Privacy Policy

01Controller

The party responsible for processing personal data on this website is:

LeadoutConcept GmbH
Sunnmatt 6A
6410 Goldau
Switzerland
info@leadoutconcept.com · +41 79 682 59 46

Please send any questions about data protection to this address.

02Hosting and server log files

Our website is hosted by Hostfactory, a label of OptimaNet Schweiz AG, Stationsstrasse 56, 8472 Seuzach, Switzerland, in a data centre in Switzerland. Every time the website is accessed, the web server automatically records the following information in log files:

• IP address of the requesting device
• date and time of the request
• page or file requested and the amount of data transferred
• HTTP status code
• referring website (referrer)
• browser and operating system

We need this data to deliver the website and to keep it secure and stable, for example to detect and investigate attacks. The log files are kept by the hosting provider for a limited period and then deleted; they are not combined with other data. Where the GDPR applies, this processing is based on our legitimate interest (Art. 6(1)(f) GDPR).

The website is delivered exclusively over an encrypted connection (HTTPS).

03Cookies

The public website itself does not set any cookies. Cookies are set only by Google Analytics (see section 5) and, for our staff, by the login to the internal area: after logging in, a technically necessary session cookie (lo_intern) keeps the session; it contains no personal information and is deleted when you log out or close the browser. You can block or delete cookies in your browser settings at any time; the public website remains fully usable without them.

Only the Brunnefinder uses your browser's local storage (see section 6).

04Contact form, email and job applications

If you contact us through the contact form, we process the information you enter — name, email address, subject and message — together with the language version of the page and the time of submission. The form is processed on our web server and sent to us by email; it is not stored in a database. We use the data only to answer your enquiry and any follow-up questions. The same applies when you email us directly.

To protect the form against spam and abuse, the server stores a pseudonymised form of your IP address (a hash calculated with a secret key; the IP address itself is not stored) together with the time of submission. These entries are deleted automatically once they are older than 24 hours. A hidden field and a time check also detect automated submissions; they process no further personal data.

Our email is provided by Microsoft (Microsoft 365), so messages to us — including those sent through the form — are processed on Microsoft's systems (see section 8).

We keep enquiries for as long as necessary to deal with them and to meet any statutory retention obligations, and then delete them. Where the GDPR applies, this processing is based on Art. 6(1)(b) and (f) GDPR.

If you apply by email for a position advertised on our website, we process your application documents and details solely to assess your application and to carry out the application process. If we do not hire you, we delete your documents once the process is complete, unless you agree to our keeping them for longer. Where the GDPR applies, this processing is based on Art. 6(1)(b) GDPR.

05Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to understand how our website is used and to improve it.

Google Analytics uses cookies and similar technologies. It records, for example, which pages you view and for how long, how you reached our website, your approximate location (country, region, city) and information about your device and browser. This information is assigned to a pseudonymous identifier; we do not receive any information that identifies you directly. Google Analytics 4 does not store IP addresses: the IP address transmitted by your browser is only used to determine your approximate location and is then discarded.

Data may also be transferred to Google LLC in the USA (see section 8). Google deletes the data after the retention period set in our account (at most 14 months).

You can prevent the use of Google Analytics by blocking cookies in your browser or by installing Google’s browser add-on to opt out of Google Analytics. For more information, see Google’s privacy policy and its explanation of how Google uses information from sites that use its services.

Where the GDPR applies, this processing is based on our legitimate interest in analysing and improving our website (Art. 6(1)(f) GDPR). You can object at any time as described above.

06Brunnefinder

The Brunnefinder (leadoutconcept.com/brunnefinder/) is a free map of drinking water fountains in Switzerland. It can be used without an account.

Your location. If you allow it in your browser, the Brunnefinder uses your location to centre the map on you and show distances to fountains. Your location is processed only in your browser; it is not sent to us and not stored. When the map loads fountains for the area shown, the coordinates of that area are sent to the OpenStreetMap services listed below.

Contributions. If you add a fountain, we store the name and note you enter, the fountain's position, an optional photo, the time and a random device ID (see below). Before upload, photos are reduced in size in your browser, which removes their metadata, including the location where the photo was taken. Confirmations and reports of fountains that no longer exist are stored with the device ID. Entries are visible to all users of the Brunnefinder; the device ID is not displayed. Please do not include any personal information in notes and photos (for example, recognisable people or number plates). To have an entry removed, report it in the Brunnefinder as no longer existing (it is removed once a second person confirms this) or contact us (see section 1). The data is stored with Supabase (Supabase Inc.) in a data centre in Ireland (EU).

Local storage. The Brunnefinder stores in your browser's local storage a random device ID, which lets it recognise your own entries and prevents you from confirming your own fountains, as well as your language and whether you have closed the introductory tip. This information contains nothing that identifies you and never leaves your device except as the device ID of your contributions. You can delete it at any time in your browser settings.

Services of other providers. To display the map, your browser connects directly to the following providers, which receive your IP address and technical information about your browser:

• map tiles: OpenTopoMap (opentopomap.org, Germany)
• fountain data from OpenStreetMap: Overpass API (overpass-api.de, operated by FOSSGIS e.V., Germany; overpass.kumi.systems as a fallback)
• place search: Nominatim of the OpenStreetMap Foundation (United Kingdom), which receives the search term you enter
• translation of notes into other languages: MyMemory (Translated srl, Italy), which receives the text of the note
• photos of fountains that have a photo linked in OpenStreetMap, loaded when you open such a fountain: usually Wikimedia Commons (Wikimedia Foundation, Inc., USA), occasionally the website where the linked photo is published

The map software and fonts of the Brunnefinder are loaded from our own server.

Where the GDPR applies, this processing is based on our legitimate interest in providing a working map service (Art. 6(1)(f) GDPR); contributions are voluntary and are processed to publish them in the Brunnefinder (Art. 6(1)(b) GDPR).

07Fonts, links and third-party content

All fonts are loaded from our own server; no connection to Google Fonts or any other font service is made.

Our website links to the Instagram profiles of the athletes we represent and to the websites of our clients. These are plain links: no data is transmitted to Instagram (Meta Platforms) or to the linked website until you click one; after that, the privacy policy of the respective provider applies. Apart from the Brunnefinder, we do not embed any other third-party content such as videos or maps.

08Transfers abroad

Our hosting provider stores data in Switzerland. With Google Analytics and Microsoft 365, personal data may also be processed in the EU/EEA and in the USA. The Brunnefinder stores its data in Ireland (EU); the providers it connects to (see section 6) are located in the EU and the United Kingdom, and for photos from Wikimedia Commons in the USA. The EU/EEA and the United Kingdom provide an adequate level of data protection. Transfers to the USA by Google Analytics and Microsoft 365 go to companies certified under the Swiss-U.S. Data Privacy Framework (Google LLC, Microsoft Corporation), for which the Swiss Federal Council has recognised an adequate level of data protection. In addition, the providers use the standard contractual clauses recognised by the FDPIC and the European Commission.

09Your rights

Within the scope of the applicable data protection law, you have the right to request information about the personal data we process about you; to have it corrected or deleted, or its processing restricted; to object to its processing; and to receive your data in a common electronic format. Where processing is based on your consent, you can withdraw it at any time with effect for the future.

To exercise these rights, contact us at the address given in section 1. We may ask you to prove your identity. You also have the right to lodge a complaint with a data protection supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).

10Changes to this policy

We may update this privacy policy when our website or the legal requirements change. The version published on this website applies.