f. FADP – in particular the Standard Contractual Clauses – or on a certification of the recipient under the EU-U.S. Data Privacy Framework and its Swiss extension (“Swiss-U.S. Data Privacy Framework”). For individual processing operations, we indicate the relevant safeguard.
Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.
Your rights
Within the scope of the applicable data protection law, you have the following rights:
- Access (Art. 25 FADP): You have the right to request, free of charge, information on whether and which personal data we process about you.
- Correction (Art. 32 FADP): You can request the correction of inaccurate personal data.
- Deletion or destruction: You can request that we delete your personal data, provided there is no statutory obligation or overriding interest to the contrary.
- Objection: You can object to the processing of your personal data, in particular to processing for advertising purposes.
- Data release and portability (Art. 28 FADP): You can request that we release data you have provided to us in a common electronic format or transfer it to another controller, insofar as this is technically feasible.
To exercise these rights or if you have any further questions about data protection, you can contact the controller named above at any time.
Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern (www.edoeb.admin.ch).
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the lock symbol in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to advertising emails
We hereby object to the use of contact data published as part of our legal notice obligation for sending unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
4. Data collection on this website
Cookies
Our website uses so-called “cookies”. Cookies are small data packages and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are deleted automatically at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.
Cookies can come from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies may be used to analyse user behaviour or for advertising purposes.
The storage of cookies and access to them is permitted under Art. 45c TCA, provided that we inform you of the purpose and how to refuse them. You receive this information with this privacy policy. You can set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Which cookies and services are used on this website can be found in this privacy policy.
Cookie consent tool (GDPR Legal Cookie by Shopify)
Our website uses the tool “GDPR Legal Cookie by Shopify” to enable you to manage the cookies and technologies used and to document your decisions in this regard. The provider of this technology is beeclever GmbH, Friedrich-Mohr-Strasse 1, 56070 Koblenz, Germany.
When you enter our website, a connection is established to the provider’s servers. The provider receives personal data such as the browser used, the IP address and a timestamp. A cookie is then stored in your browser so that your decisions or their withdrawal can be assigned. The data collected in this way is stored until you ask us to delete it, delete the cookie yourself or the purpose for storing it no longer applies. Mandatory statutory retention obligations remain unaffected. Details can be found at: https://apps.shopify.com/gdpr-legal-cookie.
Shopify (shop system)
Our online shop is operated on the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, or Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, Ontario, K2P 2L8, Canada. Shopify provides the technical infrastructure of our shop and processes on our behalf the data arising from your visit and your order (e.g. order, contact and usage data). There is an adequacy decision for Canada; where data is transferred to the USA, we base this on the safeguards named in this privacy policy. Further information can be found in Shopify’s privacy policy at: https://www.shopify.com/legal/privacy.
5. Social media
Elements of the social network Facebook are integrated on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). According to Meta, the data collected is also transferred to the USA and other third countries.
When a social media element is active, a direct connection is established between your device and Meta’s server. Meta thereby receives the information that you have visited this website with your IP address. If you are logged in, Meta can assign the visit to this website to your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Meta.
Insofar as personal data is collected on our website with the help of the elements described here and forwarded to Meta, we and Meta are jointly responsible for this data processing. Joint responsibility is limited exclusively to the collection of the data and its forwarding to Meta. The processing by Meta that takes place after forwarding is not part of the joint responsibility. Our joint obligations have been set out in an agreement, available at: https://www.facebook.com/legal/controller_addendum.
The disclosure to the USA is based on the Standard Contractual Clauses and on Meta’s certification under the EU-U.S. Data Privacy Framework and its Swiss extension. Further information on data protection at Meta can be found at: https://www.facebook.com/privacy/policy.
6. Analysis tools and advertising
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out any independent analyses. It is used only to manage and deliver the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the USA.
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyse the behaviour of website visitors. We receive various usage data, such as page views, length of stay, operating systems used and the user’s origin. In addition, your mouse and scroll movements and clicks may be recorded, among other things. Google Analytics uses technologies that make it possible to recognise the user in order to analyse user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
IP anonymisation is activated; your IP address is shortened before being transferred to the USA. The disclosure to the USA is based on the Standard Contractual Clauses and on Google’s certification under the EU-U.S. Data Privacy Framework and its Swiss extension.
You can prevent the collection of your data by Google by installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. More information can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
Google Analytics e-commerce measurement: This website uses the “e-commerce measurement” function of Google Analytics. This allows us to analyse the purchasing behaviour of website visitors (e.g. orders placed, average order values, shipping costs and the time from viewing to purchasing a product).
Google Ads
We use Google Ads, an online advertising programme of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites (keyword and audience targeting) and to evaluate their success. The disclosure to the USA is based on the Standard Contractual Clauses and on Google’s certification under the EU-U.S. Data Privacy Framework and its Swiss extension.
Meta Pixel (formerly Facebook Pixel)
We use the “Meta Pixel” on our website. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). According to Meta, the data collected is also transferred to the USA and other third countries.
The pixel allows us to track how visitors use our website after reaching us via an advertisement on Facebook or Instagram. In this way, we measure the effectiveness of our ads and optimise them. The pixel processes in particular the following data: your IP address, information about your browser and device, the pages you view and the events triggered (e.g. page view, product view, adding to cart, completed purchase including order value and currency).
You can object to this processing at any time by deactivating the relevant functions in your advertising settings on Facebook and Instagram or by blocking or deleting cookies in your browser. If you do not have an account, you can deactivate usage-based advertising via the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
Meta Conversions API (server-side transmission)
In addition to the pixel, we use Meta’s “Conversions API”. Event and customer data is transmitted directly from our server (via our Shopify infrastructure) to Meta – even if transmission in the browser is restricted (e.g. by an ad blocker). This serves the same measurement and optimisation function as the pixel.
The following is transmitted in particular: time of the event, page viewed, IP address, browser and device information, events triggered and – where available – details of purchased products, cart value and currency. To match the events, contact details are also transmitted in encrypted (hashed) form, namely email address, phone number, first and last name and, where applicable, city and country. Before transmission, this information is made unrecognisable using an irreversible process (hashing) and is used by Meta solely for matching with existing user accounts. A complete overview of the data that can be collected can be found at: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.
Custom Audiences
To target our advertising, we create so-called “Custom Audiences” at Meta:
- From website interactions: audiences created via the pixel or the Conversions API, e.g. visitors in the last 30 or 90 days or people who did not complete a shopping cart.
- From our customer data: for this purpose, we transmit existing customer data (email addresses and/or phone numbers) to Meta in encrypted (hashed) form. Meta matches this with user accounts in order to deliver our ads in a targeted manner or to create comparable audiences (“Lookalike Audiences”). According to Meta, data that does not match is deleted.
Product catalogue and dynamic ads
We transmit data from our product catalogue to Meta in order to run dynamic advertisements. Depending on the products you have viewed before, these automatically show you suitable items from our range (dynamic retargeting).
Joint responsibility and disclosure abroad (Meta tools)
Insofar as personal data is collected on our website via the pixel and the Conversions API and forwarded to Meta, we and Meta are jointly responsible for this data processing. Joint responsibility is limited to the collection of the data and its forwarding to Meta; the subsequent independent processing by Meta is not part of the joint responsibility. The agreement is available at: https://www.facebook.com/legal/controller_addendum. You can assert your data subject rights regarding the data processed by Meta directly with Meta.
The disclosure to the USA is based on the Standard Contractual Clauses and on Meta’s certification under the EU-U.S. Data Privacy Framework and its Swiss extension. Further information can be found at: https://www.facebook.com/privacy/policy.
ChatGPT Ads (OpenAI) – measurement pixel and Conversions API
We run advertisements in ChatGPT and measure their effectiveness with OpenAI’s “Measurement Pixel” and “Conversions API”. The provider is OpenAI; according to OpenAI, the controller for persons in Switzerland and the EEA is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (“OpenAI”). OpenAI processes the data as an independent controller. The data may also be transferred to the USA.
If you reach our website via an ad in ChatGPT, the pixel stores an identifier of this click in a cookie. This allows a later purchase to be attributed to the ad. The pixel processes in particular: pages viewed, products viewed, adding to cart and starting checkout, time, and browser and device information. If the pixel detects contact details on our website, it transmits them exclusively in hashed (unrecognisable) form.
We do not transmit completed purchases from the browser but directly from our server to OpenAI’s Conversions API. The following is transmitted: time, order value (value of goods excluding VAT and shipping) and currency, products purchased, the click identifier, IP address and browser identifier and – for matching – email address, phone number, first and last name in hashed form as well as postal code, city and country. Hashing is an irreversible process; the values are used by OpenAI solely to match conversions with ad clicks. According to OpenAI, this data is currently not used for personalised advertising at user level.
The purpose is to measure the effectiveness of our ads and optimise their delivery. You can object to this processing at any time by blocking or deleting cookies in your browser, or by sending an email to info@crossequip.ch; after that, we will also no longer transmit your orders to OpenAI.
For transfers to the USA, OpenAI relies on the European Commission’s Standard Contractual Clauses with the adjustments required for Switzerland. Further information: https://openai.com/policies/ad-tools-dpa/.
7. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties other than the delivery service provider named below.
The data entered in the newsletter registration form is processed exclusively on the basis of your consent. You can withdraw your consent to the storage of the data, the email address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The lawfulness of the processing operations already carried out remains unaffected by the withdrawal.
The data you provide for the purpose of receiving the newsletter is stored by us or the newsletter service provider until you unsubscribe and is deleted after you cancel the newsletter. After you unsubscribe, your email address may be stored in a blocklist if this is necessary to prevent future mailings. The data from the blocklist is used only for this purpose and is not merged with other data.
Delivery service provider
To send our newsletter, we use Klaviyo, a service of Klaviyo, Inc., 125 Summer Street, 6th Floor, Boston, MA 02110, USA (“Klaviyo”). Your email address and the other data provided for receiving the newsletter are transferred to the USA in the process.
The disclosure to the USA is based on the Standard Contractual Clauses and on Klaviyo’s certification under the EU-U.S. Data Privacy Framework and its Swiss extension. We have concluded an agreement with Klaviyo on the processing of personal data on our behalf. Further information can be found at: https://www.klaviyo.com/legal/privacy-notice .
Newsletter for existing customers
If you order goods or services from us and provide your email address in the process, we may subsequently use this email address to send newsletters. In such a case, the newsletter will only contain direct advertising for our own similar goods or services. This is done within the requirements of the Swiss Federal Act against Unfair Competition (Art. 3 para. 1 let. o UCA). You can cancel this newsletter at any time; every newsletter contains a corresponding link.
8. Plug-ins and tools
YouTube
This website embeds videos from the website YouTube. The operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our pages on which YouTube is embedded, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you have visited. YouTube may store various cookies on your device or use comparable recognition technologies. If you are logged into your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
Further information can be found in YouTube’s privacy policy at: https://policies.google.com/privacy?hl=en.
Google Fonts (local hosting)
For the uniform display of fonts, this site uses so-called Google Fonts provided by Google. The Google Fonts are installed locally. No connection to Google’s servers is made. Further information can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
9. eCommerce and payment service providers
Processing of customer and contract data
We collect, process and use personal data of our customers and contract data to establish, define the content of and amend our contractual relationships. We collect, process and use personal data about the use of this website (usage data) only to the extent necessary to enable you to use the service or to bill you for it. The customer data collected is deleted after completion of the order or termination of the business relationship and expiry of any statutory retention periods.
Data transfer when concluding a contract and shipping goods
When you order goods from us, we pass on your personal data to the transport company entrusted with delivery and to the payment service provider commissioned with processing the payment. Only the data that the respective service provider needs to fulfil its task is passed on. This is done to fulfil the contract concluded with you.
Payment services
We integrate payment services from third-party companies on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, bank details, credit card number) is processed by the payment service provider for the purpose of processing the payment. The respective contractual and data protection provisions of the respective providers apply to these transactions. Where payment data is disclosed abroad, we base this on the safeguards named in this privacy policy (in particular the Standard Contractual Clauses). We use the following payment service providers:
PayPal
The provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Apple Pay
The provider is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. Privacy policy: https://www.apple.com/legal/privacy/en-ww/.
Google Pay
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: https://policies.google.com/privacy.
Mastercard
The provider is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium. Privacy policy: https://www.mastercard.de/de-de/datenschutz.html.
VISA
The provider is Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom. Privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.
10. Own services
Handling applicant data
We offer you the opportunity to apply to us (e.g. by email, by post or via an online application form). Below, we inform you about the scope, purpose and use of the personal data collected during the application process. We assure you that your data is collected, processed and used in accordance with applicable data protection law and that your data is treated in strict confidence.
Scope and purpose of data collection
If you send us an application, we process the associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) to the extent necessary to decide on establishing an employment relationship. Within our company, your personal data is passed on only to persons involved in processing your application. If the application is successful, the data submitted is stored for the purpose of carrying out the employment relationship.
Data retention period
If we cannot offer you a position, you decline a job offer or withdraw your application, we reserve the right to retain the data submitted, based on our legitimate interests, for up to 6 months from the end of the application procedure. The data is then deleted and physical application documents are destroyed. Retention serves in particular as evidence in the event of a legal dispute. Longer retention may take place if you have given your consent or if statutory retention obligations preclude deletion.
Admission to the applicant pool
If we do not make you a job offer, we may be able to admit you to our applicant pool. In case of admission, all documents and information from the application are transferred in order to contact you in case of suitable vacancies. Admission takes place exclusively on the basis of your express consent, which you can withdraw at any time. The data from the applicant pool is irrevocably deleted no later than two years after consent has been given.
11. Use of AI-based services
We use artificial intelligence (AI) services to support internal processes, for example to pre-sort enquiries and prepare replies. This may also involve processing personal data from your enquiries and relating to your orders.
The providers of these services process the data as processors only in accordance with our instructions and not for their own purposes. Processing may also take place in the USA. We base the disclosure to the USA on the Standard Contractual Clauses (see section 3, “Disclosure of personal data abroad”).
Replies to you and changes to your data are approved by a member of our staff. No automated individual decision with legal or similarly significant effects for you takes place.
This is distinct from the measurement of our advertisements in ChatGPT (see section 6, “ChatGPT Ads (OpenAI)”).
12. Badgi Blast – browser game with leaderboard
Nature and purpose of processing
At badgi.crossequip.ch we operate the free browser game “Badgi Blast” with a public leaderboard. You can play without providing any information. Only if you want to see your place on the leaderboard do we collect your first name and email address.
The following is then stored: first name, email address, score achieved, number of rounds played and the time of participation.
The email address is used to identify your entry uniquely – so that several rounds by the same person do not count as several participants – and to contact you if you are among the winners.
What is publicly visible
Only your first name and score appear on the leaderboard. Your email address is never displayed there and is not published in any other way.
Legal basis
The processing takes place in order to carry out the competition in which you participate with your entry. For visitors from the EU, the processing is based on Art. 6(1)(b) GDPR.
Recipients and storage location
The game is operated by Vercel Inc., and the leaderboard is stored in a database of Neon Inc. Both services process the data in data centres within the European Union (Frankfurt am Main). We have concluded data processing agreements with both providers.
Newsletter – voluntary and separate
In the form, you can also tick a box to receive our newsletter. This is voluntary: you receive your rank and your place on the leaderboard regardless.
If you tick the box, we will first send you a confirmation email. Only once you confirm in it will we add you to the mailing list. Without this consent, your data is not transferred to our newsletter service provider. In all other respects, the information in section 7 of this policy applies, in particular regarding withdrawal.
What we do not process
No IP addresses: to slow down automated submissions, we limit the number of submissions per connection. This is done transiently in memory for a maximum of ten minutes; no storage takes place.
No game history: when you submit, we check mathematically whether the reported score matches the course of the game. This information is used exclusively for this check within the same operation and is not stored.
No cookies for analytics or advertising purposes: the game does not set any tracking cookies and does not integrate any analytics or advertising services. Only your sound setting and – for the duration of your visit – your name are stored in your browser so that you do not have to enter it again for another round.
Storage period
We retain the entries for the duration of the current game season and its evaluation and delete them afterwards, unless you have consented to receive the newsletter. Section 7 applies to newsletter data.
Your rights
You can request access, correction or deletion at any time. An informal message to info@crossequip.ch is sufficient. We will then remove your entry from the leaderboard and, if applicable, your profile with the newsletter service provider. In all other respects, the rights under section 3 of this policy apply.
Last updated: October 2026.