Status: 18.08.2018

1. Data protection at a glance

General Information

The following information gives a brief overview of what happens to your personal data when you visit our website. Personal data refers to any data which could be used to personally identify you. For detailed information on the subject of data protection, please refer to our Data Protection Policy listed below this text.

Data collection on our website

Who is responsible for data collection on this website?
The processing of data on this website is carried out by the website provider. Contact details can be found on the Legal Notice of this website.

How do we collect your data?

Your data is collected because you provide it to us. For example, this could be the information you enter into a contact form.

Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). The collection of this data occurs automatically as soon as you enter the website.

How do we use your data?

Some of the data is collected in order to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You retain the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blockage or deletion of this data. You can contact us at any time at the address given in the Legal Notice for this purpose and for further questions on the subject of data protection. You also have the right to lodge a complaint with the appropriate regulatory body.
Analysis tools and tools from third-party providers
When you visit our website, your browsing behaviour may be evaluated. This primarily takes place using cookies and analytical software. Analysis of your browsing behaviour generally takes place anonymously; the browsing behaviour cannot be traced back to you. You may opt out of or prevent this analysis by not using certain tools. You can find detailed information regarding this in the following Data Protection Policy.

You may opt out of this analysis. Opportunities to opt out are explained in our Data Protection Policy.

2. General information and statutory information

Data protection

The operator of these pages takes the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with statutory data protection regulations as well as this Data Protection Policy.

When you visit this website, various personal data is collected. Personal data pertains to any data which could be used to personally identify you. This Data Protection Policy explains what data we collect and the purposes for which it is used. It also explains how and why this takes place.

We would like to point out that data transfer on the internet (e.g. when communicating by email) can be a source of security vulnerability. Complete protection of data against access by third parties is not possible.

Withdrawing your consent to data processing

Several data processing processes are only possible with the express consent of the user. You have the right to revoke any consent previously given at any time. To do so, send a message to us via email. The legality of the data processing carried out until the withdrawal of consent is unaffected by the withdrawal.

Right of complaint to the appropriate regulatory body
In the event of violations of data protection law, the data subject has a right of appeal to the appropriate regulatory body. The appropriate regulatory body in matters of data protection law is the data protection commissioner of the country or canton in which our company has its registered office.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transfer of confidential data, such as in orders or inquiries sent to the site operator, this page uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the padlock symbol next to the URL.
When SSL or TLS encryption is activated, the data transferred to us cannot be read by a third party.

Disclosure, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to the free disclosure of information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data. You can contact us at any time at the address given in the Legal Notice for further questions on this or on the subject of personal data.

Consent to promotional emails

We hereby expressly prohibit the use of the contact data published as part of our duty to publish a Legal Notice under German law for the purpose of sending advertising or promotional materials that have not been requested. The operators of the websites expressly reserve the right to pursue legal action in the event of the unsolicited sending of advertising material, for example through spam emails.

Operation of web solutions by a third party (hosting)

We have commissioned Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, based in Switzerland, with the provision and technical support of our platform (web server operation, hosting). Insofar as data is transferred, stored and processed, this is done in accordance with the instructions of the platform operator and within the framework of data processing in accordance with the DSG/EU-GDPR. The servers used for operation are located in Switzerland.

Data processor

The contractual relationship with the processor is regulated by means of written contracts and the data protection provisions shown here have been transferred to this processor. We regularly monitor the measures taken by Hostpoint AG to protect your data. Passing on this data to third parties by the data processor is contractually forbidden.

3. Data protection officer (required by law)

The data protection officer appointed for our company is:

Swiss HePa
Carina Bobzin
Keltenstrasse 10
8125 Zollikerberg
Switzerland

Telephone: +41 43 542 21 20
Email: bobzin@swisshepa.org

4. Data collection on our website

Cookies

Internet pages sometimes use cookies. Cookies do not harm your computer and do not contain viruses. Cookies make our offering more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are known as 'session cookies'. These are automatically deleted after your visit. Other cookies remain saved on your end device until they are deleted. These cookies allow us to recognise your browser during your next visit.

You may configure your browser so that you are informed about the placement of cookies and only permit cookies in certain circumstances, exclude the acceptance of cookies in some cases or in general, as well as activating the automatic deletion of cookies when the browser is closed. Deactivating cookies may affect the functionality of this website.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Article 6 Paragraph 1f GDPR. The website operator has a legitimate interest in the storage of cookies to prevent technical errors and optimise the provision of its services. The extent to which other cookies (e.g. cookies to analyse your browsing behaviour) are stored is handled separately in this Data Protection Policy.

Server log files

The provider of the pages collects and stores data automatically in server log files that your browser automatically transmits to us. This data includes:

  • browser type and browser version
  • operating system used
  • referrer URL (=previously visited page)
  • hostname of the accessing device
  • date and time of the server request
  • IP address
  • name of the page/file clicked on
  • volume of data transferred

The provider uses the log data only for statistical evaluations for the purpose of operation, security and optimisation. However, the provider reserves the right to subsequently review the log data if there is a justified suspicion of illegal use based on concrete signs.
Merging this data with other data sources will not take place.

The basis for the data processing is Article 6 Paragraph 1b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you have provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up enquiries. This data will not be passed on without your permission.

The processing of data entered in the contact form therefore only takes place with your consent (Article 6 Paragraph 1a GDPR). You can revoke this consent at any time. To do so, send us a message via email. The legality of the data processing carried out until the withdrawal of consent is unaffected by the withdrawal.

The data you enter in the contact form will remain stored by us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular, retention periods - remain unaffected.

5. Analysis tools and advertising

Google Analytics

This website uses functions provided by web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
Google Analytics uses cookies. These are text files that are stored on your computer and enable analysis of your usage of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The basis for the storage of Google Analytics cookies is Article 6 Paragraph 1f GDPR. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise its web offering as well as its advertising.

Browser plugin

You may prevent the storage of cookies by selecting the appropriate browser settings; however, please note that this may affect the full functionality of the website. You can also prevent the collection of data generated by the cookies and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout.

Objection to data processing

You may prevent the collection of your data by Google Analytics by clicking on the following link. This places an opt-out cookie that prevents the collection of your data during future visits to this website: deactivate Google Analytics.

There is further information on the handling of user data at Google Analytics in Google's Data Protection Policy: support.google.com/analytics/answer/6004245.

Order processing

We have agreed an order processing agreement with Google and fully implement the strict requirements of data protection authorities when using Google Analytics.
Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.

This feature allows the advertising audiences created with Google Analytics Remarketing to be linked to the cross-device features of Google AdWords and Google DoubleClick. By this means, interest-based, personalised advertising messages that have been adapted to your previous usage and browsing behaviour on one device (e.g. a mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history with your Google account for this purpose. By this means, the same personalised advertising messages can be displayed on every device you use to log into your Google account.

To support this function, Google Analytics collected Google-authenticated user IDs which are temporarily linked to our Google Analytics data to define and generate target groups for cross-device advertising.

You can permanently revoke consent to cross-device remarketing/targeting by deactivating personalised advertising in your Google account; to do so, follow this link: www.google.com/settings/ads/onweb/.

The centralisation of the collected data in your Google Account only takes place with your consent which you can provide or revoke to Google (Article 6 Paragraph 1a GDPR). In the case of data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have revoked consent to the merging), the collection of the data is based on Article 6 Paragraph 1f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymised analysis of website visitors for advertising purposes.

For further information and the data protection regulations, see Google's Data Protection Policy at: www.google.com/policies/technologies/ads/.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising programme from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (‘Google’).

As part of Google AdWords, we use what is known as conversion tracking. When you click on a Google-displayed advert, a conversion tracking cookie is generated. Cookies are small text files that the internet browser places on the user's computer. These cookies expire after 30 days and cannot be used to personally identify the user. If the user visits certain pages on this website and the cookie has not expired, Google and we can recognise that the user has clicked on the advert and been redirected to this page.

Every Google AdWords customer receives a separate cookie. The cookie cannot be tracked across AdWords customers' websites. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customer is informed of the total number of users who have clicked on their advert and were redirected to a page tagged with a conversion tracking tag. However, they receive no information that would allow personal identification of the user. If you do not wish to participate in the tracking, you may object to its use by easily deactivating the Google conversion tracking cookie via your internet browser under the user settings. You will not be included in the conversion tracking statistics.

The basis for the storage of conversion cookies is Article 6 Paragraph 1f GDPR. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise its web offering as well as its advertising.
More information about Google AdWords und Google Conversion Tracking can be found in Google's Privacy Policy: www.google.de/policies/privacy/.

You may configure your browser so that you are informed about the placement of cookies, only allow cookies on a case-by-case basis, exclude the acceptance of cookies in certain circumstances and activate the automatic deletion of cookies when the browser is closed. Deactivating cookies may affect the functionality of this website.

IP anonymisation

We have activated the IP anonymisation function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. The full IP address will only be transmitted to Google's servers in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Objection to data collection

You may prevent the collection of your data by Google Analytics by clicking on the following link. This places an opt-out cookie that prevents the collection of your data during future visits to this website: deactivate Google Analytics.

Order data processing

We have agreed an order processing agreement with Google and fully implement the strict requirements of data protection authorities when using Google Analytics.
Demographic features in Google Analytics
This website uses the ‘demographic features’ function in Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data originates from interest-based advertising by Google as well as visitor data from third-party providers. This data cannot be associated with any specific person. You may deactivate this function at any time via the advertising settings in your Google account or prohibit the collection of your data through Google Analytics across the board as described in the section ‘Objection to data collection’.

6. Newsletter

Newsletter data

If you wish to receive the newsletter offered on this website, we require your email address as well as information that allows us to verify that you are the owner of the email address provided and that you consent to receive the newsletter. No further details are collected, or are collected only on a voluntary basis. We only use this information to send the requested information and do not pass it on to third parties.
The processing of data entered in the contact form therefore only takes place with your consent (Article 6 Paragraph 1a GDPR). You can revoke your consent to the storage of the data, email address and their use for sending the newsletter at any time, via the ‘Unsubscribe’ link in the newsletter. The legality of the data processing carried out until the withdrawal of consent is unaffected by the withdrawal.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data that is stored by us for a separate purpose (e.g. email addresses for the members' area) is unaffected.

7. Plugins and tools

Google Web Fonts

This page uses so-called Web Fonts provided by Google for the uniform display of fonts. When you request a page, your browser loads the required web fonts in its browser cache in order to display texts and fonts correctly.

To do so, your browser must connect to Google's servers. This notifies Google that our website has been accessed via your IP address. The use of Google Web Fonts ensures the uniform and appealing presentation of our online offering. This represents a legitimate interest according to Article 6 Paragraph 1f GDPR.

If your browser does not support Web Fonts, a standard font will be used by your computer.

More information about Google Web Fonts can be found at developers.google.com/fonts/faq and in Google's Data Protection Policy: www.google.com/policies/privacy/.