Back
OneLog privacy policy
Dear customer,
This privacy policy gives you an overview of the personal data concerning you that we (hereinafter referred to as 'OneLog' or 'us'). collect, process and share when you use the free registration and login service. You will also learn about the rights you have regarding data protection and how you can exercise these.
By using OneLog, you declare that you agree to the processing of your personal data and non-personal data in accordance with this privacy policy and that you accept this privacy policy.
Please note that all companies that have implemented OneLog AG (hereinafter referred to as 'affiliated companies') have their own privacy policies which contain details on how each company processes personal data. The use of websites and mobile applications (hereinafter referred to as ‘digital services’) from companies that use OneLog are therefore subject to the company-specific privacy policies in addition to this privacy policy. These are referred to when you use the digital services offered by the company for the first time. If there are any discrepancies between this privacy policy and the company-specific privacy policy, the latter shall take precedence.
Please read this privacy policy at regular intervals so that you are always up-to-date on what happens to your personal data when you use OneLog and so that you can exercise your rights.
Some interesting facts about OneLog and us:
  • What is OneLog?
  • OneLog allows you to log in to all digital services for which OneLog has been implemented following one-time registration and authentication via OneLog, without the need for a further authentication process.
  • Who is behind OneLog?
  • OneLog AG is a joint venture (hereinafter referred to as “JV”) of Ringier AG (About us – Who we are and how you can contact us | Ringier  and TX Group AG (TX Group - tx.group). The OneLog joint venture was set up to develop and operate a joint single sign-on solution for the Swiss Digital Alliance.
  • Who is responsible for data processing?
    • The controller is OneLog AG, c/o Ringier AG, Dufourstrasse 23, 8008 Zurich.
      If the General Data Protection Regulation (EU GDPR) applies to data processing carried out by us, our EU representative is:
      DSM Avocat à la Cour
      Renaud LE SQUEREN
      L-2146 Luxembourg
      B.P. 2648 | L-1026 Luxembourg
      eu-representative-onelog@dsm.legal
  • How can you contact us?
  • You have different options when it comes to contacting us:
    If you have a question regarding data protection law you can send an email or letter to OneLog AG’s data protection officer:
    Email address:
    Postal address:
    OneLog AG
    c/o Ringier AG
    Data protection
    Dufourstrasse 23
    8008 Zurich
    If you have a question regarding your OneLog user account, you can send us an email or contact us via our contact form:
    Email address:
    When using the contact form, please enter your first name, last name, email address and message so that we are able to process your request. Your information is provided on a voluntary basis.
  • What data is processed when you use OneLog?
  • There are essentially two categories of data that are processed when you use OneLog: da una parte i personal data (section 5.1) and non-personal data (section 5.2)
    • What is personal data and what does ‘processing’ mean?
    • Personal data is any information that concerns you and reveals something about you. As an example, this could be your first name, last name, postal address, email address, date of birth, telephone number or similar information.
      Information that cannot be linked to you personally, i.e. your identity, is not considered to be personal data. It is anonymous.
      Processing refers to any handling of your personal data. Among other things, this refers to the recording, collection, anonymisation, storage, administration, use, transmission, disclosure and erasure of your personal data.
      • Your trust in us protecting your personal data and therefore you as a person is important to us. That’s why we want you to know the following.
        We adhere to the principles imposed by Switzerland’s data protection laws and those of the European Union, if applicable. This means that we transparently explain to you the type of personal data we process and for what purpose. We only process personal data that we have obtained lawfully and for which we have a legal basis for processing, if needed. A legal basis can be a contract, your consent, a law or a public interest that allows us to process it or a legitimate interest on our part.
        Whenever we process your personal data, we will inform you of what we intend to do with it. If we no longer need your personal data and are no longer legally obliged to store it or you no longer want us to have and process it, then we will stop doing so.
        You can find out what rights you have with respect to your personal data and how you can exercise them in section 11 below.
      • What personal data is processed when you use OneLog and for what purpose?
      • If you use OneLog, OneLog AG and any affiliated companies process your personal data for the following purposes:
        • OneLog registration; and
        • to compile statistics and analyses relating to the use of digital services.
        • OneLog registration
        • When you register with OneLog, you will receive a cross-platform user account (hereinafter referred to as the ‘OneLog user account’). Collection of the following personal data is required from you on registration:
          • Salutation (gender)
          • First name
          • Last name
          • Email address
          This personal data is processed for the following purposes:
          • to fulfil the user contract between you and OneLog AG;
          • to create a OneLog user account;
          • to check access authorisations and to administer and manage the OneLog user account; and
          • to provide OneLog and digital services offered by affiliated companies.
          Please note that some affiliated companies collect and process additional personal data to allow them to provide their digital services to you. A more detailed description can be found in each company’s privacy policy.
        • Commenting on one of our articles
        • If you comment on an article made available via a digital service, your last and first name and – if applicable – your place of residence will be published in connection with your comment. Your comment, including personal data, can be shared on third-party websites and found via search engines.
        • Statistics and analyses relating to the use of digital services
        • We compile statistics and analyses to allow us to better analyse and evaluate how our digital services are used.
      • Other OneLog registration and login options
        • Registration/login with SwissID
        • You have the option of registering with or logging in to OneLog using SwissID – a Switzerland-wide uniform login from SwissSign Group AG (hereinafter referred to as ‘SwissSign’). If you do this, we receive the personal data required by SwissSign Group AG for registration or login (salutation, first name, last name, email address).
          OneLog AG has no control over the scope of data collected by SwissSign if you use SwissID. You can find more information about the purpose and scope of collection as well as the further processing and use of your data by SwissSign Group AG, your rights and settings options to protect your data in SwissSign Group AG’s privacy policy: Data protection | SwissID
          Please note that some affiliated companies request and process additional personal data to allow them to provide their digital services to you. A more detailed description can be found in each company’s privacy policy.
        • Registration/login via Facebook (social sign-in)
        • You have the option of registering with or logging in to OneLog using your Facebook account. If you do this, we receive the personal data required by Facebook for registration or login (salutation [optional], first name, last name, email address).
          OneLog AG has no control over how Facebook handles data collected via Facebook login. You can find more information about the purpose and scope of collection as well as the further processing and use of your data by Facebook, your rights and settings options to protect your data in Facebook’s privacy policy: Facebook
          Please note that some affiliated companies request and process additional personal data to allow them to provide their digital services to you. A more detailed description can be found in each company’s privacy policy.
        • Registration/login via Google (social sign-in)
        • You have the option of registering with or logging in to OneLog using your Google account. If you do this, we receive the personal data required by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as ‘Google’) for registration or login (salutation [optional], first name, last name, email address).
          OneLog AG has no control over how Google handles data collected via Google login. You can find more information about the purpose and scope of collection as well as the further processing and use of your data by Google, your rights and settings options to protect your data in Google’s privacy policy: Privacy policy – Privacy policy & terms of use – Google
          Please note that some affiliated companies request and process additional personal data to allow them to provide their digital services to you. A more detailed description can be found in each company’s privacy policy.
        • Registration/login via ‘Sign in with Apple’ (social sign-in)
        • You have the option of registering with or logging in to OneLog using your Apple account. If you do this, we receive the data required by Apple Inc. One Apple Park Way, Cupertino, CA, 95014, USA for registration or login.
          OneLog AG has no control over how Apple handles data collected via Sign in with Apple. You can find more information about the purpose and scope of collection as well as the further processing and use of your data by Apple, your rights and settings options to protect your data in Apple’s privacy policy: Apple privacy policy - Apple
          Please note that some affiliated companies request and process additional personal data to allow them to provide their digital services to you. A more detailed description can be found in each company’s privacy policy.
        • Login with WebAuthn
        • You have the option of logging in to OneLog on a voluntary basis using various forms of WebAuthn (e.g. Apple Touch ID and Face ID).
          In these cases, OneLog does not receive any personal data from the provider. Your device is identified using encrypted and anonymised data. You can find more information on this from the software or hardware providers in question – via the following link for Apple, for example: Data protection - Control - Apple (CH).
    • What non-personal data is processed when you use OneLog?
      • Non-personal data is information that cannot be linked to you personally, i.e. your identity. As such, this data is anonymous for us.
        We collect and process this data so that we can continuously improve OneLog and adapt it to your needs, identify trends, and compile and evaluate statistics on how OneLog is used.
  • What technologies do we use and how do we use them?
  • We use the following technologies as follows:
    • Cookies
    • Cookies are used on the OneLog website. A cookie is a small text file that is saved on your device when you use OneLog.
      Cookies can be split into session cookies and persistent cookies.
      • Session cookies can be used to track the websites you have visited and the options you have used. A session cookie is only saved for the duration of your online visit, i.e. during a single Internet session. The session ends and the cookie is deleted when you close your web browser.
      • Among other things, persistent cookies can be used to recognise you again on a subsequent visit and to recognise your preferences such as your reading preferences, for example. A persistent cookie is stored for longer than a single session.
      Cookies can also be split into functional and non-functional cookies. OneLog AG uses both functional and non-functional cookies on the OneLog website:
      • Functional cookies are necessary to ensure the functionality of websites or services.
      • Non-functional cookies are not absolutely necessary for website functionality. This type of cookie is used to collect and analyse data on website usage or the use of mobile applications (language preferences, duration of a user session, etc.).
      At OneLog, we use the following Google services to analyse your surfing behaviour:
      The OneLog website uses Google Analytics, which is a web analysis service provided by Google Inc. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Use includes the ‘Universal Analytics’ operating mode. If a user is logged in to a Google service, this makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyse a user’s activities across different devices. Google Analytics uses cookies. The information generated by the cookies about your use of our website may be sent to a Google server in the US and saved there. However, IP addresses are anonymised beforehand using IP anonymisation. The anonymised IP address sent by your browser as part of Google Analytics will not be merged with other Google data. Google uses this information to evaluate your use of our website and to compile reports on website activity on our behalf, in addition to providing us with other services relating to website activity and Internet use.
      You can find more information on the terms of use and data protection at the download page for the browser add-on to disable Google AnalyticsYou can also prevent cookies from being saved by changing your browser software settings.
      We also use Google Tag Manager to integrate Google analysis and marketing services into our website and to manage them. Google Tag Manager is a solution that you can use to manage website tags via an interface. The actual tool that implements tags is a cookie-free domain and does not collect any personal data. However, the tool enables other tags which may collect data. Google Tag Manager itself does not have access to this data. If tags have been disabled at domain or cookie level, this will remain in place for all tracking tags implemented using Google Tag Manager.
      You can find more information about Google Tag Manager in the Google Tag Manager Use Policy
      We use reCaptcha. on our website. ReCaptcha is an acronym for ‘completely automated public Turing test to tell computers and humans apart’. It is a test designed to distinguish people from machines/robot programs, or ‘bots’ for short. reCAPTCHA is a service that tries to determine whether a certain action on the internet is being carried out by a human being or by a computer program. reCAPTCHA is used as part of double opt-in when subscribing to the newsletter.
      You can find more information about data processing and information on data protection by reCAPTCHA at:Privacy policy – Privacy policy & terms of use – Google
      We also use the service Sentry (Sentry, 1501 Mariposa St #408, San Francisco, CA 94107, USA) to improve the technical stability of our service by monitoring system stability and identifying code errors. Sentry serves these purposes alone and does not evaluate any data for advertising purposes. User data, such as information about the device or the time of the error, is collected anonymously and used in a non-personal way before being erased.
      You can find more information about this in Sentry’s privacy policy: Application monitoring and error tracking software | Sentry.
      You can manage and/or delete cookies at any time by using the opt-out link provided above. Most web browsers automatically accept certain cookies by default. However, you are free to change your browser settings so that cookies are generally rejected by selecting ‘do not accept cookies’ in your browser settings, or by being asked first before your browser accepts a cookie from a website you visit. You also have the option of deleting cookies on your computer or mobile device by using the relevant browser feature. Please be aware that you must disable or delete cookies on all of your devices. Please note that by deleting cookies in your browser, you will also delete the opt-out cookie, i.e. if you still want to have an opt-out cookie enabled and have deleted all of the cookies, you must re-enable the opt out cookie when you visit this website again. Otherwise, you will be recognised as a new user and your data will be collected again. Please also be aware that you must disable cookies on all of your devices. If you choose one of these options, you may be unable to use all of the website’s features to their full extent.
      You can click on the following links to find out more about this option for the most commonly used browsers:
    • Log files
    • When using OneLog, the web servers register non-personal usage data – known as ‘log files’. Log files provide information on your IP address, the operating system used, the websites you have visited, interactions on the websites, your browser type and version, the date, time and the requested file. This information is technically necessary in order to correctly provide you with the website content requested and is mandatory when using the Internet. Such anonymous data is stored separately from any personal data you may have provided and thus does not allow any conclusions to be drawn about you personally.
      Such non-personal usage data is statistically evaluated by us in order to optimise our website and the technology behind it, to identify trends and to tailor OneLog to your needs as best as possible.
  • How and when is your data shared?
  • When you register with an affiliated company for a product for the first time, your personal data will be shared with that company and processed for the purposes mentioned above (section 5.1.2).
    Your personal data may also be shared with third parties outside OneLog AG who provide technical or organisational services on behalf of OneLog AG where we need such services to fulfil the above-mentioned purposes or to carry out general business activities. We contractually oblige these service providers to process your personal data exclusively on our behalf as per our specifications and to ensure the protection of your personal data by implementing appropriate technical or organisational security measures.
    We share your data with the following categories of recipients:
    • affiliated companies;
    • IT service providers;
    • hosting partners;
    • providers to which we have outsourced certain support services such as translation work or document reviews;
    • third parties who have been commissioned within the scope of services we offer our customers with their prior consent, for example other law firms or other service consulting companies; and
    • authorities and courts, if applicable.
    If you comment on an article made available via a digital service, you also consent to your last and first name and – if applicable – your place of residence being published in connection with your comment. Your comment, including personal data, can be shared on third-party websites and found via search engines.
    Your personal data will not be passed on, transferred or sold to third parties outside OneLog AG unless this is necessary to process a contract that you have concluded with OneLog AG or you have given your explicit consent.
    We may share personal data where this is required by law, for example if we are required to share personal data with a law enforcement agency or for the purpose of prosecuting or uncovering unlawful activities.
  • Is your data transmitted abroad?
  • If your personal data is also transmitted to third parties abroad, i.e. outside of Switzerland or the European Economic Area [EEA]), they are obliged to comply with data protection to the same extent as we are. If the specific country does not have an adequate level of data protection, we will ensure that your personal data does have an adequate level of data protection. In particular, we ensure this by concluding EU Commission ‘standard data protection clauses’ with the companies concerned and/or through binding corporate rules (BCR) for the companies concerned, recognised by a European data protection authority, and, if necessary, further guarantees. If this is not possible, we base the data transfer on your explicit consent or the necessity of the transmission to fulfil a contract
  • How is your data secured?
  • OneLog AG operates secure data networks that meet all applicable technical standards. Appropriate technical and organisational measures are implemented to scrupulously protect your data from loss, destruction, falsification, manipulation and unauthorised access.
    Although OneLog AG makes every effort to prevent the disclosure of data due to errors in data transmission and/or unauthorised access by third parties, it cannot accept any liability for such unwanted events.
  • How long is your data stored for?
  • We only process and store your personal data for the period necessary to achieve the purpose of storage or if this is required by laws or regulations to which we are subject. If the storage purpose no longer applies or if a set storage period expires, your data will be suppressed or erased by default and in line with any applicable legal provisions.
  • What are my rights when it comes to personal data?
  • You are entitled to determine what happens to your personal data yourself and you can always find out what happens to your personal data.
    So that we are able to check your identity, we ask that you send the request directly from your OneLog user account via email or, for written requests, to enclose a copy of proof of identity.
    If you have a question regarding additional data collected by affiliated companies, please consult the company-specific privacy policy.
    For questions in connection with data protection carried out by us and for information regarding your rights and how to assert them, you can contact us at any time using the contact options provided in section 4 of this privacy policy. If necessary, we reserve the right to request identification from you in a suitable manner in order to process requests.
    You have the following rights under data protection law:
    • Right of access
    • You have the right to obtain from us confirmation as to whether or not and what personal data concerning you is being processed.
    • Right to have your personal data rectified
    • You have the right to obtain the rectification of inaccurate personal data concerning you and, where applicable, to have incomplete personal data concerning you completed in our systems.
    • Right to have your personal data erased
    • You have the right to request that your personal data is erased, e.g. if the data is no longer required for the intended purposes. However, if we are obliged to keep your personal data because of legal or contractual retention requirements, we are only able to restrict or suppress your personal data in these cases as far as this is necessary.
    • Right to have the processing of your personal data restricted
    • You have the right to ask us to restrict the processing of your personal data.
    • Right to data portability
    • You have the right to receive your personal data, which we process automatically on the basis of your consent or in order to fulfil a contract, in a structured, commonly used and machine-readable format or to request that such data is transmitted to a third party. If you ask us to directly transfer the data to another controller, this will only be done if this is technically feasible.
    • Right to object
    • You have the right to object to the processing of your personal data at any time, in accordance with legal provisions. In particular, you have the right to object to the processing of your personal data for the purpose of direct marketing.
    • If you have consented to the processing of your personal data, you are entitled to withdraw your consent at any time. If the processing of the personal data serves marketing and advertising purposes, you can withdraw your consent to processing for these purposes in general or in relation to specific products or services.
    • Right to lodge a complaint
    • You have the right to submit a report to the relevant supervisory authority or to lodge a complaint if you are of the opinion that the processing of your personal data is not in compliance with data protection regulations. You can do so with the supervisory authority in the country where you live or work, or in the town, city or country where the alleged data breach took place.
  • Changes to this privacy policy
  • OneLog AG adapts this privacy policy to new or changing needs. The new version will be made available to you in a suitable place.
    The current privacy policy published by us applies in each case.
    Version 2.0 / February 2022