Privacy Notice

Effective date: 240726

This Privacy Notice describes our practices in connection with Personal Data that we or our service providers collect through our Services operated and controlled by us.

By using our Services, you will likely be sharing Personal Data / Personal Information pertaining to you with us. Essentially, you’re trusting us with your information. We understand this is a big responsibility and work hard to protect your information and put you in control.

This Privacy Notice is meant to help you understand what Personal Data we Process (collect, access, transform, host and share), under which Purpose and Scope we do this, and which 3rd parties may have access. It also explains how you can update, manage, export, and delete your information. We do not share your personal information with any third party.

What we do

We build, operate, and maintain a range of Services that help our Corporate Clients and Customers, Partners, and Prospects improve and distribute their content, simplify business processes, and gain insight into their audiences’ needs. Our Services include:

• Sites, apps, and subscriptions such as: BoxOnline.com, Break-Even Analysis, and LaserLINX.
• Platforms like KinetiZine and 123.ch.
• Products that are integrated into apps such as: Sonic Medicine and The Unbeatable Goal Workbook.

hereinafter the “Services”.

The Company

Definitions

Personal Data
Any identifier that either on its own (e.g. social security number) or where cross-referenced with other data enables the identification of a specific natural person (e.g. name combined with email address).

Data Controller
The data controller determines the purposes for which and the means by which personal data is processed. So, if your company/ organization decides ‘why’ and ‘how’ the personal data should be processed it is the data controller. Employees processing personal data within your organization do so to fulfill your tasks as data controller. Ref. https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/obligations/controllerprocessor/what-data-controller-or-data-processor_en#:~:text=The%20data%20controller%20determines%20the,it%20is%20the%20data%20controller.

Processing
Any operation or set of operations performed on Personal Data or on sets of Personal Data (collection, access, transformation, hosting and sharing).

Data Subject
A natural person whose Personal Data is being Processed.

Child
A natural person under 18 years of age.

We/us/our (either capitalized or not)
BOX Ventures LLC employees both full and part-time.

Site (capitalized, singular or plural)
The Web Site(s) we operate

Service
Our subscriptions, consulting services, Sites, Apps, software, and digital platforms.

User
A client using one or more of our Services.

User’s Content
Any content uploaded by a User to the Service.

KDF
An acronym for "Knowledge Development Framework," which is defined as a sharable, optionally interactive document used for sales and marketing purposes, designed to provide relevant communication, outstanding deliverability, and profound intel. The copyright for the content within each KDF is owned and held by the respective copyright holder of that content.

LaserLINK
A unique URL generated by our Service that allows users to securely share KDF content as a link, rather than as an attachment.

Your Rights as the Data Subject under applicable Personal Data Protection Law

The Data Subject has the following rights:

1. Right to information
   You have the right to know whether your Personal Data is being processed; what data is gathered, from where it is obtained and why and by whom it is processed.
2. Right to access
   You have the right to access the data collected from / about you. This includes your right to request and obtain a copy of your Personal Data under Processing by us.
3. Right to rectification
   You have the right to request rectification of your Personal Data that is inaccurate or incomplete.
4. Right to erasure
   You have the right to request that we delete your data from our records.
5. Right to restrict processing
   You have the right to request the restriction of the Processing of your Personal Data.
6. Right to object to processing
   You have the right to object to Processing of your Personal Data, for example in the case of direct marketing.
7. Right to object to automated Processing
   You have the right to object to automated Processing, including profiling; and not to be subject to a decision based solely on automated Processing.
8. Right to data portability
   You have the right to obtain your Personal Data in a machine-readable format provided you are not already in possession of such Personal Data.
9. Right to lodge a complaint
   You have the Right to submit a complaint with regard to the Processing of your Personal Data by us both towards us or the Supervisory Authority of your country / state. 

Additionally, it's important to understand that these Rights are not absolute. There are potentially circumstances where the exercise of such Rights may be constrained or even not met.

Also, please note that your consent to the processing of your personal data is not irreversible. You have the right to withdraw your consent at any time. However, be aware that withdrawing consent may have consequences, as it could affect our ability to continue processing your personal data that is essential for providing the services to you.

You may exercise your Rights by emailing DPO@BoxOnline.com

Data We Gather

We collect data from you, including without limitation through our interactions with you, our events, sales, and marketing activities, and through our Services. Some of this data is provided by you directly, and we get some of it by collecting data about your interactions, use, and experiences with our Services. The data we collect depends on the context of your interactions with us and the choices you make, including your privacy settings, the Services, and features you use. We also obtain data about you from third parties. The data we collect from you alone or in combination with other data could be used to identify you.

Similar to other commercial Web sites, our Services may utilize a standard technology called "cookies" (see explanation below in the section titled: "Cookies & Similar Technologies") and Web server logs to collect information about how our Services are used. Information gathered through cookies and Web server logs may include the date and time of visits, the pages viewed, your IP address, time spent on our Site(s), the Web site(s) that brought you to our Site, and the Web site you visited by clicking on a link placed on one of our Sites.

To access certain Services, you are required to provide specific Personal Data. If you do not provide the necessary data, you may be unable to use the corresponding service or feature. Additionally, in cases where Personal Data collection is legally mandated or essential for entering into or fulfilling a contract with you, failure to provide this data likely means we cannot proceed with the contract. This may also lead to suspension or cancellation of a current service you are using. We will inform you if such a situation arises. Please note that in cases where providing the data is optional, and you choose not to share your personal data, you will likely not be able to use features that rely on this data, such as personalization services.

Collection of Personal Data

Personal Data you have provided us with
Examples: e-mail address, name, phone number, billing address etc… which is necessary for delivering a product or Service to you..

If you access a KDF via one of our Sites, any of our social media posts, email, or any other means, please be aware that we may collect certain Personal Data about you.

Information from third parties
If you access a KDF from a third party and that KDF is hosted on our platform, please be aware that our Corporate Clients or Customers, who are the proprietors of the KDF content, may collect certain Personal Data about you. 

You are advised to review and consult the Privacy Notices or Privacy Policies of the respective Corporate Client or Customer, as they are the Data Controller. We serve as a Data Processor on their behalf. This means that our Corporate Client or Customer, who provided you with a LaserLINK, is solely responsible for determining the purpose and scope of Processing your Personal Data during your interaction with the KDF on our platform.

When the scope of our Services involves the Processing of Personal Data, it potentially includes the following types of data:

Name and contact data
Your first and last name, email address, postal address, phone number, and other similar contact data.

Credentials
Passwords, password hints, and similar security information used for authentication and account access.

Demographic data
Data about you such as your location, country, town, and preferred language.

Subscription and licensing data
Information about your subscriptions, licenses, and other entitlements.

Interactions
Data pertaining to your use of our Services. When you enter search queries, the data is provided by you to access specific features of our Service. In other instances, such as error reporting, the data is generated by us. Other examples of interaction data include:

• Device and usage data
  Data about your device, the service, and features you use, including information about your hardware and software, how our service  performs, as well as your settings. For example:
  • Payment and Account History
    Data about the items you purchase and activities associated with your account.
  • Browse History
    Data about the KDFs and Web pages you visit by clicking on links in a KDF.
  • Device, connectivity, and configuration data
    Data about your device, your device configuration, and network provider. For example, data about the operating systems, software installed on your device, IP address, regional settings, and language settings. 
  • Error reports and performance data
    Data about the performance of the services and any problems you experience, including error reports. Error reports (sometimes called “crash logs”) can include details of the software or hardware related to an error, contents of files opened when an error occurred, and data about other software on your device.
  • Troubleshooting and Help Data
    Data you provide when you contact us for help, such as the products and services you use, and other details that help us provide support. For example, contact or authentication data, the content of your chats and other communications with us, data about the condition of your device, and the products you use related to your help inquiry. When you contact us, such as for customer support, phone conversations or chat sessions with our representatives, the conversation may be monitored and recorded.
• Content consumption data
  Information about the content you engage with and access through our Services.
• Searches and commands
  Search queries and commands you use within search or related functionality.
• Text and typing data
  Text and typing data and related information.
• Images
  Images, videos, animations and related information
• Contacts and relationships
  Data about your contacts and relationships if you use a product or service to share information with others, communicate with others, or improve your productivity.
• Social data
  Information about your relationships and interactions between you, other people, and organizations, such as types of engagement (e.g., likes, dislikes, events, etc.) related to people and organizations.
• Location data
  Data about your device’s location, which is typically imprecise. For example, location can be inferred from a device’s IP address. We may send your IP address to a third party such as MaxMind who then provides us with your device’s approximate location on a city or postal code level.
• Other input
  Other inputs provided when you use our products. For example, data such as the links you open, features you engage with, and the length of time you engage with them.
• Content
  Content of a KDF you control and the information you add, input, upload, receive, and create.
• Feedback and ratings
  Information you provide to us and the content of messages you send to us, such as feedback, survey data, and product reviews you write.

Purpose and Scope of Personal Data Processing by us

For information you provide directly to us as a Corporate Client or Customer (e.g. your name and email address), we act as a Controller. For information captured using our services, we act as a Processor. It is important that we all comply with the GDPR when transferring personal data.

When we process Personal Data pertaining to you, we either do it with your Consent or under a contractual obligation with a Corporate Client / Customer acting as the Controller. In particular, where you are a Corporate Client representative or a Customer, we Process Personal Data to:

• Provide information or respond to requests (e.g. when you request a demo, an offer, a proposal, or price information), or register for a webinar or an event we will use your contact information to respond to your request. For EU Data Subjects, such use is necessary to respond to or implement your request;
• Provide our Services, which includes registering your account; updating, securing, and troubleshooting, as well as providing support. It also includes sharing data, when it is required to provide the Service or carry out the transactions you request; providing you with promotional items at your request; and communicating with you regarding those products and Services; communicating and interacting with you; and notifying you of changes to any of our Services;
• Personalization. Some of our Services may include personalized features, such as recommendations that enhance your productivity and enjoyment. These features use automated processes to tailor your experiences based on the data we have about you, such as inferences we make about you and your use of the service, actions taken within a KDF, interests, responses to surveys and polls, and location. For example, depending on your settings, if you view a KDF on your device as you travel, you may see a local language version of that KDF become available. You may also have access to a library of other KDFs recommended as similar to the one you are viewing. Some of our Services provide controls to enable/ disable personalized features;
• Subscription activation. We use data - such as device, application type, location, network, and subscription identifiers - to activate products or features that require activation;
• Complete a transaction (e.g. a purchase);
• Provide access (e.g. to a paid Service);
• Enhance your customer experience;
• Improve and develop our products;
• Fulfill a third party order;
• Fulfill an obligation under law or contract;
• Analyze our performance;
• Develop our workforce;
• Conduct research;
• Help prevent fraud;

In cases where you access a KDF via one or more LaserLINX provided to you by one of our Corporate Clients or Customers, we process Personal Data for the following purposes:

• Enable access to the KDF;
• Register your Consent if required by law, requested by a Corporate Client, or included in a KDF feature such as an opt-in or quid-pro-quo module;
• List your actions within a KDF as you review its content (what you viewed, for how long, what you clicked or tapped, etc.);

Retaining Personal Data

We will retain Personal Data for the duration of an active Services Contract with our Corporate Clients/ Customers, or until they instruct us to erase it, or until such time as our legal obligation to retain the data expires.

Cookies & Similar Technologies

Cookies are small text files placed on your device to store data that can be recalled by a Web server in the domain that placed the cookie. This data often consists of a string of numbers and letters that uniquely identifies your computer, but it can contain other information as well, including Personal Data pertaining to you, which may be sensitive or constitute a risk for you depending on both the purpose of such cookie as the “intentions” of the party that has dropped the Cookie.

By law you have the Right to object to the Processing of your Personal Data by any cookies that are not categorized as 'essential' for the functionality of the Site. 'Essential' cookies are those necessary for the Site to operate and deliver its services without interruption. You may refuse the use of non-essential cookies, as their absence does not impede The Site's core service delivery.

Please use our Cookie Management tool (link in the footer) to accept either all cookies or only essential cookies during your visit. We support the addition of third-party services such as video services which may drop their own cookies.

Third-party cookies

KDFs have the ability to display content from external providers, e.g. YouTube, Vimeo, X, Typeform, Paperform.

To view this third-party content, you first have to accept their specific terms and conditions. This includes their cookie policies, which we have no control over.

If you prefer not to access video and other types of content from third-party sources, you may select the option 'Accept only essential cookies' in our Cookie Management tool. By choosing this option, no third-party cookies will be installed on your device.

Examples of third-party providers that could be embedded into a KDF by us, our Corporate Clients, or Customers.

• Paperform 
• Typeform 
• You Tube 
• Internet Archive 
• Google Maps 
• X 
• Vimeo 
• Microsoft 
• Facebook 
• Google 
• LinkedIn 
• Livestream 
• SoundCloud 
• European Parliament

These third-party services are outside of our control. Providers may, at any time, change their terms of service, purpose and use of cookies, etc.

PLEASE NOTE If you navigate away from our Site (for instance, by clicking a link that directs you to a different Web site), that other Web site will likely use its own cookies. Consequently, the cookie preferences you set on our Site will not apply to any other Web site you visit.

Where We Store and Process Personal Data

We operate servers hosted in major data centers in Switzerland, Germany, the United Kingdom, and the United States. Typically, the primary storage location is in Switzerland or Germany; often with a backup to a data center in a second, legally compliant region. The storage location(s) are chosen in order to operate efficiently, improve performance, and create redundancies in order to protect the data in the event of an outage or other problem. We take steps to ensure that the data we collect under this Privacy Notice is processed according to the provisions of this notice and the requirements of applicable law wherever the data is located.

Children

We do not intentionally process any Personal Data of children. Our Sites, along with the products and services offered through them, are intended for use by individuals who are 18 years of age or older, unless supervised by a parent or legal guardian. Consequently, if it comes to our attention, or if we reasonably suspect that we have collected Personal Data from a child, we will promptly delete such information. This action will be taken irrespective of any existing contractual commitments, in compliance with legal obligations regarding the protection of children's data.

Changes to this Privacy Notice

We reserve the right to make changes to this Privacy Notice. The date of the most recent update is indicated at the top of this document, immediately below its title.