Privacy Policy

Effective date: 21 July 2026

Crosspaint ("we", "us", "our", etc.) operates the website https://www.crosspaint.tv/ (hereinafter referred to as the "Service").

This page informs you of the ways in which we collect, use and disclose personal data when you use our Service, as well as of the options available to you in connection with this data.

We use your data to provide and improve our Service.

Definitions¶

Service: The Service is the website operated by Crosspaint at https://www.crosspaint.tv/

Personal data: Personal data is data relating to a living person who can be identified from that data (or from that data in combination with other information that is already in our possession or is likely to come into our possession).

Usage data: Usage data is data collected automatically in the course of using the Service or generated by the Service infrastructure itself (for example, the duration of a page visit).

Cookies: Cookies are small files that are stored on your device (computer or mobile device).

Data controller: The data controller is a natural or legal person who (either alone or jointly with others) determines the purposes and means of processing personal data. For the purposes of this Privacy Policy, we are the data controller with respect to your personal data.

Data processor (or service provider): A data processor (or service provider) is a natural or legal person who processes data on behalf of the data controller. We may use various service providers in order to process your data more efficiently.

Data subject (or user): A data subject is a living individual who uses our Service and is the subject of personal data.

Collection and use of data¶

We collect various types of data for a range of purposes in order to improve the Service we provide to you.

Types of data collected¶

Personal data¶

In the course of using our Service, we may ask you to provide certain personally identifiable data that we use to contact or identify you ("personal data"). Personally identifiable data includes, for example (but is not limited to): name, email address, cookies and usage data, newsletter data.

We may use your personal data to send you newsletters, marketing or promotional materials and other information that may be of interest to you. You can opt out of some or all of these communications by clicking the relevant unsubscribe link, following the instructions in our emails or contacting us.

Usage data¶

We may also collect data about how the Service is accessed and used ("usage data"). This usage data may include your computer’s Internet Protocol address (IP address), your browser type, your browser version, the pages of our Service that you visit, the time and date of your visit, the total time spent on those pages, unique device identifiers and other diagnostic data.

Newsletter data¶

If you wish to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively to send the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form is based solely on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time, for example via the "unsubscribe" link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal.

The data you provide for the purpose of receiving the newsletter is stored by us or the newsletter service provider and deleted from the distribution list after you unsubscribe from the newsletter or once the purpose no longer applies. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe, your email address may be stored in a blocklist if this is necessary to prevent future mailings. The data from the blocklist is used solely for this purpose and is not combined with other data (legitimate interest within the meaning of Art. 6(1)(f) GDPR). You can object to this storage, provided that your interests outweigh our legitimate interest.

Manner of data collection¶

Enquiries via contact form or email¶

If you send us enquiries via the contact form or by email, your details, including the contact data you provide, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where this has been requested; consent can be withdrawn at any time.

The data remains with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Use of data¶

At Crosspaint, we use the collected data for various purposes, for example to:

• provide and maintain our Service;
• notify you of changes to our Service;
• allow you to participate in the interactive parts of our Service when you choose to do so;
• provide customer support;
• collect analytics data and other valuable information so that we can improve our Service;
• monitor the use of our Service;
• detect, prevent and resolve technical problems;
• provide you with news and general information about other products, services and events we offer that are similar to those you have already purchased or enquired about from us, unless you have opted out of such communications.

Legal basis for the processing of personal data (GDPR)¶

If your place of residence is within the European Economic Area (EEA), Crosspaint’s legal basis for collecting and using the personal data described in this Privacy Policy depends on the personal data collected and on the specific context in which it is collected.

At Crosspaint, we may process your personal data for the following reasons:

• to perform a contract concluded with you (Art. 6(1)(b) GDPR);
• because you have given us your consent (Art. 6(1)(a) GDPR);
• to safeguard our legitimate interests, provided these are not overridden by your rights (Art. 6(1)(f) GDPR);
• to comply with legal obligations (Art. 6(1)(c) GDPR).

Retention of data¶

Crosspaint will retain your personal data only for as long as is necessary for the purposes of this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations, to resolve disputes, and to enforce our legal agreements and policies.

Crosspaint will also retain usage data for internal analytics purposes. Usage data is generally retained for shorter periods, unless it is used to strengthen our security measures or improve the functionality of our Service, or unless we are legally required to retain it for longer.

Information on hosting can be found under the section on service providers.

Transfer of data¶

Your data, including personal data, may be transferred to – and stored on – computers located outside your home state, province, country or other jurisdiction, and thus subject to data protection laws that differ from the data protection laws in your jurisdiction.

If you are located outside Switzerland and choose to provide data to us, please note that we transfer your data, including personal data, to Switzerland and process it there.

Crosspaint will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy, and that your personal data is not transferred to organisations or countries in respect of which there are no adequate controls regarding the security of your data.

SSL / TLS encryption¶

For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address line changes from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is active, the data you transmit to us cannot be read by third parties.

Disclosure of data¶

Legal requirements¶

Crosspaint may disclose your personal data in the good-faith belief that such action is necessary to achieve the following objectives:

• to comply with a legal obligation;
• to protect and defend the rights or property of Crosspaint;
• to prevent or investigate possible wrongdoing in connection with the Service;
• to protect the personal safety of users of the Service or the public;
• to avoid liability claims.

Data security¶

The security of your data is important to us. However, please remember that no method of transmission over the internet and no electronic storage medium is 100% secure. Although we always strive to use commercially acceptable measures to protect your personal data, we cannot guarantee absolute security.

"Do Not Track" signals¶

"Do Not Track" ("DNT") is not supported by us. DNT is a setting you can enable in your browser that tells websites you do not wish to be tracked. You can enable or disable the DNT function on the "Preferences" or "Settings" page of your browser.

Your data protection rights under the GDPR¶

If your place of residence is within the European Economic Area (EEA), you have certain data protection rights. Crosspaint strives to take reasonable measures to allow you to correct, amend, delete or restrict the use of your personal data.

If you would like to know what personal data we have stored about you, or if you would like your data to be deleted, please contact us. Under certain circumstances, you have the following data protection rights:

• the right to access the data we have stored about you and to have it updated or deleted;
• the right to rectification of your data if it is inaccurate or incomplete;
• the right to object to the processing of your personal data;
• the right to restrict the processing of your personal data;
• the right to data portability: to receive a copy of your data in a structured, commonly used and machine-readable format;
• the right to withdraw a consent you have given, with effect for the future.

Please note that we may verify your identity before processing such requests.

You also have the right to lodge a complaint about the collection and use of your personal data with a data protection authority. You can obtain further information from the data protection authority locally responsible for you within the European Economic Area (EEA).

Service providers¶

We may engage third-party companies and individuals ("service providers") to support the provision of our Service, to perform services on our behalf, or to analyse how our Service is used.

These third parties may access your personal data only to the extent necessary to perform the aforementioned tasks on our behalf, and may not disclose or use it for any other purposes.

Consent management¶

CookieYes¶

To obtain and manage your consent to cookies and tracking, we use the consent management tool CookieYes (CookieYes Limited, 3 Warren Yard, Warren Farm Office Village, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom). CookieYes provides the consent banner and stores your cookie preferences.

Data processed: consent status, anonymised IP address, device and browser information, and the time of consent. This data is stored in a cookie (cookieyes-consent).

Legal basis: Art. 6(1)(c) GDPR (compliance with our legal obligation to obtain and document consent) and Art. 6(1)(f) GDPR (legitimate interest in legally compliant consent management).

Third-country transfer: an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists for the United Kingdom. Further information: https://www.cookieyes.com/privacy-policy/

Analytics¶

We engage third-party service providers to monitor and analyse the use of our Service.

Google Tag Manager¶

We use Google Tag Manager, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Tag Manager is a tool for managing and delivering the tags used on our website (e.g. Google Analytics 4, Meta Pixel, Microsoft Clarity). Tag Manager itself does not collect personal data in its own cookies, but controls the triggering of the individual tags – tags requiring consent are activated only after your consent in the cookie banner.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as services requiring consent are triggered via Tag Manager. Further information: https://policies.google.com/privacy?hl=en

Google Analytics 4¶

Insofar as you have given your consent, Google Analytics 4, a web analytics service provided by Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies that enable an analysis of your use of the website. With Google Analytics 4, IP address anonymisation is enabled by default.

Data collected: user behaviour in the form of "events" (e.g. page views, click path, scrolls, clicks on external links, internal searches, interaction with videos, file downloads, language setting) as well as approximate location (region), date and time of the visit, truncated IP address, technical information about your browser and device, internet provider and referrer URL.

Recipients: Google Ireland Limited (processor pursuant to Art. 28 GDPR) as well as Google LLC and Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Third-country transfer: on 10 July 2023, the European Commission adopted an adequacy decision for the USA; Google LLC is certified under the EU-US Data Privacy Framework (DPF). In addition, we have concluded EU standard contractual clauses (SCC) with Google.

Retention period: data collected at user and event level is automatically deleted after 14 months; the maximum lifespan of the Google Analytics cookies is 2 years.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie settings. Further information: https://policies.google.com/privacy?hl=en

Meta Pixel¶

We use the "Meta Pixel" provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. It allows us to track the behaviour of visitors in order to optimise our advertising on Facebook and Instagram and to measure the success of our advertising campaigns.

Data collected: pages visited and their URL, referrer URL, date and time of the visit, browser and operating system, IP address (truncated where applicable), user interactions (e.g. clicks, completed forms, completed purchases). The data can be linked to your Facebook or Instagram account if you are logged in there. A data processing agreement pursuant to Art. 28 GDPR is in place with Meta.

Third-country transfer and storage: the data is stored, among other places, on servers in Ireland and the USA. Meta is certified under the EU-US Data Privacy Framework (DPF). The data is stored for up to 90 days and then anonymised or deleted.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time via our cookie banner or the settings in your Facebook account. Opt-out: https://www.facebook.com/adpreferences/ad_settings and https://optout.aboutads.info/. Further information: https://www.facebook.com/privacy/policy/

Microsoft Clarity¶

We use the analytics tool "Microsoft Clarity", a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Clarity analyses, among other things, mouse movements, clicks and scrolling behaviour in order to optimise our website and make it more user-friendly.

Data collected: pages visited and their URL, referrer URL, date and time of the visit, screen resolution, approximate location (based on the anonymised IP address), mouse movements, clicks and scrolling behaviour, as well as browser and operating system. A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft.

Third-country transfer and storage: the data is processed in the USA and Ireland. Microsoft is certified under the EU-US Data Privacy Framework (DPF). The data is stored for up to 12 months and then automatically deleted.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG, which you can withdraw at any time via our cookie banner. Further information: https://privacy.microsoft.com/en-us/privacystatement

Payments¶

For paid offerings (e.g. donations), we use third-party payment providers. Your payment card details are neither stored nor collected by us, but transmitted directly to the respective payment provider, whose use of your data is governed by that provider’s privacy policy. The providers comply with the PCI-DSS standards.

Stripe¶

Provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe enables the secure acceptance of donations or payments by credit card, SEPA direct debit and other payment methods.

Data processed: cardholder name, email address, billing address, payment information (e.g. credit card number, IBAN, BIC, amount, currency, date and time of the transaction), IP address, browser and device data.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in secure and efficient payment processing).

Third-country transfer: Stripe participates in the EU-US Data Privacy Framework (DPF); in addition, standard contractual clauses (SCC) pursuant to Art. 46(2)(c) GDPR are used. A data processing agreement pursuant to Art. 28 GDPR is in place with Stripe. Further information: https://stripe.com/privacy

PayPal¶

Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal also transfers and stores data outside the EU, in particular in the USA.

Third-country transfer: as PayPal is not a participant in the EU-US Data Privacy Framework, the data transfer takes place on the basis of standard contractual clauses (SCC) pursuant to Art. 46(2)(c) GDPR. You can exercise your data subject rights directly with PayPal: https://www.paypal.com/myaccount/privacy/privacyhub. Further information: https://www.paypal.com/webapps/mpp/ua/privacy-full

FinDock¶

Provider: FinDock, Netherlands. As part of payment processing, FinDock processes: first and last name, billing and email address, payment details (e.g. IBAN, credit card number, payment amount), transaction data (date, time, status) and technical metadata (e.g. IP address, browser information).

As FinDock is based in the Netherlands, data processing takes place within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with FinDock. Further information: https://findock.com/legal/

Videos¶

We embed videos on our website via the following service providers.

YouTube¶

Provider: Google Ireland Limited (YouTube), Gordon House, Barrow Street, Dublin 4, Ireland. When a video is played, the following may be processed, among other things: IP address, information about your device and browser, referrer URL, time of access, Google account data where applicable (if you are logged in), and interactions with the video.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. No YouTube videos are loaded without your consent.

Third-country transfer: Google may transfer data to the USA. Google LLC is certified under the EU-US Data Privacy Framework (DPF); in addition, standard contractual clauses (SCC) pursuant to Art. 46(2)(c) GDPR are in place. You can withdraw your consent at any time via the cookie settings. Further information: https://policies.google.com/privacy?hl=en

Vimeo¶

Provider: Vimeo Inc., 330 West 34th Street, New York, NY 10001, USA. When a video is played, Vimeo may collect usage data and link it with cookies, device identifiers or an existing Vimeo account; if you are logged in to Vimeo, your visit can be attributed to your account.

Legal basis: for an embed with tracking, your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG; for a privacy-friendly embed without tracking, our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Third-country transfer: use results in a transfer to the USA on the basis of standard contractual clauses (SCC) pursuant to Art. 46(2)(c) GDPR. You can withdraw your consent at any time via the cookie settings. Further information: https://vimeo.com/privacy

Communication¶

We use the following service providers to answer your enquiries, send newsletters, run campaigns and provide contact forms.

ActiveCampaign¶

Provider: ActiveCampaign LLC, 1 N Dearborn St, 5th Floor, Chicago, IL 60602, USA. Used for email communication and marketing automation: sending newsletters, running campaigns, providing contact forms, and analysing user behaviour (e.g. email interactions or pages visited).

Data processed: name and email address, IP address, browser type and time of access, usage behaviour on our website (where tracked), form content, and interactions with emails (open and click rates).

Legal basis: Art. 6(1)(a) GDPR (consent, in particular for newsletter registration) and Art. 6(1)(f) GDPR (legitimate interest in analysing and optimising our email marketing).

Third-country transfer: processing on servers in the USA. ActiveCampaign is certified under the EU-US Data Privacy Framework (DPF); in addition, standard contractual clauses (SCC) are in place. A data processing agreement pursuant to Art. 28 GDPR is in place with ActiveCampaign. You can withdraw consent at any time via the unsubscribe link in every email. Further information: https://www.activecampaign.com/legal/privacy-policy

Make.com¶

Provider: Make (Make.com), based in the European Union. Used to automate internal workflows and to securely and structurally process form data.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient processing and automation); where consent is required for certain purposes, additionally Art. 6(1)(a) GDPR.

Third-country transfer: Make.com is based in the EU; in principle, no transfer to third countries takes place. Insofar as individual automations forward data to services in third countries, this is done on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Make.com. Further information: https://www.make.com/en/privacy

n8n¶

Provider: n8n GmbH, Borsigstraße 27, 10115 Berlin, Germany. We use n8n to automate internal workflows and to process and forward form and communication data between the services we use.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient automation and processing); where consent is required for certain purposes, additionally Art. 6(1)(a) GDPR.

Data processing: the provider is based in Germany; processing takes place within the EU. A data processing agreement pursuant to Art. 28 GDPR is in place with n8n. Further information: https://n8n.io/legal/privacy/

Chatbase¶

Provider: Chatbase.co Inc., Canada. We use Chatbase for a chatbot. The following are processed: technical access data (IP address, date and time, browser, operating system, referrer URL where applicable), your chat inputs, voluntary information (e.g. name, email address), and interaction data (session duration, repeat visits).

Legal basis: your explicit consent pursuant to Art. 6(1)(a) GDPR via our consent banner; use of the chatbot is voluntary.

Third-country transfer: transfer to Canada. An adequacy decision of the European Commission pursuant to Art. 45 GDPR exists for Canada. You can withdraw your consent at any time via our cookie settings tool. Further information: https://www.chatbase.co/legal/dpa

Claude by Anthropic¶

Provider: Anthropic PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA. We use the AI assistant Claude to more efficiently process, summarise and structure enquiries and email correspondence, as well as for internal organisational tasks.

Data processed: content and metadata of the communication conducted with us (in particular sender, recipient, subject, message text, attachments where applicable), contact data, and other personal data transmitted to us in the course of communication.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient and high-quality business operations); within the scope of pre-contractual or contractual relationships, additionally Art. 6(1)(b) GDPR.

Third-country transfer: processing takes place on Anthropic’s servers in the USA on the basis of EU standard contractual clauses (SCC). A data processing agreement pursuant to Art. 28 GDPR is in place with Anthropic.

Hosting¶

We use the following service providers to provide the technical infrastructure for displaying and managing our website.

Vercel¶

Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel hosts and delivers our website. In doing so, server log data (including IP address, time of access, requested resource, browser and operating system) is processed for the purpose of secure and stable operation.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website).

Third-country transfer: transfer to the USA on the basis of standard contractual clauses (SCC) pursuant to Art. 46 GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. Further information: https://vercel.com/legal/privacy-policy

Sanity¶

Provider: Sanity AS, Schweigaards gate 34, 0191 Oslo, Norway. Sanity is our content management system, in which the content of our website is stored and managed.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the efficient management of our website content). Norway is part of the European Economic Area (EEA); in principle, no third-country transfer takes place. A data processing agreement pursuant to Art. 28 GDPR is in place with Sanity. Further information: https://www.sanity.io/legal/privacy

Links to other websites¶

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed straight to that third party’s website. We strongly advise you to review the privacy policies of every website you visit.

We have no control over the content, privacy practices or policies of third-party websites or services and accept no liability in this regard.

Privacy of minors¶

Our Service is not directed at persons who have not yet reached the age of 18 ("minors").

We do not knowingly collect personally identifiable data from minors. If you are a parent or guardian and become aware that a minor in your care has provided us with personal data, please contact us. If we become aware that we have collected personal data from a minor without parental consent, we will take steps to remove that data from our servers.

Contact¶

If you have any questions about this Privacy Policy, you can contact us as follows:

By email: it@crosspaint.tv

Further information about us as the controller can be found in the legal notice (Impressum).