for aha! Swiss Allergy Centre
Table of contents
- Consent of the user when visiting our websites
- Address for questions about data protection
- Collection of data on the websites
3.1 Anonymous data collection
3.2 Processing of personal dat
3.3 Handling of personal data
3.4 Handling of sensitive data requiring special protection
3.5 For the following service, health data will be requested, within the remit of the purposes of the particular case
- Collection of data in applications for smartphones
- Donors and patron members
5.1 Collection and management of contact data
5.2 Data protection with regard to payment methods and possibilities
- Newsletter, Push News, Timestopper "Save The Date"
- Transmission of personal data
- Storage of your personal data
- Information, correction
- Right of revocation and deletion
10.1 Revocation and deletion in general
10.2 Revocation, deletion and blocking of addresses in the area of fundraising
10.3 Confirmation of the correction, deletion or blocking of addresses
11.1 What are cookies?
11.2 We use the following types of cookies
11.2.1 Strictly necessary cookies
11.2.2 Analysis cookies
11.2.3 Third-party cookies
11.2.4 Other cookies used
11.4 Technical information for deactivating or deleting cookies
- Google Analytics
- Google AdWords conversion tracking
- Facebook plugin
- Twitter plugins
- Changes to this data protection declaration
aha! Swiss Allergy Centre attaches great importance to the protection of your data and the protection of your privacy. The following information is provided to inform you about the collection and/or use of individual information or data within the scope of the use of our websites www.aha.ch, www.stories.aha.ch and www.pollenundallergie.ch and (individually named, or together the "Websites") or of our application for smartphones – Pollen-News (individually named, or together the "Apps").
The following explanations refer exclusively to our aforementioned websites and apps. We assume no responsibility and deny all liability for links, for example, on advertising banners, which lead from our websites or apps to websites of third parties. You are solely responsible for clicking on an external link.
This also applies to the share options on Facebook, Twitter and YouTube (share option integrated in the video). Before sharing an article on one of the first two platforms, please read the information under the “I” button on the webpage.
Please note that by visiting and using our websites, you give your consent to the processing of your personal data within the scope of the following data protection declaration and the applicable data protection law principles.
aha! Swiss Allergy Centre
If you visit our websites without providing any personal information, the only data stored will be data that does not show any connection to your person. This data is used solely for the statistical, quantitative and qualitative evaluation of our pages, so that we can improve the content of the websites.
Within the scope of your customer profile, we collect only the following data, although not all of this data will be collected in every case (e.g. password).
The processing of your personal data on the websites takes place exclusively in the factual context of an enquiry submitted by you, for error correction and/or improvement of our web appearance, as well as for internal statistical purposes, if necessary.
Insofar as no further explicit processing is mentioned in this data protection declaration (e.g. in the Applications chapter), the following list is exhaustive:
- Any information that you explicitly provide in connection with an enquiry to one of our offers: name, address, age, gender, contact details and other important information for the pre-screening and processing of your request;
- IP adress;
- Browser version and type used;
- Date/time of the visit or request;
- The password you created for the download in the aha!shop (this is stored in the database as encrypted data).
We collect particularly sensitive personal data (see Point 4.2 below) exclusively and directly from you and in a manner recognisable to you.
We do not carry out profiling in the sense of a fully automated evaluation and interpretation of your personal data. We also do not create personality profiles.
The personal data that you provide via one of our registration options for e.g. the following services and offers
- Orders or the free download in the aha!shop;
- Free consultation (by phone or e-mail) at the aha!infoline or with the aha! advice centres;
- on registration for courses, training, workshops etc. for experts;
- on registration for courses, training, events etc. for sufferers, family and interested parties;
- When registering for the aha!children's camp or aha!youth camp;
- For participation in the Affected persons council or in the oder in the exchange group;
- As a subscriber of the aha!newsletters or pollen-newsletter;
- As a subscriber of the aha!magazine;
- As a donor or benefactor;
- Or by any other similar contact for one of our offers and one of our services;
- Participation in a competition, for example within the framework of the National Allergy Day;
to aha! Swiss Allergy Centre shall remain strictly confidential, shall not be sold, rented, swapped, nor be given to third parties in any way. aha! Swiss Allergy Centre exclusively uses the data for further processing your request, also for quantitative measurement for our statistics and for sending you information. aha! Swiss Allergy Centre also reserves the right to use the contact details for its own donation mailings.
You have the right to revoke or delete your data at any time; for more information see Chapter 11. Contact the address mentioned in Chapter 2.
The correct handling of data which is particularly worthy of protection and which goes beyond the collection of the usual personal data, e.g. statements on the state of health, is governed by the additional regulations of aha! Swiss Allergy Centre "Correct handling of sensitive data". This is part of the audits carried out at regular intervals by the Swiss Association for Quality and Management Systems SQS.
a. All employees of aha! Swiss Allergy Centre are obliged to maintain confidentiality in accordance with the data protection regulations. This is an integral part of the employment contract, the personnel regulations and the job description.
These conditions also apply to external service providers, who provide services for a fee and on behalf of aha! Swiss Allergy Centre (e.g. as lecturers on training offered for sufferers by aha! Swiss Allergy Centre).
b. The following applies to everyone in the list of offers and services under 3.5 for which health data is collected:
Name, address and date of birth are used for the administration of the registration; a quantitative survey (i.e. not names, but pure numbers) of users is reported to the Federal Social Insurance Office (FSIO) as part of the service contract. The FSIO may require the name, address and date of birth of service users as part of random checks to verify the figures. This data is transmitted securely via the FTP server and/or also by secured memory stick and returned to aha! Swiss Allergy Centre after verification.
c. Further questions, e.g. regarding allergies or intolerances, are in connection with the the desired offer and serve exclusively for preparation (e.g. by the management team) of the aha!children’s camp or aha!youthcamp to ensure the safety (e.g. in case of food allergy or intolerance) and the optimal care (e.g. support when inhaling for asthma or when applying cream for atopic dermatitis) of a child. Health data can also be of great importance for the preparation of training by lecturers, e.g . atopic dermatitis parent training or atopic dermatitis children’s training.
The data is available to the persons involved (with the administration, organisation, or implementation by employees of aha! Swiss Allergy Centre, camp management, speakers, etc.) only during a clearly defined short time phase (e.g. duration of an aha!childrens camp including work scheduling and reporting). This data is transferred via the FTP server. Of course, all external, individual or transitional aha! Swiss Allergy Centre employees (lecturers, course leaders, nutritionists, camp supervisors, etc.) are also bound by the relevant employment contract or a mutually signed fee agreement on the duty of confidentiality in accordance with the data protection regulations. Among other things, the employment contract or the fee agreement also clearly regulates and prescribes the destruction of the documents that have been made available.
d. If possible and reasonable, the consent for the use of data provided by service users will also be obtained.
e. For the publication of pictures taken on the occasion of an aha!childrens' camp, aha!youth camp, training and courses or during other service offers, and uploaded to the website www.aha.ch, stories.aha.ch, www.pollenundallergie.ch and/or our social media channels, the explicit consent of the parents or participants will be obtained.
For the publication of pictures taken on the occasion of events or at symposia events organised by aha! Swiss Allergy Centre (e.g. aha!award, Allied Health Personnel Symposium) and uploaded to the www.aha.ch, stories.aha.ch, www.pollenundallergie.ch website and/or our social media channels, no explicit consent will be obtained. In the case of images which are focused on a certain person or a certain individualised group of persons, it is, of course, possible to request the deletion of these images under the contact details in Paragraph 2, provided that you can prove that you are the person shown in the images.
f. When publishing pictures taken on the occasion of a public event (e.g. National Allergy Day) and uploaded to the www.aha.ch, stories.aha.ch, www.pollenundallergie.ch websites and/or our social media channels, we endeavour to focus exclusively on internal staff or acquaintances or friends and to keep passers-by vague or difficult to recognise or identify.
- Consultations at the aha!infoline (telephone and e-mail), in the aha! advice centres and within the aha! Care Teams: For seamless, continuous consultation with multiple contacts and changing consultants to ensure the quality of consultation;
- Affected persons council: Targeted enquiries, for participation in projects selected by the participants such as surveys, support in media work etc.;
- Exchange groups: Targeted placement of patients for (the formation of) self-help groups;
- Holyday camps: To prepare the management team in ensuring the safety and optimal care of the participants at all times;
- Training: Targeted preparation of speaker teams;
- Free allergy risk tests: To simplify the consultation by a physician, the general state of health is determined in the run-up to the test using a questionnaire;
- AllergyCheck in pharmacies: Data for quality assurance of the rapid test;
- Tests (snort test, asthma control test, urticaria test and anaphylaxis check): All these tests can be run without any identifiable contact information. The data collected from the test is stored on a secure FTP server at the web agency. The given data/answers serve to assist on the one hand with the quantitative evaluation of these tests (how many users have done it?) and on the other hand with the qualitative evaluation with regard to adjustments and improvements of the content. For this evaluation, data can be exported without an IP address, i.e. completely anonymised, via the CMS tool.
- If an app includes the possibility to "donate", this area is subject to the data protection rules regarding the possible payment modalities described in the following passage.
The app "Pollen-News" (published in German, French and Italian) is a pure information application. No personal data is collected. For this reason, in addition to the rudimentary data obtained from the stores, Google Analytics has been added to the application. The app was developed by Getunik AG, Zürich.
The "Donation" area is subject to the data protection rules described in the following paragraph 5. regarding the possible payment modalities.
The contact data collected via websites www.aha.ch, www.pollenundallergie.ch and www.stories.aha.ch, as well as that of new donors or new benefactors, are not only subject to the data protection declaration described here, but also to the data protection agreement and the contract with our third party provider, Alnovis AG, Rothenburg, our fundraising service provider.
The service providers are obliged to process the data only as we are allowed to do ourselves. It is ensured that no use of the data by the service providers takes place beyond the actual processing of a service and that they neither use the data for themselves nor pass it on to a third party. We have the corresponding audit and control rights granted to us for this purpose.
This also applies to the contact data that you have provided us with in connection with a service used, an offer, when ordering brochures or when registering to download brochures and for which we reserve the right to use them for donation mailings. The data is transmitted to Alnovis for this purpose via our FTP server.
You have the right to revoke or delete your data at any time; for more information, see Chapter 11. Contact the address mentioned in Chapter 2.
The foundation aha! Swiss Allergy Centre offers the following payment options for donations: Visa, Mastercard, American Express, PostFinance Card, PostFinance e-finance and via deposit slip. The transmission of data is encrypted. The foundation aha! Swiss Allergy Centre does not store any card data itself; your payment data is handled directly by an external partner certified by the credit card industry (PCI DSS). Our service providers may process the information exclusively for the fulfilment of their tasks and are obliged to comply with the applicable data protection regulations.
We will send you information about our services and offers via various communication channels such as e-mails (aha! newsletter; Pollen-Newsletter) and push notifications (Pollen-News app). You can unsubscribe from the newsletter at any time. For example, you will often find the message "Cancel subscription" under the subject line of the e-mail, but in any case, you will find the message "Unsubscribe newsletter" in the footer of the newsletter. You can prevent the receipt of push messages at any time using the settings of your mobile device.
If you unsubscribe from a newsletter, the newsletter will not be delivered, but your data will not be deleted. If you would like the entire data record to be deleted, please contact us, see Chapters 11 and 2.
In the run-up to events, we will write to you by e-mail with a so-called "Save The Date" to draw your attention to the date of an upcoming event. Only users who are interested in one of our services or offers and have, therefore, left their contact data or are in contact with us in any other form will be contacted.
The transmission of the entered data via the contact forms from your computer to a server at our partner, the full-service web agency WeServe AG, 3097 Bern-Liebefeld, is encrypted. The data entered in the contact form will not be saved on your computer (no cookie or similar). The same applies to the transmission of your data entered via the donation form of RaiseNow, Zurich, whose donation forms are used at www.stories.aha.ch.
Despite encryption, absolute security is not possible. The server forwards your data entered in the contact form by e-mail for processing. These e-mails are not encrypted.
The use of e-mails is not technically secure; e-mails may not be delivered. When e-mails are transmitted, they can leave national borders, even if the sender and recipient are in the same country. The confidentiality of e-mails cannot be guaranteed if encryption is missing or insufficient. Unencrypted e-mails are, therefore, not suitable for sending confidential information.
By using the contact form or by sending an e-mail, you agree to communication via e-mail with knowledge of the risks described.
Our web agency, WeServe AG, hosts the systems and data itself. The servers are located in Switzerland, are physically accessible exclusively by the web agency, WeServe AG, and are shielded as well as possible against unauthorised external access.
You have the right to see the information we have stored about you free of charge and at any time, as well as the right to correct that information. Please contact us regarding this. You will find our contact details in Section 2 of this data protection declaration.
You can revoke your consent to this data protection declaration at any time and request the deletion of your personal data. Please contact us regarding this. You will find our contact details in Section 2 of this data protection declaration.
A deletion request for your profile in the user database of the data recorded via the websites or the data recorded on the corresponding FTP servers via the apps is possible at any time. The deletion can be carried out partially (e.g. only for the newsletter, but not for logging into the aha!shop), or as a whole. In this case, we delete your entire data record from the user database of the CMS tool. If you would like to download brochures again later, you would have to register and create a login again. If you wish a complete and final deletion, your data will also be set to "deleted" in our address management system Cobra. When requesting for a deletion, please specify whether you would like to have a partial or a complete one.
Please note that we are obliged under commercial and tax law to keep documents such as invoices for booked offers and services, ordered brochures, donations, etc. for at least 10 financial years. We can, therefore, neither delete nor process the personal data contained in these documents. Your request for cancellation, therefore, only applies to this extent for future processing.
If a contractual relationship is still pending at the time of receipt of your cancellation and deletion request, your personal data will be processed further until the order has been completely processed. Your revocation under data protection law has expressly no influence on the processing of existing contractual relationships and is not regarded as an extraordinary reason for termination.
There is a difference between deleting and blocking addresses for donation letters/mailings/telephone fundraising campaigns, etc. If someone wants their address to be deleted, we point out that the address will be blocked and not deleted. If it is deleted, it cannot be completely ruled out that further communication will be received as a result of a future import of addresses from our address management system. If you are affected and wish to have your personal data completely blocked, please contact us via our contact details in Section 2.
You will be informed by e-mail as soon as your address has been corrected, deleted or blocked as requested.
Cookies are small text files, usually consisting of letters and digits, which are sent when visiting a website and stored in the user's browser. We also use the technologies common to most websites.
Cookies help make our offers more user-friendly, efficient and secure. The files allow certain information to be recorded. For example, if you visit our pages repeatedly, the browser you are using will return the contents of the cookie. This allows us to be notified in anonymous form that you have already visited our site.
Certain cookies are automatically deleted at the end of the browser session (so-called session cookies), others are stored for a specified time or permanently in the user's browser and then delete themselves independently (so-called temporary or permanent cookies).
The special names and types of cookies and other comparable technologies used by us may change from time to time. Here is a short glossary to help you better understand these principles:
- Session cookies expire at the end of your browser session and allow us to link together your actions during that particular browser session.
- Permanent cookies are stored on your device between browser sessions and allow us to document your priorities or actions across multiple pages.
- Initial provider cookies are stored by the page you have just accessed.
- Third-party cookies are placed by a third party site that is different from the site you are visiting.
- Cookies used to identify or authenticate our users;
- Cookies that temporarily store certain user inputs (e.g. content of a shopping basket or an online form); which means, for example, that you can simply log in again after registering.
- Cookies that store certain user preferences (e.g. search or language settings);
- Cookies that store data in order to ensure interference-free playback of video or audio content.ree playback of video or audio content.
We use analysis cookies to record and statistically evaluate usage behaviour (e.g. pages visited, sub-pages visited, search queries made, etc., including clicked advertising banners of our sponsors and cooperation partners). These cookies enable us to count visits and determine sources of access to measure and improve the performance of our website. They help us answer the questions of which pages are most popular, which are least used and how visitors move around the website. All information collected by these cookies is aggregated and therefore anonymous. If you do not accept these cookies, we cannot know when you visited our website.
We allow companies that advertise on our site to collect user data for analysis purposes using tracking cookies. Placed advertising is identified as such on the websites www.aha.ch or www.pollenundallergie.ch. It should also be noted that the placement of advertising is subject to strict sponsoring guidelines and general terms and conditions (Both documents are only available in German. Please contact us if you have any questions.) and is controlled by HON during the annual audit.
- facebook.com: The Facebook plugin collects information for Facebook's own targeting services.
- addthis.com: This tool allows website users to share content on their social media profiles.
- twitter.com: The Twitter plugin collects information for Twitter's own targeting services.
- YouTube: YouTube provides personalised advertising. Specific third-party provider cookies and systems are used for this purpose.
- google.com: Google uses this cookie to identify you for advertising purposes.
- doubleclick.net: This cookie provides information to the Google Ad Network.
You can disable or remove cookies using tools that are available as part of most commercial browsers. Preferences must be set separately for each browser you use, with different browsers offering different functionalities and options; see section Technical Notes.
Please note, however, that our online offers may not function or may only function to a limited extent if cookies are disabled.
Included below are links to the technical information of the most common browsers.
However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within the member states of the European Union or in other countries that are contracting parties to the Agreement on the European Economic Area.
The full IP address will be sent to a Google server in the USA and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate the use of websites, to compile reports on website activities and to provide the website operator with further services associated with the use of the website and the internet.
The IP address sent by your browser for the purposes of Google Analytics is not combined with any other Google data.
You can also object to the collection or evaluation of your data by this tool by downloading and installing the browser plugin available under the following link: Browser Plugin.
However, we would like to point out that Google Analytics is an important tool for us with which we can regularly measure and analyse the quality of our websites based on visitor numbers and visitor behaviour.
Ultimately, these figures help us to optimise our offers in a user-oriented manner. These figures also serve as a reporting tool for our supporters. As a foundation and non-profit organisation, we depend on financial support from third parties. Only in this way is it possible for us to keep the evidence-based content up to date at all times and to guarantee its quality.
We use the web analysis service Hotjar of Hotjar Ltd ("Hotjar") for our websites. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta). Using this tool, movements on our website can be traced (so-called heatmaps). For example, you can see how far users are scrolling and which buttons users click, and how often. Furthermore, the tool also allows feedback to be obtained directly from the users of the website. In this way, we gain valuable information to make our websites faster and more customer-friendly.
When using this tool, we pay particular attention to the protection of your personal data. This way we can only see which buttons are clicked on, the course of the mouse, how far the mouse scrolls, the screen size of the device, device type and browser information, location (only the country) and the preferred language to display our website.
Hotjar offers every user the option of using a "Do Not Track header" to prevent the use of the Hotjar tool so that no data is recorded on the visit to the respective website. For detailed instructions with information about your browser.
We use Google Grants advertising to promote our services, offers and evidence-based information. The provider commissioned by us for the management and administration of this application uses the "Google AdWords" online advertising program and, as part of Google AdWords, conversion tracking on a case-by-case basis. Google Conversion Tracking is an analysis service provided by Google Inc.
When you click an ad delivered by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity period; they contain no personal data and are, therefore, not used for personal identification.
If you visit certain pages within our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the advert and have been directed to that page.
Each Google AdWords advertiser has a different cookie. There is, therefore, no way of tracking cookies through the websites of AdWords customers.
The information gathered by this conversion cookie helps generate conversion statistics for AdWords customers who have opted in to conversion tracking. Here, customers can find out the total number of users who have clicked on their advert and were directed to the page using the conversion tracking tag. However, they do not obtain any information that can be used to personally identify users.
If you do not want to participate in tracking, you can block the installation of cookies by selecting the appropriate settings on your browser software (disable option). By doing so, you will not be included in the conversion tracking statistics.
Some of our websites contain links to the external social network Facebook. This website is operated exclusively by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The links are marked by the Facebook logo (blue "F") at the bottom of our website.
If the user follows the links with a click, the respective Facebook plug-ins will be enabled, and the user's browser will establish a direct connection to the respective Facebook servers. When visiting our websites, these plugins are always switched off. If you want to connect to Facebook, you need to enable the plugin manually.
If you are logged on to your personal account on Facebook when visiting our site, information that you have visited our website will be transmitted to Facebook. Facebook can connect your visit to the website with your account.
This information is transmitted to Facebook and stored there. To prevent this, you must log out of your Facebook account before clicking on the link.
The functions assigned by the operators, in particular, the provision of information and user data, are activated not by the visit to our website but by clicking the link.
To find out more about the purpose and scope of data collection by Facebook, their further processing and use of your data, as well as your rights in this respect and settings options for protecting your privacy, please refer to the Facebook data protection policy
If you do not want Facebook to link the data collected on our website to your Facebook account, you should log out of Facebook before visiting our website. You can also completely prevent Facebook plugins from loading using browser add-ons, e.g.
Social plugins ("plugins") of the microblogging service Twitter, operated by Twitter Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"), can be used on our websites. These plugins are identified by a Twitter logo, for example, in the form of a blue "Twitter bird". An overview of the Twitter plugins and their appearance.
If you visit one of our websites, this plugin is always switched off when entering our websites. If you decide to activate this plugin, your browser establishes a direct connection to the Twitter servers. The content of the plugin is transferred from Twitter directly to your browser and embedded in the page. Thanks to this connection, Twitter receives the information that your browser has accessed the relevant page of our website, even if you do not have a profile on Twitter or are currently not logged in to Twitter. This information (including your IP address) is transmitted from your browser directly to a Twitter server in the USA and stored there.
If you are logged in to Twitter, Twitter can link your visit to our website directly to your Twitter account. If you interact with the plugins, for example, by pressing the "Tweet" button, that information is also transmitted directly to a Twitter server and stored there. The information is also published on your Twitter account and displayed to your contacts there.
The functions assigned by Twitter, in particular, the provision of information and user data, are activated not by a visit to the website but by a click on a link.
If you do not want Twitter to link the data collected on our website directly to your Twitter account, you must log out of Twitter before visiting our website. You can completely prevent Twitter plugins from loading by using browser add-ons, e.g. the script blocker "NoScript".
aha! Swiss Allergy Centre operates two YouTube channels. The operator of the web pages is the Google subsidiary, YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages with a YouTube plugin, a connection is established to the YouTube servers, informing the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to connect your internet behavior directly to your personal profile. You can stop this happening by logging out of your YouTube account.
Data protection is a priority when uploading YouTube clips. aha! Swiss Allergy Centre makes every effort to activate the extended data protection mode to prevent cookies also being set with the user that only call up a webpage without starting the clip. YouTube users also have the option of pausing or deleting the YouTube search history and the YouTube watch history. For more information, click on YouTube terms of service and YouTube Kids.
Changes to this data protection declaration are effective from the time of their publication on our website. The processing of personal data collected under an older data protection declaration is carried out in accordance with this data protection declaration.
We reserve the right to change this data protection declaration at any time and to inform customers about the changes in an appropriate manner.
Update: June 2020