AskMeWhy Privacy Policy

Last updated November 2024.

This privacy policy (the "Privacy Policy") describes the principles according to which AskMeWhy AG (hereinafter referred to as "AskMeWhy", "we" or "the Controller") processes Personal Data collected via our website seamlesswork.com, the platform admin.seamlesswork.one (hereinafter referred to as "the Website"), our Teams app Seamless (hereinafter referred to as "App") or otherwise in connection with our services in relation to Seamless. In particular, it informs you about what Personal Data we collect, for what purposes it is processed, to whom it may be disclosed, how long we keep it and what rights and options you have in connection with the use of your Personal Data. "Personal Data" (hereinafter referred to as "Personal Data") means any information relating to an identified or identifiable natural person, such as name, address, email address, online identifier or telephone number. Whether and to what extent Personal Data within the meaning of the applicable Data Protection Act is given, depends on each and every individual case. "Processing" means any handling of Personal Data, such as obtaining, saving, storing, disclosing or deleting. This Privacy Policy applies to the extent that the processing activities are not subject to other privacy notices or provided for by applicable law. Please read this Privacy Policy carefully. By using our services, you consent to the collection and processing of your Personal Data in accordance with this Privacy Policy. If you provide us with Personal Data of other persons, please provide their Personal Data only if you are authorized to do so in accordance with applicable data protection laws and only if the other person would consent to you providing us with their Personal Data for the purposes of data collection and processing in accordance with our Privacy Policy.

1. Who is responsible for your Personal Data / Contact Information

The legal entity responsible for the processing of Personal Data in accordance with this Privacy Policy is:

AskMeWhy AG
Industriestrasse 47
8152 Glattbrugg | Schweiz
Phone: +41 (0)44 390 14 10
E-mail: hello@askmewhy.com

Website: www.askmewhy.com (opens in a new tab)

As Controller AskMeWhy determines the purposes and means of the processing of your Personal Data and is therefore responsible for the processing and use of your Personal Data in accordance with this Privacy Policy. Where AskMeWhy processes Personal Data as a Processor on behalf of another controller, as the case may be, the Privacy Policy of the respective controller applies.

If you have a technical or general support question, please visit our services page here: https://docs.seamlesswork.com (opens in a new tab). Any other requests regarding the handling of Personal Data please contact us at our email: hello@askmewhy.com or write to the address provided above. If you wish to contact us or anything other than your Personal Data, please visit our contact page provided on our Website.

2. How do we process Personal Data

All Personal Data collected by AskMeWhy is processed in accordance with the provisions of the Swiss Data Protection Act and the European General Data Protection Regulation (GDPR). The General Data Protection Regulation has established itself worldwide as the standard for strong data protection. However, whether and to what extent the GDPR is applicable depends on each individual case. We collect and process Personal Data carefully and for the purposes described in this Privacy Policy. In accordance with applicable law, we may also use your Personal Data in ways other than those described in this Privacy Policy. In this case, we will normally provide specific privacy statements or notices at the time of collection and may seek your consent. Where applicable law permits use of your Personal Data without such notice or consent (e.g. since applicable law explicitly requests processing of your Personal Data or since we have to use your Personal Data to protect overriding interests and such use is permitted by applicable law), such rights remain reserved. We always make reasonable efforts to collect information in anonymous or pseudonymous form so that we cannot identify you.

3. Which Personal Data we collect for which processing purposes

We collect the following Personal Data via our Website or Apps:

3.1 Automatically transmitted Personal Data

AskMeWhy collects and stores information that your browser automatically transmits to us in "server log files" when you visit our Website or our App. The data collection is based on your consent and interest to visit our Website or our App and our legitimate interests to operate them. This may include the following Personal Data:

• Browser type and browser version
• Operating systems used
• Referrer URL (the previously visited website)
• Host name of the accessing computer
• Date and time of server request
• Internet protocol address (IP address)
• Amount of data transferred
• Other similar data and information that serve to avert danger in the event of attacks on our IT systems. We do not combine this Personal Data with Personal Data from other sources. They are stored by us for a short period of time until they are automatically deleted within a period of six months (for more information about the duration of storing of your Personal Data please refer to clause 7 below). This Personal Data is processed for the purpose of the proper functioning and administration of our Website or App, e.g. to establish a connection, to ensure stability and uninterrupted system security, to improve our services, to protect our systems and for statistical purposes in the event of attacks on the network infrastructure on which the Website is provided. These purposes form the legal basis for our legitimate interests (Art. 6 para. 1 lit. f GDPR) to process your Personal Data accordingly.

3.2 Personal Data provided for communication purposes

We collect Personal Data that you actively and voluntarily provide to us, with your consent and/or in advance of a potential contract with us by sending a message to us, e.g. via our contact email address, by mail, telephone or by other communication means. This may include the following Personal Data:

• Identification and address information: such as title, name, first name, company name, employer, position, address, place, location, e-mail address, phone number, language, other information about you;
• Your message, comments or request.

We will use the information you provide to process and respond to your request, or process for the lawful purposes that arise from the circumstances, which may include the following purposes:

• To best answer your questions or requests about our products and services, to ask you questions, and to provide additional information tailored to your request or interests in connection with our products and services;
• To communicate with you (e.g., about our services, including customer service) to schedule appointments and provide you with the best possible information you need from us before, during or after the termination of a contract;
• To comply with legal or other regulatory requirements and internal rules;
• To establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings;
• For other lawful purposes where such processing is apparent from the circumstances or was indicated at the time of collection.

These purposes form the legal basis for our legitimate interests (Art. 6 para. 1 lit. f GDPR), in order to provide you with an optimal service or in advance of a possible conclusion of a contract with you (Art. 6 para. 1 lit. b GDPR).

3.3 Personal Data collected and generated for the provision of our paid services

We collect and generate information when you want to buy our services. This normally includes the following Personal Data only:

• Your email address;
• Status of your subscription with start and end date;
• Other information you may provide upon subscription of the services;
• IDs allocated by the systems to you to identify you as a user;

Please note that use of our App and other services will require that you provide Personal Data to Microsoft (e.g. for accessing and using the App and for the payment process; please also see 3.4 and 3.6 below). You can find the applicable data privacy policies here: www.privacy.microsoft.com/en-us/privacystatement.On (opens in a new tab) a case by case basis, we may also receive the following Personal Data:

• Address data: e.g. industry, company name, contact person, address, country, telephone number, e-mail, language, currency, position, mobile number, and other information you provide to us;
• Communication data: e.g. content of emails, written correspondence, phone calls;
• Contract data: e.g. information about the initiation and conclusion of contracts (e.g. date of conclusion of contract, duration of contract, type of contract.);
• Payment data: e.g. means of payment, bank details, billing address.

We will use the Personal Data we collect from you to best provide the services you request, which may include the following purposes:

• to provide and maintain our services to you;
• to communicate with you and provide you with the best possible advice that you request from us before or during a contract;
• to notify you of changes in relation to our services;
• to monitor the use of our Services;
• to detect, prevent and correct technical problems;
• to provide customer support;
• to provide you with news, special offers and general information about other products, services and events offered by us to the extent they are similar to those you have already purchased from or requested from us and you have not opted out of such communication;
• for marketing purposes and relationship management;
• to fulfill your orders;
• for billing and accounting;
• for conducting research, performing technical diagnostics, and conducting analytics pertaining to our Website and Apps in order to improve and optimize our services;
• To comply with legal or other regulatory requirements and internal rules;
• To establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings;
• For other lawful purposes where such processing is apparent from the circumstances or was indicated at the time of collection.

The processing is carried out for the purpose of providing contractual services in the context of service provision, order billing, delivery and customer service (Art. 6 para. 1 lit. b GDPR) and in the context of fulfilling legal obligations (Art. 6 para. 1 lit. c GDPR) or our legitimate interests in the context of storage and archiving (Art. 6 para. 1 lit. c and lit. f GDPR). We disclose the Personal Data to third parties in the context of delivery, payment, enforcement or in the context of legal permissions and obligations. The Personal Data is only processed in third countries if this is necessary for the fulfillment of the contract (e.g. at the request of the customer for delivery or payment). For more information on data transfers to other countries, please see section 6).

3.4 Personal data processed for the proper operation of our business

We process your Personal Data for the operation of our business and to perform our internal management and administrative tasks efficiently and properly. This may include the same Personal Data as set forth in 3.3 hereinabove. We require this Personal Data for the proper operation of our business to fulfill organizational, management and administrative tasks and legal obligations and rights. Without this Personal Data, we are generally unable to fulfill our contractual and legal obligations or enforce our rights. We use the Personal Data collected from you to fulfill our contractual obligations and services as well as our legal obligations, which may include the following purposes:

• For managing your customer Personal Data;
• For documentation management, storage, document sharing, filing and retention (e.g. our master files and other documents we have created for our customers);
• For communication purposes (e.g. by email, letter, telephone or video meetings);
• For managing support requests;
• For conducting video meetings, video conferences and webinars;
• For hosting our Websites, Apps and our e-mails;
• For the management of our newsletters;
• To comply with legal or other regulatory requirements and internal regulations;
• For other legitimate purposes, if such processing is evident from the circumstances or was indicated at the time of collection.

These purposes form the legal basis for our legitimate interests (Art. 6 para. 1 lit. f GDPR) of a proper and effective organization and administration to ensure and fulfill contractual and legal obligations (Art. 6 para. 1 lit. b GDPR). For these purposes we use the customer relationship management (CRM) system of HubSpot (European HQ, 1 Sir John Rogerson's Quay, Dublin 22nd Floor 30 North Wall Quay, Dublin 1, Ireland – HubSpot Privacy Policy). For the provision of our App services, we use the cloud-services of Microsoft Schweiz GmbH, in Zürich (www.privacy.microsoft.com/en-us/privacystatement (opens in a new tab)) (see further information about Microsoft cloud-services in our Apps in section 3.6). With HubSpot and Microsoft each being an international corporation with various subsidiaries around the world (incl. USA), we cannot exclude that the Personal Data is transferred to or accessed by the USA. Data protection is secured via the standard contractual clauses of the EU Commission, which ensures that the processing of Personal Data is subject to an appropriate level of protection (see section 6).

3.5 Personal Data collected and generated for the registration or login of a user account We collect and generate Personal Data when you register for a user account on our Website or App. This may include the following Personal Data:

• Registration- and Identification Data: such as title, name, first name, company name, employer, position, address, place, location, e-mail address, phone number, language, other information about you;
• User account data: Username, password, IP address, time of each user action.

If you already have a user account, then we collect the following Personal Data during registration:

• Username, Password.

In the context of registration and renewed logins as well as use of our online services, we also store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user's protection against misuse and other unauthorized use. In principle, this Personal Data is not passed on to third parties, unless it is necessary for the pursuit of our claims or there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. c GDPR. The communication of this Personal Data is always voluntary, based on your consent or a contract, to fulfill the services you have requested. Please note that without the provision of this information, the requested service, for which, the information is needed, cannot be provided or not in the desired quality. We will use the information we collect from you to best provide the services you have requested, which may include the following purposes:

• For the administration of your Personal Data;
• For communication purposes (e.g. for activating your user account and for sending e-mails, including newsletters)
• To use our services provided via the user account (e.g. customer support);
• For order processing;
• For payment processing;
• To create your order and purchase history so that you can view your orders and purchases at any time;
• for conducting research, performing technical diagnostics, and conducting analytics pertaining to our Website and Apps in order to improve and optimize our services;
• For other legitimate purposes, if such processing is evident from the circumstances or was indicated at the time of collection.

These purposes form the legal basis for our legitimate interests (Art. 6 para. 1 lit. f GDPR) to offer you an optimal service or in advance of a possible conclusion of a contract with you and / or for the establishment and implementation of the purchase contract with you (Art. 6 para. 1 lit. b GDPR). User accounts are not public and cannot be indexed by search engines, e.g. Google. If users have terminated their user account, their Personal Data with regard to the user account will be deleted, subject to their retention is necessary for commercial or tax reasons in accordance with Art. 6 para. 1 lit. c GDPR. Information in the customer account remains until its deletion with subsequent archiving in the event of a legal obligation. It is the responsibility of the users to back up their Personal Data in the event of termination before the end of the contract.

###3.6 Use of the Seamless App We collect and process Personal Data when you use the App as a customer with a valid subscription. This may include the following Personal Data:

• Registration and Identification Data: users’ object ID (Microsoft Entra ID User ID) in our application telemetry (in Microsoft Azure Application Insights).

Based on the users’ object ID, we cannot identify the users. We cannot link the object ID to any other Personal Data like name, emails, phone number, etc. Optionally, we allow customers to configure the user experience and available features across our Apps. In this case, customers can choose to protect the ability to make configuration changes to specific users and/or groups. Capturing these restrictions will require AskMeWhy to also store the respective user object IDs as well as Entra group IDs in the customer’s application settings. In case of a customer no longer using our services, the customer can delete all application settings including any optionally provided user object IDs and/or Entra group IDs. We use this Personal Data only for support reasons to provide our customers with an optimal service within the conclusion of a contract (Art. 6 para. 1 lit. b GDPR). All the Personal Data being the telemetry and application configuration data collected is stored in Switzerland with our cloud-service provider Microsoft Schweiz GmbH, Flughafen Zürich, The Circle 02, 8058. However, with Microsoft being an international corporation with various subsidiaries and legal systems around the world (incl. USA), we cannot exclude that the Personal Data is transferred to or accessed by the USA. Data protection is secured via the standard contractual clauses of the EU Commission, which ensures that the processing of Personal Data is subject to an appropriate level of protection (see section 6). The architecture of our Apps is constructed in a way that your Personal Data never gets transferred via any of our AskMeWhy servers or services. We also do not collect Personal Data of you stored for instance in your SharePoint Online, Microsoft Teams, OneDrive, OneDrive for Business and other products of Microsoft. Moreover, we also do not collect any Personal User Data for licensed customers, when interacting with the add-Ins or Apps, except for the user’s object ID for support reasons only and optionally user object IDs and group IDs for tenant configuration reasons as provided in this section. This Personal Data is used temporarily and gets automatically deleted after 90 days.

3.7 Use of the Seamless admin center (admin.seamlesswork.com)

We collect and process Personal Data when you use the Seamless admin center for the first time, which may include the following Personal Data:

• Registration and Identification Data: such as Tenant ID, Display name of the Global Admin consenting to our terms, Consent date.

We will use the information you provide to enable you the use of the Seamless admin center, which may include the following purposes:

• For the administration of your Personal Data
• To communicate with you (e.g., about our services, including customer service) to schedule appointments and provide you with the best possible information you need from us before, during or after the termination of a contract;
• For statistical and analytical purposes to develop new and/or improve existing products and services;
• To comply with legal or other regulatory requirements and internal rules;
• To establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings;
• For other lawful purposes where such processing is apparent from the circumstances or was indicated at the time of collection.

These purposes form the legal basis for our legitimate interests (Art. 6 para. 1 lit. f GDPR), in order to provide you with an optimal service or for the conclusion of a contract (Art. 6 para. 1 lit. b GDPR)

3.8 Email communication and newsletter for promotional and marketing purposes

If you sign up for our newsletter or if you have shown interest in our products via one of our campaigns, we will send you information and marketing material as part of pre-contractual measures. For this purpose, we use the CRM system of the provider HubSpot (see section 3.4 above). We will use your email address to send you information about our services as well as other commercial communications (e.g., announcements of events, contests, promotions, and surveys) that may be of interest to you. You may unsubscribe from such newsletter emails at any time by clicking on the highlighted "Unsubscribe from this list" link at the bottom of each email or by contacting us directly by email hello@askmewhy.com. In addition, for our own marketing purposes, we may combine and use publicly available Personal Data about you with the Personal Data we already hold about you subject to applicable law. Personal Data about you may also be obtained for the same purposes from third-party providers (e.g. address dealers), who may lawfully pass this Personal Data on to us.

3.9 Personal Data collected and generated in the context of a job application

We collect information that you actively and voluntarily provide to us, with your consent and/or in advance of a potential employment contract with us by sending us your application materials via our contact email address or by phone. This may include the following Personal Data:

• Information you provide to us during the application process such as title, surname, first name, address, email address, telephone number, language, CV, qualifications, employment certificates, school-leaving qualifications, further training, experience, your skills and abilities, other information about you;
• Information collected during our interview and assessment process;
• Publicly available professional data about you, such as data posted on business and employment-related social networking sites ("social networking professional data"). For the avoidance of doubt, data contained in social networks or websites that are not professionally oriented are not considered professional data from social networks and therefore we will not process such data. We process this application and social network data for the following purposes:
• To process your application;
• To assess qualifications and personal experience;
• To provide you with information about your application and to make your application as supportive and effective as possible. Once the applicant selection process is complete, your application data will be deleted within three months if you are unsuccessful in the applicant selection process, unless we have your explicit consent to retain the application data for a longer period (for example, for a further twelve months for another vacancy we may have for you, for more information about the duration of storing of your Personal Data please refer to clause 7 below).

4. On what legal basis do we process Personal Data about you

Depending on the applicable law, data processing is only permitted if the applicable law specifically allows it. If not indicated for a specific purpose otherwise in this Privacy Policy, the processing of your Personal Data may be based on the following legal bases:

• Your consent, only if it can be revoked at any time (e.g. newsletter, tracking cookies) (Art. 6 para. 1 lit. a GDPR);
• For the fulfillment of a contract with you or for the intention to conclude a contract with you (e.g. when subscribing to services) (Art. 6 para. 1 lit. b GDPR);
• To comply with a legal obligation (e.g. for tax reasons or for the purpose of judicial investigations or proceedings) (Art. 6 para. 1 lit. c GDPR); or
• Where processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 para. 1 lit. d GDPR); or
• For the purposes of our legitimate interests, e.g. to maintain and improve our internal business management, organization, operation, protection of systems and premises, prevention of fraud and other crimes, to ensure effective, efficient, secure and harmonized service, to comply with legal or other regulatory requirements and internal rules, and to establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings (Art. 6 para. 1 lit. f GDPR). If the processing is based on your consent or our legitimate interests, you may withdraw your consent or object to this processing at any time by contacting us directly via email at hello@askmewhy.com. Please note, however, that the withdrawal of your consent does not affect the lawfulness of the processing prior to your withdrawal.

5.With whom do we share the Personal Data we collect?

We take the necessary measures to ensure that only authorized persons who have the necessary knowledge have access to your Personal Data in order to fulfill the purposes for which your Personal Data was collected. We may disclose your Personal Data to the following possible categories of recipients in accordance with the purposes and legal bases of processing described above, to the extent necessary for the intended data processing or as may be provided for by law:

• Other companies in the Group;
• Service providers who process Personal Data on our behalf and at our instruction (so-called processors, such as in the area of IT, hosting and support, e.g. Microsoft and our CRM-Provider Hubspot and accountants);
• Payment service providers, financial institutions;
• Customers, partners, suppliers, insurance companies and other business partners;
• Media and marketing agencies, and the public via our social media Website interactions (e.g. via our social media plugins);
• Acquirers or parties interested in acquiring business units, companies or other parts of the Group;
• Courts, arbitration bodies, law enforcement agencies, regulators, attorneys and other parties in potential or actual legal proceedings where necessary to comply with the law or to establish, advise on, exercise or defend rights or legal claims. We select our partners and processors carefully and only upon providing sufficient guarantees that they have appropriate technical and organizational measures in place in accordance with legal requirements. We also contractually ensure that our processors only process your Personal Data in the way that we are permitted to do. Furthermore, our processors may only process Personal Data on our documented instructions. They are all subject to confidentiality requirements and may only use your Personal Data to the extent necessary to fulfill the purpose for which your personal data was collected or as required by law.

6. Transfer of Personal Data to countries outside the EU/EEA The Personal Data we collect is stored in Switzerland and the EU. Since we operate globally, we may transfer, store and process your Personal Data at data locations around the world, for example, where our third party vendors, service providers (especially Microsoft) or business partners are located. Therefore, we may transfer your Personal Data outside the European Economic Area (EEA) if necessary for the data processing described in this Privacy Policy. The data protection and other laws of these countries may not be as comprehensive as those in the EEA or in Switzerland. If data is transferred to countries that do not ensure an adequate level of data protection, AskMeWhy will ensure adequate data protection by taking appropriate safeguards, such as contractual safeguards (e.g. based on EU standard clauses), binding corporate rules, the transfer of data pursuant to your explicit consent, the conclusion or performance of a contract with you, or in connection with the establishment, exercise or enforcement of legal claims. For more information about our security measures to ensure an adequate level of data protection, please contact us by email at hello@askmewhy.com.

For the sake of completeness, we would like to point out for users resident or domiciled in Switzerland as well as in the EU that in the USA there are surveillance measures by US authorities which generally allow the storage of all Personal Data of all persons whose data has been transferred to the USA. This is done, in principle, without differentiation, limitation or exception based on the objective pursued and without an objective criterion that makes it possible to limit the access of the U.S. authorities to the data and their subsequent use to very specific, strictly limited purposes that are capable of justifying the intrusion associated both with the access to these data and with their use. In addition, we would like to point out that in the USA there are no sufficient legal remedies available to data subjects from Switzerland and the EU that would allow you to obtain access to the data concerning you and to obtain its correction or deletion, or that there is no effective judicial legal protection against general access rights of US authorities. We explicitly draw your attention to this legal and factual situation in order to enable you to make an appropriately informed decision to consent to the use of your data.

We would also like to point out to users residing in a member state of the EU, the EEA or Switzerland that, from the perspective of the European Union as well as Switzerland, the USA does not have an adequate level of data protection - among other things due to the issues mentioned in this section. Insofar as we have explained in this Privacy Policy that recipients of data (such as Microsoft or Google) are based in the USA, it will be ensured through contractual arrangements with these companies that your data is protected with our partners with an appropriate level.

7. How long do we retain Personal Data?

We will retain your Personal Data for as long as necessary to fulfill the purposes for which your Personal Data was collected. For this reason, we will delete or anonymize Personal Data as soon as it is no longer necessary to achieve the purposes, but subject to (i) applicable legal or regulatory requirements to retain Personal Data for a longer period of time (e.g., for tax or accounting reasons), or (ii) if we have an overriding interest (e.g., an interest for evidentiary reasons to establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings, including legal process we may enforce to preserve relevant information, or where we have an interest in non-personal analysis). On this basis, we generally process Personal Data in compliance with the following rules and obligations:

• The data automatically transmitted by you through the use of our Website or Apps (so-called log files) for the purpose of displaying, operating and ensuring the functionality of the Website will be deleted within six months;
• The Personal Data you provide to us in connection with the use of our services and products that are offered on our Website or that you otherwise provide to us via physical correspondence, e-mail contact address for communication purposes will generally be stored by us for one to five years;
• The Personal Data you provide to us in connection with a newsletter or a user account will generally be stored by us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have finished processing your request).
• The Personal Data collected and generated when you engage with our Apps (e.g. Audit Logs and Application Telemetry) will generally be deleted within 30 (Audit Logs) and 90 days (Application Telemetry) and the Application Settings will be deleted until deleted by you, or until you request us to delete them.
• For contract-related Personal Data (including business documents and communications), we store Personal Data as long as the contractual relationship exists and thereafter for eleven additional years after termination of the contractual relationship, unless (i) in individual cases a shorter or longer legal retention obligation applies, (ii) retention is required for reasons of evidence or for another valid reason under applicable law, or (iii) deletion of the data is required earlier (e.g. because the data is no longer needed or we have to delete the relevant data.

Information collected by using the App

Information collected via other means than engaging with our App

We may rectify, replenish, or remove incomplete or inaccurate information, at any time and at our own discretion.

8. Cookies, Services of Google and Social Media Plug-Ins

When you access or use our Website or our Apps, we may place so-called cookies - small text files - or similar tools on your computer. We use these cookies to recognize you as a user of the Website or App, to customize content, to improve the performance of the Website or App and to enhance your user experience.

a. Categories of cookies we use

Depending on their function and purpose, the cookies we use can be divided into the following categories:

• Necessary (also: essential or absolutely necessary) cookies: Cookies may, on the one hand, be absolutely necessary for the operation of a website and to provide you with the essential features of our services (e.g. as sign-in, service health or for security reasons).
• Functional cookies: these cookies serve a variety of purposes related to the presentation, functionality, and performance of a website and, in particular, to enhance visitors' experience and enjoyment of the website. They allow a website to remember information already provided (e.g., username, location, or language selection) and provide visitors with enhanced, more personalized functionality. Functional cookies, for example, are used to remember things like your login information. These cookies cannot track your movement on other websites.
• Performance cookies: these cookies are used to collect information about how a website is used - for example, how visitors arrived at our website, which pages a visitor opens most often, how they navigated our website during their visit, and whether they receive error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, such as how many visitors came to our website. These cookies are used to monitor the level of website activity and improve website performance.
• Marketing and personalization cookies: Furthermore, cookies are usually also used in the context of range measurement and when a user's interests or behavior (e.g. viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to show users content that matches their potential interests. This process is also referred to as "tracking", i.e., tracking the potential interests of users. Insofar as we use cookies or "tracking" technologies, we will inform you separately in our Privacy Policy or in the context of obtaining consent.
• Advertising cookies enable us or a third party vendor to serve ads on our website or on third party websites with products that the user likes, so that the ads the user sees may be more relevant to the user's preferences or interests (sometimes referred to as "targeting cookies"). They may also be used to evaluate the effectiveness of advertising and sales promotions.
• Temporary cookies (also: session or session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed his browser.
• Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the interests of users used for reach measurement or marketing purposes can be stored in such a cookie. These cookies may be placed by us or a third party on our behalf. Some of these third parties may be located outside of the European Union. In most cases, we will not receive the information these third parties collect but only receive the analysis or results that we requested, and the sole holders of the collected information are the third parties. Below you can find the links to the privacy policies of the third parties we currently use. This list is reviewed and updated periodically.
• https://privacy.microsoft.com/en-US/privacystatement (opens in a new tab)
• https://policies.google.com/privacy (opens in a new tab) For more information about cookies and their use, please visit: http://www.allaboutcookies.org/.Google (opens in a new tab) The following third-party cookies store information about your browser and your interaction with our app and website in order to display relevant content about products, services or topics. By giving your consent, you enable us to show your targeted advertising based on your interests.

b. Responsible Google Company

We use various Google services to optimize our offers, which are operated by Google LLC, in Mountain View, 1600 Amphitheatre Parkway, CA 94043, USA. The company Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, is responsible for the European region. In the following, we will go into detail about those Google services that we use.

1. Website Analysis with Google Analytics

The cookies used by Google Analytics are stored on your computer or device and thus enable an analysis of your use of the Website or App. The information generated by the cookie about your use of our Website or App is usually transmitted to a Google server in the USA and stored there. This information may include the following Persona Data:

• the number of times a user has visited the Website or App, the date of the first and last visit, the duration of visits, the page from which the user accessed the Website, the search engine the user used to access the Website or App or the link the user clicked on, the location in the world from which the user is accessing the Website or App, etc.

Google will use this information on our behalf for the purpose of evaluating your use of the Website or App, compiling reports on Website or App activity and providing other services relating to Website or App activity and internet usage. We use Google Analytics on the basis of our legitimate interests to analyze and regularly improve our Website and Apps, as well as to use the statistics obtained to regularly improve our offer and make it more interesting for you. Furthermore, the use of Google Analytics is based on your consent to the tracking of your surfing behavior on our Websites and Apps and their analytical evaluation. We have activated the IP anonymization function on our Website and App. Your IP address will be shortened by Google within the European Region before being transmitted to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. The IP addresses transmitted as part of Google Analytics will not be merged with other data from Google. You can refuse the use of cookies by clicking on "refuse" on our cookie banner or by making the appropriate settings in your browser. Please note, however, that in this case you may not be able to use all the features of this Website or the App. In addition, you can object to the collection and use of data (cookies and IP address) by Google by downloading and installing the browser plugin available at this link (https://tools.google.com/dlpage/gaoptout?hl=de (opens in a new tab)). In addition, Google may monitor the user's use of the Website and App and combine this data with data from other Google-monitored websites that the user has visited and use these results for its own benefit (e.g., to control advertising, profiling) under its responsibility and based on its own privacy policy, which can be found here (https://policies.google.com/ (opens in a new tab)). You can find more information about Google Analytics and the processing of Personal Data here (https://policies.google.com/technologies/partner-sites (opens in a new tab)). We use Google Analytics on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) to analyze and regularly improve our Websites and Apps and to use the statistics obtained to regularly improve our offer and make it more interesting for you. Furthermore, the use of Google Analytics is based on your consent (Art. 6 para. 1 lit. a GDPR) to the tracking of your surfing behavior on our Websites and Apps and their analytical evaluation. With regard to the transfer of personal data abroad, please refer to section 6.

2. Google Fonts

This is a library of fonts provided by Google. We have integrated one of these fonts into our Website so that this web-optimized font is displayed to you. The font is integrated locally via our own Website i.e. on our Azure App Service so that there is no connection to Google server and thus no Personal Data, such as the IP address, is transmitted to Google. The integration of this font is based on your consent to provide you with a web-optimized font (Art. 6 para. 1 lit. a GDPR).

c. Website analysis with Microsoft Clarity

We use Microsoft Clarity for web analysis in order to provide our users with the best possible service. For this purpose, we evaluate the use of the respective pages and functions and derive improvements to the functionality of our services to make them easier and more valuable and to improve usability. Microsoft Clarity use cookies. For this purpose, the usage information obtained by the cookie is transmitted to Microsoft. This may include the following Personal Data: IP address, your location, browser information, screen resolution, language settings, visited website/subpages, date/time of access to the website, clicks, scrolls, mouse movements. The Personal Data is further processed by us to analyze the behavior of users and to evaluate the use of individual components of the Website or Apps. The aim is to constantly optimize our Website and Apps and its user-friendliness. We use Google Analytics on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) to analyze and regularly improve our websites and to use the statistics obtained to regularly improve our offer and make it more interesting for you. Furthermore, the use of Google Analytics is based on your consent (Art. 6 para. 1 lit. a GDPR) to the tracking of your surfing behavior on our Websites and Apps and their analytical evaluation. With regard to the transfer of personal data abroad, please refer to section 6.

d. Administration of Cookies

If you do not wish to accept these cookies, you can refuse the use of cookies by “deactivating” them in the cookie banner or you can also change your browser settings to delete or not store certain cookies on your computer or device without your consent. Each browser is different in the way it manages cookie settings. This is usually described in the "Help" menu of each browser. This information for the most common browsers can be found at the following links:

• Internet Explorer: support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies
• Mozilla Firefox: support.mozilla.com/en-US/kb/Cookies
• GoogleChrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DAndroid&hl=de (opens in a new tab)
• Safari: support.apple.com/en-ch/HT201265. Please note, however, that by disabling the cookie function in your browser settings, you may no longer be able to use all the features of the website.

e. Social Media Plug-Ins

We use the social plug-ins listed below on our Website to make our company better known. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The responsibility for data protection-compliant operation is to be ensured by their respective providers. The data processing in connection with these plug-ins are carried out with your consent when you use them. If you use the services of these social networks independently of or in connection with our Website, the social networks evaluate your use of the plug-in. In this case, information about the plug-in is forwarded to the social networks.

1. LinkedIn

We have installed the plug-in of the social network LinkedIn Corporation, 1000 West Maude Avenue Sunnyvale, California 94085, USA, on our website. The company responsible for the European region is LinkedIn Ireland Unlimited, Wilton Plaza, Gardner House 4,5,6 2 Dublin, Ireland. You can recognize the LinkedIn plug-in ("LinkedIn Recommended" button) by the LinkedIn logo. When you click on the LinkedIn button, a direct connection is established between your browser and the LinkedIn server. LinkedIn thereby receives various data, including the information that you have visited our site with your IP address, date and access time, browser type and device information. If you click on the LinkedIn button while you are logged into your LinkedIn account, you can link the content of our pages to your LinkedIn profile. This allows LinkedIn to associate your visit to our pages with your user account. If you interact with the plug-ins (e.g. use the Like functions), this information is also transmitted directly to a LinkedIn server and stored there. The information is also published on your LinkedIn profile and displayed to your network friends. The legal basis for data processing arises from our legitimate interest (Art. 6 para. 1 lit. f GDPR) in making our Website more attractive and providing information about us and our services to a wider audience and, based on your consent (Art. 6 para. 1 lit. a GDPR), to connect to our LinkedIn page and to find out more information about us and our services. With regard to the transfer of personal data abroad, please refer to section 6.

2. Instagram

Our Website uses the plug-in of the social network Instagram, which is offered by Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA. When you click on the Instagram button, a direct connection is established between your browser and the Instagram or Meta server. Meta thereby receives various data, including the information that you have visited our site with your IP address, date and access time, browser type and device information. If you click the Instagram button while you are logged into your Instagram account, you can link the content of our pages to your Instagram profile. This allows Meta to associate your visit to our pages with your user account. If you interact with the plug-ins (e.g. use the Like functions), this information is also transmitted directly to a Meta server and stored there. The information is also published on your Instagram profile and displayed to your network friends. The purpose and scope of data collection and the further processing and use of personal data by Meta, in particular for possible market research and advertising purposes based on your user behavior and possible user profiles resulting from this, as well as your rights in this regard and setting options to protect your privacy, are governed by Meta's data protection information at: (https://about.instagram.com/de-de/blog/announcements/instagram-community-data-policy (opens in a new tab) ). Please read the privacy policies of your social networks carefully to obtain detailed information about the collection and transfer of personal data, your rights and how you can achieve satisfactory privacy settings. The legal basis for data processing arises from our legitimate interest (Art. 6 para. 1 lit. f GDPR) in making our Website more attractive and providing information about us and our services to a wider audience and, based on your consent (Art. 6 para. 1 lit. a GDPR), to connect to our Instagram page and to find out more information about us and our services. With regard to the transfer of personal data abroad, please refer to section 6.

9. No automated individual decision-making, including profiling with legal effects

We will not make any decision about you which is based solely on automated processing - including profiling - and which produces legal effects concerning you or similarly significantly affects you.

10. How do we safeguard and transfer your information?

We have taken various technical and organizational measures to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized use, disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing and misuse. The infrastructure of our platform admin.seamlesswork.com is operated on servers in Microsofts’ Swiss data centers that have ISO 27001 certification and have implemented high security standards. We are committed to use our reasonable efforts, in accordance with market best practices, to ensure the security, confidentially and integrity of the Personal Data you choose to provide us. Access to the Personal Data is based on the ‘least to know’ concept together with role-based access control systems, ensuring only authorized access to the Personal Data. To protect the privacy of any Personal Data you may have provided, we are using data hosts (redundant setup Microsoft Azure PaaS services, storing and processing data globally, inside and outside of the EU) who implement market best practice security measures including encryption for data-at-rest and data-in-transit. Furthermore, we already take the protection of Personal Data into account during the development or selection of hardware, software as well as procedures in accordance with the principle of data protection, through technology design and through data protection-friendly default settings. This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. AskMeWhy may use third parties as processors to collect and process your Personal Data. The data processors we use will only process your Personal Data in accordance with our instructions and are required by law to take strict security precautions when handling Personal Data. Unfortunately, the transmission of information over the Internet (e.g. when communicating by email) is not completely secure. Although we have taken appropriate measures, we cannot guarantee the security of your data transmitted via the Internet; complete protection of data against access by third parties without the use of email encryption, such as PGP or S/MIME, is not possible and is at your own risk.

11. Privacy policies of third parties

Please note that if you click on the link to a third party website (e.g. Google or other websites), you will be redirected to a website that we do not control and our privacy policy will no longer apply. Your browsing and interaction on another website is subject to the terms of use and privacy policies and notices of those third party websites. In addition, we also cannot guarantee the accuracy or timeliness of these links. We encourage you to carefully read the terms of use and privacy policies and notices of other websites before submitting any Personal Data through this website. We are not responsible or liable for the information content on such third party websites.

12.What are your rights

You can request information from AskMeWhy as to whether Personal Data about you is being processed. In addition, you have the right to request the correction, destruction or restriction of Personal Data about yourself and to object to the processing of Personal Data. Where processing is based on your consent or our legitimate interests, you may withdraw consent or object to such processing at any time by contacting us directly by email at hello@askmewhy.com. In certain cases, you have the right to obtain Personal Data arising from the use of online services in a structured, common and machine-readable format that allows further use and transmission. Requests in this regard should be addressed to AskMeWhy at the following e-mail address: hello@askmewhy.com. To protect your privacy and security, we will take appropriate steps to verify your identity before granting access or making changes to your Personal Data. AskMeWhy reserves the right to limit your rights under applicable law and, for example, not to disclose comprehensive information or to delete data (e.g. due to document retention obligations). If we reject your request or you are not satisfied with our processing, you also have the right to file a complaint with the relevant supervisory authority and seek a remedy. For users located in Switzerland, the competent authority is the Federal Data Protection and Information Commissioner in Switzerland (http://www.edoeb.admin.ch (opens in a new tab)). For users located in EU countries, you can find a list of supervisory authorities at https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080 (opens in a new tab).

13. Changes to our Privacy Policy

This Privacy Policy may be changed from time to time and without prior notice as part of our continuous improvement process, in particular in order to remain compliant with legal regulations in the future. Your rights as a data subject remain unaffected by such changes. Any changes to this Privacy Policy will be effective when posted on the Website unless otherwise stated. We encourage you to review this Privacy Policy regularly for any changes.