Privacy Policy

Protecting your data is a matter of importance to us. For that reason, in the following privacy policy, we provide you with comprehensive information about how we handle your personal data.

In this privacy policy, we explain how we collect and process personal data. This privacy policy also applies to the use of our website and newsletters.

The term ‘personal data’ means all information relating to an identified or identifiable person. If you provide us with other people’s personal data (e.g. data pertaining to family members or work colleagues), please ensure that these persons are aware of this privacy policy; only share their personal data with us if you are authorised to do so and if the personal data is correct.

This privacy policy is based on the Swiss Data Protection Act (FADP). The question of whether and to what extent this legislation is applicable depends on the individual case. This privacy policy is not an exhaustive description; other privacy policies or general terms and conditions may govern specific matters.

The Society for Threatened Peoples (STP), Birkenweg 61, 3013 Bern, is the association responsible for the data processing described in this privacy policy, unless otherwise stated in individual cases.

If you have any data protection concerns, you can let us know by contacting us at the following email address: eleni.helbling@gfbv.ch.

We primarily process personal data that we receive in the context of our relations with donors and business partners (either from them or from other persons involved) or that we collect from users of our websites and other applications during operation thereof.

To the extent permitted, we also obtain certain data from publicly accessible sources (e.g. debt enforcement registers, land registers, commercial registers, the press or the internet) or receive such data from authorities and other third parties (e.g. database marketers). Alongside the data that you give us directly, the categories of personal data about you that we receive from third parties include, in particular, information from public registers or data relating to use of the website (e.g. IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of visit, pages and content accessed, functions used, referring website, and location data).

Our use of the personal data that we have collected primarily occurs in the context of processing, generating and receiving donations, for communication with our donors, for the procurement of products and services from our suppliers and subcontractors, and for meeting our legal obligations in Switzerland and abroad. If you work for such a customer or business partner, you, in this role, along with your personal data, may also be affected.

In addition, we also process personal data pertaining to you and other persons, to the extent that is permitted and that we deem appropriate, for the following purposes, which are such that we (and sometimes third parties) have a legitimate interest in them: providing and enhancing what we offer, our services, our website and other platforms on which we are present; communicating with third parties and processing their queries (e.g. media queries); testing and optimising needs-analysis procedures, so as to directly address customers and to collect personal data from publicly accessible sources for the purpose of donor acquisition; advertising and marketing (including the organisation of events) unless you have objected to such use of your data (if we get our advertising sent to you as an existing donor, you can object to this at any time and we will then put you on a corresponding opt-out list); media monitoring; asserting legal claims and mounting a defence in connection with legal disputes and official proceedings; preventing and investigating criminal offences and other misconduct (e.g. conducting internal investigations and data analysis to combat fraud); upholding guarantees pertaining to our operations, particularly regarding IT, our website and other platforms; taking measures to safeguard domiciliary rights and other measures for IT security, building security or facility security, and for protection of our staff or other persons and assets belonging to or entrusted to us (e.g. access control, visitor lists, network scanners, email scanners, and recordings of phone calls).

For certain types of processing, we have asked for your consent. You can revoke your consent at any time in writing; the revocation will take effect from that point onwards. In any cases of processing in which we do not ask for your consent, our grounds for the processing of your personal data are that it is necessary for fulfilment of a contract with you (or with the entity you represent) or that we or third parties have a legitimate interest in it, particularly in order to pursue the purposes described above, along with the associated objectives, and to be able to take corresponding measures. Our legitimate interests also include compliance with statutory provisions, insofar as this is not already recognised as a legal basis by the applicable data protection legislation.

Handling of your data and data security

We treat your data as confidential. We take suitable technical and organisational precautions to protect the data against loss, manipulation and unauthorised third-party access. In general, your data is deactivated, deleted or blocked as soon as the purpose for which it was stored no longer applies.

SSL encryption

Our website uses SSL encryption for security reasons and to protect the transmission of confidential content, e.g. queries you send to us in our role as site operator. If a connection is encrypted, this is indicated to you in the browser’s address bar, as the address changes from ‘http://’ to ‘https://’ and the lock symbol is displayed.

When SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Rights as data subject

You have the right to information, rectification, erasure, restriction of data processing, the general right to object to our data processing, and the right to receive certain personal data for the purpose of transfer to another organisation (so-called ‘data portability’). However, please note that we reserve the right to impose the restrictions provided for by law, for instance if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are entitled to invoke this) or require the data for assertion of claims. If any of this incurs costs for you, we will inform you in advance. Please note that exercising these rights may conflict with contractual agreements and entail consequences such as premature contract cancellation or costs. In such cases, we will notify you in advance, if this is not already contractually stipulated.

Every data subject also has the right to assert their claims in court or to lodge a complaint with the relevant data protection authority. In Switzerland, the relevant data protection authority is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

You can contact us at eleni.helbling@gfbv.ch.

Legal basis for the processing of your data

The editing and processing procedures described below comply with the applicable legal basis.

The STP regularly sends out appeals for donations to potential new donors. In some cases, the addresses used for this come from established Swiss providers of addresses and data services. The legal basis for data processing is your consent and/or the STP’s legitimate interest. You can request information about the data stored by providers of addresses and data services at any time.

If you contact us by email or in any other way (e.g. contact form, giving us a business card or calling us on the phone), we store the data you provide (your email address, and possibly your name and phone number) in order to answer your questions. By sending us a contact request, you consent to the processing of your transmitted data (e.g. email address and name) so that we can respond to your query and contact you.

We send existing donors information in newsletters. Unless you object, we use the email address indicated on the donation form to send newsletters, in which we provide information on the progress of projects and appeal for further support. We also send our electronic newsletters to interested parties, sympathisers and donors, based on their consent. Each newsletter contains a clearly visible ‘unsubscribe’ link, which recipients can easily use to unsubscribe from the newsletter at any time.

Subscribing  

Subscribing to our newsletters involves a so-called ‘double opt-in’ procedure. This means that after subscribing, you receive an email asking you to confirm your subscription. This confirmation is necessary, in order to ensure that nobody can subscribe using other people’s email addresses.

Newsletter subscriptions are logged, so that the subscription procedure’s compliance with legal requirements can be proven. This log stores the time of subscription and confirmation, as well as the IP address. Changes to any data of yours that is stored on Mailchimp’s premises are also logged.

Mailchimp

For newsletter dispatch, the STP uses the service provider Mailchimp, a newsletter dispatch platform from the American provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The email addresses of our newsletter recipients, as well as their other data described here, are stored on Mailchimp’s servers in the USA. Mailchimp uses this information for the dispatch and analysis of newsletters on our behalf. Based on its own information, Mailchimp can also use this data for optimisation or improvement of its own services, e.g. to technically optimise the dispatch and presentation of newsletters or, for commercial purposes, to determine which countries the recipients come from. However, Mailchimp does not use our newsletter recipients’ data for the purpose of writing to them itself, or pass it on to third parties.

We have confidence in Mailchimp’s reliability, IT security and data security. Mailchimp is certified in accordance with the USA-EU data protection agreement ‘Data Privacy Framework’ and is thus obliged to adhere to the EU’s data protection standards. In addition, we have entered into a data processing agreement with Mailchimp: https://mailchimp.com/en/legal/data-processing-addendum/. This is a contract, in which Mailchimp pledges to protect our users’ data, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties. You can read the Mailchimp data protection regulations here: http://mailchimp.com/legal/privacy/

Statistical data collection and analysis

Each newsletter contains a so-called ‘web beacon’, i.e. a file comprising one pixel that is downloaded from a Mailchimp server when the newsletter is opened. During this download, technical information, e.g. about your browser and system, as well as your IP address and the time of the download, is collected for the time being. This information is used for technical improvement of services, based either on technical data, or on target groups and their reading behaviour in relation to their retrieval locations (which can be determined via the IP addresses) or access times.

The statistical data collection also includes determining whether newsletters are opened, when they are opened and which links are clicked on. For technical reasons, it is possible to trace this information back to individual newsletter recipients. However, neither we nor Mailchimp have any intention of monitoring individual users. The data is evaluated so that we can work out whether our communication is relevant to you and keep improving it.

Unsubscribing/revocation

You can unsubscribe from our newsletters at any time, i.e. revoke your consent. This causes both your consent to receiving the Mailchimp newsletter dispatch and your consent to the statistical analysis to lapse at the same time. Separate cancellation of just the Mailchimp dispatch or just the statistical analysis is unfortunately not possible.You will find the unsubscribe link at the end of each newsletter.

Donations can be made on our website. Upon making a donation via our website, you transfer personal data to the STP. Here, the STP uses a donation tool from the Zurich-based firm RaiseNow to process donations, as well as solutions offered by the Swiss financial services provider Datatrans. You will find RaiseNow’s privacy policy here: https://www.raisenow.com/en-ch/privacy-policy.

General information on cookies

On our website, we typically use ‘cookies’ and similar technologies that enable identification of your browser or device. A cookie is a small file that is sent to your computer, or that your web browser automatically stores on your computer or mobile device, when you visit our website. This enables us to recognise you when you return to the website, even though we do not know who you are. Alongside cookies that are only used during a session and deleted after your website visit (‘session cookies’), cookies can also be used to store user settings and other information for a certain period of time, e.g. two years (‘permanent cookies’). However, you can set your browser so that it deletes cookies earlier, rejects them, or only saves them for one session. Most browsers are preset to accept cookies. We use permanent cookies so that you can save user settings (e.g. language or autologin), so that we can better understand how you use our services and content, and so that we can show you offers and advertising that are tailored to suit you (which can also happen on other firms’ websites; however, we do not tell them who you are, if we know that at all, because they only see that a user of their website is the same user who visited a particular page on our website). Certain cookies are set by us, whereas some are set by contractual partners with whom we work. If you block cookies, certain functions (e.g. language selection, shopping basket or ordering processes) might no longer work.

The cookies used are listed in an overview, which you will find here: cookie policy. A complete up-to-date export of the cookies used is automatically made available by the displayed cookie banner.

Cookies on our website (cookie policy)

We use cookies to personalise content and advertisements, to offer social media functions and to analyse access to our website. We also pass on information about your use of our website to our partners involved in social media, advertising and analysis. Our partners might combine this information with other data that you have given them, or that they have collected in connection with your use of services.

We are legally entitled to store cookies on your device if they are absolutely necessary for operation of this site. For all other types of cookies, we need your consent.

This site uses various types of cookies. Some cookies are placed by third parties who have a presence on our pages. At any time, you can change or revoke your consent to the cookie policy  on our website.

Google Analytics

This website uses functions provided by the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies that are stored on your computer and enable analysis of how the website is used. The information generated by such cookies about your use of this website is generally transferred to, and stored on, a Google server in the USA.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that within European Union Member States or the European Economic Area Agreement’s other signatory states, your IP address will be truncated by Google before being sent to the USA. In exceptional cases only, the full IP address is transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activities, and to provide the website operator with other services in connection with use of the website and of the internet. The IP address sent by your browser in the context of Google Analytics will not be combined with other data by Google.

Browser add-on

As already pointed out, you can prevent the storage of cookies by setting your browser software accordingly. You can also prevent Google from collecting and processing the cookie-generated data relating to your use of the website (including your IP address) by downloading and installing the browser add-on available via this link .

You can find more information on how Google Analytics handles user data in Google’s privacy policy .

Commissioned data processing

We have entered into an agreement with Google on commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics. (Note: The STP follows the directives of EU legislation on its website. In case of doubt, Swiss law applies.)

Demographic details with Google Analytics

This website uses the Google Analytics function ‘demographic details’. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. The data comes from Google’s interest-based advertising and from visitor data supplied by third-party providers. Such data cannot be traced back to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit collection of your data by Google Analytics under Google Analytics opt-out.

Social media plug-ins

We also use so-called ‘plug-ins’ from social networks such as Facebook, Instagram, YouTube and LinkedIn on our websites. This is visible to you in each case (typically via corresponding icons). We have configured these elements so that they are deactivated by default. If you activate them (by clicking on them), the operators of the respective social networks can register your presence on our website, including the specific part of the website, and use this information for their purposes. The processing of your personal data is then the responsibility of the respective operator and occurs in accordance with their data protection regulations. We do not receive any information from them about you.

Facebook

If you click on the ‘Like’ button or post comments while you are logged in to Facebook, this activity will be assigned to your personal user account. You will find Facebook’s privacy policy with more detailed information on Facebook’s collection and use of data, on your rights in this regard and on how to use settings to protect your privacy here.

Instagram 

Our websites use functions provided by the service Instagram, which is operated by Meta Platforms Ireland Limited. The corresponding plug-ins are labelled with an Instagram logo, for example in the form of an ‘Instagram camera’. If you are logged in to Instagram and interact with the plug-in, this information is transmitted to an Instagram server and stored there. Please note that, as the provider of this website, we have no knowledge of the content or scope of the transmitted data, or of how Instagram uses it. For more information on this, please refer to Instagram’s data policy and general information.

YouTube 

We have integrated YouTube videos into our website. YouTube is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you visit a page on our website that has an embedded YouTube video, your browser connects to YouTube servers. Depending on the settings, various data will be transmitted. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for data processing in Europe. You will find more information here.

LinkedIn

We have also integrated the LinkedIn button into our website. It is recognisable by means of the word ‘in’ written in white on a blue background. With the aid of this button, it is possible to follow us on LinkedIn. When you click on the button, your browser establishes a direct connection with LinkedIn servers. You can find out more about your rights and how to use settings to protect your privacy here.

In the context of our business activities and for the purposes set out in here, we also disclose your data to third parties, insofar as permitted and to the extent we deem appropriate, either because they process it for us or because they wish to use it for their own purposes. This applies in particular to the following parties: printing companies and other service providers we use (e.g. banks, insurance companies), including commissioned data processors (e.g. IT providers); suppliers, subcontractors and other business partners; customers; Swiss and foreign authorities, official bodies or courts; media; the public, including visitors to websites and social media; competitors, sector-specific organisations, associations, other organisations and committees; and other parties in potential or actual legal proceedings. We have signed contracts with the external vendors and service providers we use (e.g. companies that print appeals for donations, or IT providers) and obliged them to respect data privacy.

For info-stand advertising and door-to-door campaigns, we work together with Brave Fundraising LLC, also via the B2B marketplace provided by Formunauts GmbH. After appeals for new donors, related data (be it personal or financial) is stored and processed for as long as we are obliged to store or process such data, have an overriding interest in it (insofar as we are entitled to invoke this) or need it to assert claims. We have entered into agreements on commissioned data processing with all our direct-dialogue service providers.

As explained above, we also disclose data to other parties. These are not only located in Switzerland. Your data can therefore be processed both in Europe and elsewhere; in exceptional cases, this can mean any country in the world.

Some of our processing of your personal data is automated, for analysis of certain personal aspects (profiling). In particular, we use profiling so that we can provide you with targeted information and advice about products. In this context, we use analytical tools that enable us to conduct needs-based communication and advertising, which includes market research and opinion research.

In general, we do not use fully automated decision-making to establish or conduct business relationships, or for any other purpose. Should we use such procedures in individual cases, we will inform you of this separately, to the extent required by law, and explain to you the associated rights.

This privacy policy does not apply to external websites that you access via links on our website. No liability is assumed for these. Please refer to the relevant website for the privacy policy that applies there.

We may amend this privacy policy at any time without prior notice. The latest version published on our website shall apply in each case.