1 Responsible party
The party responsible for data processing is the Health Promotion Switzerland foundation:
Avenue de la Gare 52
1003 Lausanne
Tel. +41 21 345 15 15
webmaster@promotionsante.ch
Berne office
Wankdorfallee 5
3014 Berne
Tel. +41 31 350 04 04
webmaster@promotionsante.ch
The mandate of the Health Promotion Switzerland foundation (»Health Promotion Switzerland”, »we”, »us”) is to initiate, coordinate, evaluate and support measures for the promotion of health and prevention of disease. For this purpose, Health Promotion Switzerland develops specific solutions in collaboration with its partners and works together with public and private organisations. This Privacy Policy outlines how Health Promotion Switzerland processes personal data to fulfil this mandate.
2 Purposes of processing
Health Promotion Switzerland collects and processes personal data in order to provide its services within the legally or contractually stipulated framework or if we have a legitimate interest in the data processing. Insofar as you have consented to us processing your personal data for specific purposes (for example, when you sign up to receive our newsletter), we process your personal data within the scope and on the basis of this consent. Personal data are processed in particular for the following purposes:
• Organising and holding seminars, training courses and other events
• Consulting on and conducting assessments
• Evaluating projects and assisting with the implementation of projects
• Interacting and communicating with respect to our services, activities and offers
• Providing information about our services, activities and offers (newsletters, blogs)
• Advertising, monitoring and optimising our website
• Preparing and delivering products (electronically or physically) (online shop)
• Recruiting staff
• Reviewing and optimising processes to analyse needs in relation to our activities and offers
• Ensuring the safety and continuity of our operations (electronically and physically), complying with legal obligations, enforcing claims
3 Types of personal data
To provide our services and meet our legal and contractual obligations, we process various personal data depending on the service offered, including under certain circumstances sensitive personal data. These include in particular:
• inventory data (e.g. names and addresses)
• contact data (e.g. e-mail addresses and telephone numbers)
• other personal information in connection with our service (e.g. information about usage of our services, registration data, participation) and, in some cases, information about the results of assessments, which could contain information regarding state of health
• content data and usage data on the website (e.g. text entered in comment fields, websites visited, pages accessed, access times, IP addresses, device information, see Section 9 for more information)
We generally receive these data directly from you. We may receive data from third parties (e.g. your employer) when they transmit said data to us with your consent if this is required to fulfil the purpose.
4 Recipients of personal data
We forward your personal data to third parties where this is required to fulfil the data processing purpose since these third parties provide a service on our behalf. We may also forward data if we have a legitimate interest in their being forwarded, if we are legally obligated to forward them or if you have provided consent. These recipients of personal data are generally located in Switzerland, although in exceptional cases they may also be located outside Switzerland. If a recipient is located in a country that does not have adequate statutory data privacy, we ensure that an appropriate level of privacy is guaranteed in another way.
5 Type and duration of processing
We process the data for as long as required to meet our contractual and legal obligations or for as long as Health Promotion Switzerland has a legitimate interest in retaining it, therefore at least for the duration of the contract and in accordance with any applicable legal retention period. When these have expired, the data will be deleted as far as possible.
6 Your rights as data subject
You have the right to information about the personal data processed by us pertaining to you as an individual. Insofar as the legal requirements permit, you can request correction, deletion or restriction of processing.
For such requests and in the case of questions, concerns or other requests please contact webmaster@promotionsante.ch.
You have the right to lodge a complaint regarding processing by us with a supervisory authority for data protection. The supervisory authority for private individuals responsible for Switzerland is the Federal Data Protection and Information Commissioner (FDPIC) (Feldeggweg 1, 3003 Berne, Switzerland).
7 Data security
We take appropriate technical and organisational measures to protect your personal data against manipulation, loss, destruction, unauthorised access or any other form of misuse and to ensure protection of your rights and compliance with applicable data protection regulations.
8 Amendments
We can amend this Privacy Policy at any time without prior notice. The applicable version is the version currently published on our website. Insofar as the Privacy Policy forms part of an agreement with you, we will notify you by e-mail or in another suitable manner in the event of an update or amendment.
9 Data processing when visiting our websites
9.1 Registrations / online shop / applications
When you visit our website or the website of one of our partners and register for an event, order something in the shop or apply for a position, we collect the personal data provided in the relevant forms and under certain circumstances the login information used. The mandatory information (*required field) is needed in all cases; the remaining information is provided on a voluntary basis. These data are processed insofar as this is necessary to provide the service or process the application. They can additionally be de-identified and processed for statistical purposes.
9.2 Blogs / newsletters
Our newsletter is sent using the Campaign Monitor tool (Campaign Monitor Pty Ltd, Level 38, 201 Elizabeth Street, Sydney NSW 2000, Australia; www.campaignmonitor.com); the data are processed on servers / in data centres in the USA or in other countries outside the EU / EFTA. Campaign Monitor uses this information to send and analyse the newsletters on our behalf. According to information it provides, Campaign Monitor can also use these data to optimise or improve its own services, for example to streamline on a technical level how it sends and presents newsletters or for commercial purposes to determine which countries the recipients come from. However, Campaign Monitor does not use the data of our newsletter recipients to contact these people directly and will not forward the data to third parties. Campaign Monitor is certified according to the ISO 27001 information security standard. You can view Campaign Monitor’s privacy policy here: www.campaignmonitor.com/policies/.
You have the option of unsubscribing from the newsletter and withdrawing your consent at any time. To do this, click on the button provided in the newsletter you have been sent, or send an unsubscribe request to webmaster@promotionsante.ch.
9.3 Logs
When you visit our websites, our webhosting partner Metanet AG temporarily saves data in server log files, which can be associated with you or with your access device (e.g. IP address, data and time of access/call-up, information on websites visited and services used, information on device used, operating system and its settings, etc.).
Saving the log files on a temporary basis like this is primarily intended to uphold security or perform technical diagnoses and statistical analyses.
9.4 Google Analytics
This website uses »Google Analytics”, a web analytics service provided by Google LLC, Mountain View, California, USA; in Switzerland, the service is operated by Google Ireland Limited (»Google”). Google Analytics uses »cookies”, which are text files placed on your computer to help the website analyse how you use the site. Please note that Google Analytics has been expanded on this website by the code »anonymizeIp();” which allows IP addresses to be recorded on a de-identified basis (»IP masking”). The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. Google uses this information on our behalf to evaluate the way you use the website, to compile reports on website activities and to provide other services for us relating to website and Internet use.
The IP address transmitted by your browser within the scope of Google Analytics is not consolidated with other Google data. You can prevent cookies from being placed on your device by activating a corresponding setting in your browser software. By doing so, however, please note that in some cases you may not be able to use all the functions of this website in full.
You can also prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being recorded and having these data processed by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout). As an alternative to the browser add-on, especially on mobile browsers, you can prevent recording by Google Analytics by clicking on tools.google.com/dlpage/gaoptout. An opt-out cookie is set that prevents your data from being recorded when you visit this website in future. The opt-out cookie applies only to this browser and exclusively for our website and is placed on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. You can find further information on data privacy in connection with Google Analytics on the Google Analytics support page (https://support.google.com/analytics/answer/6004245?hl=en).
You can find more detailed information on the terms of use and data privacy at www.google.com/analytics/terms/gb.html or at www.google.com/intl/de/analytics/privacyoverview.html.
9.5 Google AdWords
We use »conversion tracking” within the scope of Google AdWords. If you click on an ad displayed by Google, a cookie is set for conversion tracking. These cookies become invalid after 30 days at the most. If you visit our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to this page.
Google notifies us of the total number of users who clicked on our ad and were redirected to our website, which has been tagged with conversion tracking. However, we do not receive any information that could be used to identify you personally. You can prevent cookies from being placed on your device by activating a corresponding setting in your browser software. By doing so, however, please note that in some cases you may not be able to use all the functions of this website in full. You can find further information in Google’s privacy policy www.google.com/policies/privacy/.
9.6 Tracking with Matomo
We use the open-source software tool Matomo (formerly PIWIK; www.matomo.org), a service offered by the provider InnoCraft Ltd. (150 Willis St, 6011 Wellington, New Zealand), on our website to analyse and perform statistical analysis of the website’s usage. Matomo uses cookies that are placed on your computer and permit de-identified analysis of how you use the website. It is not possible to trace any data back to a specific person as your IP address is de-identified immediately after processing and prior to saving. The data are used to analyse how the website is used and to ensure the way our website is designed meets users’ needs. The software is configured so that IP addresses are not saved in full, but rather 2 bytes of the IP address are masked (e.g. 192.168.xxx.xxx). This means it is no longer possible to match the shortened IP address to the calling computer.
You can object to data collection and processing at any time with future effect by clicking on the following link [LINK]. In this case, an »opt-out cookie” is set in your browser, which means that Matomo does not collect any session data. Please note that deleting all of your cookies will also delete the opt-out cookie; if this happens, you will have to reactivate it.
You can prevent the data generated by the cookie and relating to your use of our website (including your IP address) from being recorded by activating the »Do Not Track” setting in your browser. You can find more detailed information on this, the terms of use and data privacy at matomo.org/privacy/ and www.innocraft.com/privacy.
9.7 YouTube
We use the provider YouTube to embed videos. YouTube is a service provided by YouTube LLC (»YouTube”; 901 Cherry Ave., San Bruno, CA 94066, USA). YouTube LLC is a subsidiary of Google Inc. (»Google”).
We use YouTube videos in »privacy-enhanced mode”, meaning that no data about you as a YouTube user are transmitted if you do not play the videos. Only when you activate the videos do data begin to be transmitted. We have no influence over this. You can use a corresponding setting in your browser software to prevent YouTube from installing cookies. You will still be able to use the website. However, in some cases certain functionalities may be restricted.
For further information on processing data in connection with YouTube as well as your rights and configuration options in this regard to protect your privacy, please consult the terms of use and privacy notices at: www.youtube.com/t/terms and www.google.de/intl/gb/policies/privacy.
9.8 Jetpack
We use Jetpack (formerly »WordPress.com-Stats”), a tool that provides statistical analysis of website traffic, operated by Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA) in combination with the tracking technology of Quantcast Corporation (795 Folsom Street, San Francisco, CA 94107, USA). Jetpack uses »cookies” that are placed on your computer and permit analysis of how our website is used by you.
The information generated by the cookie about how you use this website (including your IP address) is stored on a server in the USA. Automattic is certified under the Swiss-US as well as the EU-US Privacy Shield Framework and therefore undertakes to ensure an appropriate level of privacy when transmitting personal data, comparable to that in the EU and therefore also to that in Switzerland.
You can object to your data being collected and processed by Automattic/Quantcast at any time with future effect by clicking on the »Click here to opt out” button at www.quantcast.com/opt-out, which sets an opt-out cookie in your browser. If you delete all cookies on your computer, you will need to click on the link again and install a new opt-out cookie.
You can view Automattic’s privacy policy at automattic.com/privacy/. You can view Quantcast’s privacy policy at www.quantcast.com/privacy/.
9.9 Getty Images
We use content from the stock photo agency Getty Images, which provides photos and other visual material (Getty Images International, 1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland).
Getty Images allows us to embed stock photos using an embed code, e.g. text, video or image data that are provided by an external website and then appear on our own website. The technical implementation of the embed code means that your IP address is transmitted to Getty Images. In addition, Getty Images processes information about our website, the browser type used, the browser language, and the time and duration of access. Getty Images can furthermore record information about usage of our website (e.g. accessing sub-pages and clicking on links) as well as other interactions you performed while visiting our website. Getty Images provides further information on embedding content at www.gettyimages.co.uk/resources/embed.
Getty Images is certified under the US-EU and US-Swiss Privacy Shield Framework and therefore undertakes to ensure an appropriate level of privacy when transmitting personal data, comparable to that in the EU and therefore also to that in Switzerland.
Further information and Getty Images’ privacy policy can be found at www.gettyimages.co.uk/company/privacy-policy.
9.10 Social plugins
We use social plugins from various social networks on our website. These plugins enable you, for example, to share content or recommend products.
We use social plugins (»plugins”) from the following social networks on our website:
• Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
• WhatsApp Inc., 650 Castro Street, Suite 120-219 Mountain View, CA 94041, USA
• Twitter Inc.,1355 Market Street, Suite 900, San Francisco, CA 94103, USA
• LinkedIn Inc., 2029 Stierlin Ct, Mountain View, CA 94043, USA
• Xing SE, Dammtorstrasse 30, 20354 Hamburg, Germany
When you visit our website and one of the social plugins listed on the website is activated, a direct connection is established between your browser and the server of the social network in question. The content of the plugin is transmitted directly from the social network to the browser and integrated by it into the website. This provides the network with the information that you have visited our website. If you are logged in to the social network, this can assign the visit to your account. If you interact with the plugins, the corresponding information is transmitted by the browser directly to the social network and saved there.
Even if you are not logged in to the social networks when you visit our website, data can be sent to the networks by websites with active social plugins. An active plugin causes a cookie with an identifier to be set each time the website is accessed. Since your browser sends this cookie without being solicited to do so every time it connects to a server operated by the respective networks, this means that, in principle, the social networks could use this to create a profile of which websites have been accessed by the user associated with the identifier. In some cases it could then be possible to assign this identifier to a person down the line, for example when logging in to the social network later on.
If you select the function »Block third-party cookies” in your browser settings, then your browser will not send any cookies to the respective social network server. However, activating this setting could affect the operation not only of the plugins but under certain circumstances also other site-wide functions offered by other providers.
For more information on the purpose and scope of data collection and the further processing and use of your personal data, please refer to the privacy policies of the networks in question. There you can also find additional details about your rights and configuration options in this regard to protect your privacy, as well as your right of objection to the creation of user profiles:
• https://www.facebook.com/policy
• https://www.whatsapp.com/legal/
• https://twitter.com/privacy
• https://www.linkedin.com/legal/privacy-policy
• https://privacy.xing.com/en/privacy-policy
To support the user-friendly integration of the social plugins listed above, we use the third-party tool »AddThis” from Oracle America, Inc. (»Oracle”), 500 Oracle Parkway, Redwood Shores, CA 94065, USA. AddThis transmits log data to Oracle’s servers in the USA. These log data may contain your IP address, the addresses of the websites visited which also contain AddThis functions, the browser type and settings, the date and time of the request, and the way you use AddThis and cookies. Oracle is certified under the US-EU and US-Swiss Privacy Shield Framework and therefore undertakes to ensure an appropriate level of privacy when transmitting personal data, comparable to that in the EU and therefore also to that in Switzerland. Privacy policy: www.addthis.com/privacy/privacy-policy.
9.11 Social media presence
We have social media profiles on Facebook, Twitter, YouTube and LinkedIn.
The data you enter on our social media profiles are published by the social media platforms and are at no time used or processed for other purposes. We reserve the right to delete content insofar as this is necessary and it is possible for us to do so. If need be, we may communicate with you via the social media platforms.
Please be advised that the operators of the social media platforms use web tracking methods. Web tracking – over which we have no influence – may occur regardless of whether you are logged in to or signed up with the social media platforms.
You can find more details on how the data are processed by the provider of the social media platform in the privacy policies of the respective providers indicated above.
As at November 2019