aha! Swiss Allergy Centre attaches great importance to the protection of your data and the protection of your privacy. The following information is provided to inform you about the collection and/or use of individual information or data within the scope of the use of our websites www.aha.ch, www.stories.aha.ch and www.pollenundallergie.ch and (individually named, or together the "Websites") or of our applications for smartphones - Pollen-News, e-symptoms and AllergyCard (individually named, or together the "Apps").
The following explanations refer exclusively to our aforementioned websites and apps. We assume no responsibility and deny all liability for links, for example, on advertising banners, which lead from our websites or apps to websites of third parties. You are solely responsible for clicking on an external link.
This also applies to the share options on Facebook, Twitter and Google+. Before sharing an article on one of these three social media platforms, please read the information under the "i" button.
Please note that by visiting and using our websites, you give your consent to the processing of your personal data within the scope of the following data protection declaration and the applicable data protection law principles.
aha! Swiss Allergy Centre
If you visit our websites without providing any personal information, the only data stored will be data that does not show any connection to your person. This data is used solely for the statistical, quantitative and qualitative evaluation of our pages, so that we can improve the content of the websites.
Within the scope of your customer profile, we collect only the following data, although not all of this data will be collected in every case (e.g. password).
The processing of your personal data on the websites takes place exclusively in the factual context of an enquiry submitted by you, for error correction and/or improvement of our web appearance, as well as for internal statistical purposes, if necessary.
Insofar as no further explicit processing is mentioned in this data protection declaration (e.g. in the Applications chapter), the following list is exhaustive:
We collect particularly sensitive personal data (see Point 4.2 below) exclusively and directly from you and in a manner recognisable to you.
We do not carry out profiling in the sense of a fully automated evaluation and interpretation of your personal data. We also do not create personality profiles.
The personal data that you provide via one of our registration options for e.g. the following services and offers
to aha! Swiss Allergy Centre shall remain strictly confidential, shall not be sold, rented, swapped, nor be given to third parties in any way. aha! Swiss Allergy Centre exclusively uses the data for further processing your request, also for quantitative measurement for our statistics and for sending you information. aha! Swiss Allergy Centre also reserves the right to use the contact details for its own donation mailings.
You have the right to revoke or delete your data at any time; for more information see Chapter 11. Contact the address mentioned in Chapter 2.
The correct handling of data which is particularly worthy of protection and which goes beyond the collection of the usual personal data, e.g. statements on the state of health, is governed by the additional regulations of aha! Swiss Allergy Centre "Correct handling of sensitive data". This is part of the audits carried out at regular intervals by the Swiss Association for Quality and Management Systems SQS.
a. All employees of aha! Swiss Allergy Centre are obliged to maintain confidentiality in accordance with the data protection regulations. This is an integral part of the employment contract, the personnel regulations and the job description.
b. The following applies to everyone in the list of offers and services under 3.5 for which health data is collected:
Name, address and date of birth are used for the administration of the registration; a quantitative survey (i.e. not names, but pure numbers) of users is reported to the Federal Social Insurance Office (FSIO) as part of the service contract. The FSIO may require the name, address and date of birth of service users as part of random checks to verify the figures. This data is transmitted securely via the FTP server and returned to aha! Swiss Allergy Centre after verification.
c. Further questions, e.g. regarding allergies or intolerances, are in connection with the desired offer and serve exclusively for preparation, e.g. by the management team of the aha!children's camp or aha!youth camp to ensure the safety (e.g. in case of food allergy or intolerance) and the optimal care (e.g. support when inhaling asthma or when applying cream in case of neurodermatitis) of a child. Health data can also be of great importance for the preparation of training by the lecturers, e.g. neurodermatitis parent training or neurodermatitis children's training.
The data is available to the persons involved (with the administration, organisation, or implementation by employees of aha! Swiss Allergy Centre, camp management, speakers, etc.) only during a clearly defined short time phase (e.g. duration of an aha!childrens camp including work scheduling and reporting). This data is transferred via the FTP server. Of course, all external, individual or transitional aha! Swiss Allergy Centre employees (lecturers, course leaders, nutritionists, camp supervisors, etc.) are also bound by the relevant employment contract or a mutually signed fee agreement on the duty of confidentiality in accordance with the data protection regulations. Among other things, the employment contract or the fee agreement also clearly regulates and prescribes the destruction of the documents that have been made available.
d. If possible and reasonable, the consent for the use of data provided by service users will also be obtained.
e. For the publication of pictures taken on the occasion of an aha!childrens' camp, aha!youth camp, training and courses or during other service offers, and uploaded to the website www.aha.ch or www.pollenundallergie.ch , the explicit consent of the parents or participants will be obtained.
For the publication of pictures taken on the occasion of events or at symposia events organised by aha! Swiss Allergy Centre (e.g. aha!award, Allied Health Personnel Symposium) and uploaded to the www.aha.ch bzw. www.pollenundallergie.ch www.aha.ch or www.pollenundallergie.ch website, no explicit consent will be obtained. In the case of images which are focused on a certain person or a certain individualised group of persons, it is, of course, possible to request the deletion of these images under the contact details in Paragraph 2, provided that you can prove that you are the person shown in the images.
f. When publishing pictures taken on the occasion of a public event (e.g. National Allergy Day) and uploaded to the www.aha.ch or www.pollenundallergie.ch websites, we endeavour to focus exclusively on internal staff or acquaintances or friends and to keep passers-by vague or difficult to recognise or identify.
The contact data (registration) recorded in the application for "e-symptoms" and the answers given in the self-observation and current well-being tests are stored on an FTP server at our partner swiss smart media gmbH, Biel-Bienne. It is necessary to store this data so that users, some of whom click through the questions daily can send a journal of these answers to a physician of their choice.
The data, results and test results entered in the test runs are not individually identifiable by employees of aha! Swiss Allergy Centre. The contact data and test answers are stored separately. In response to queries from users due to technical problems or problems in handling, and only after obtaining the consent of the testing persons, is the person responsible for technical support at swiss smart media GmbH, Biel-Bienne, permitted to inspect the partially encrypted data to find a solution to the problem.
For reasons of data protection and the storage of sensitive data in the area of test acquisition, no analytics tool is stored for either app. Only data for download (iTunes, Google Play) or additionally the active use of the app in the Google Play Store can be found out via the statistical instruments of the stores.
The data on existing allergies and intolerances stored in the "AllergyCard" app, which can be validated by the medical examiner, is stored in encrypted form on an FTP server at netrics AG, Lyss. In response to queries from users due to technical problems or problems in handling, and only after obtaining the consent of the testing persons, is the person responsible for technical support at swiss smart media GmbH, Biel-Bienne, permitted to inspect the partially encrypted data to find a solution to the problem.
For reasons of data protection and storage of sensitive data in the area of allergies and intolerances, the "AllergYCard" app has no analytics tool.
Only data for download (iTunes, Google Play) or additionally the active use of the app in the Google Play Store can be found out via the statistical instruments of the stores.
The app "Pollen-News" is a pure information application. No personal data is collected. For this reason, in addition to the rudimentary data obtained from the stores, Google Analytics has been added to the application. The app was developed by Getunik AG, Zürich.
The contact data collected via websites www.aha.ch, www.pollenundallergie.ch and www.stories.aha.ch, as well as that of new donors or new benefactors, are not only subject to the data protection declaration described here, but also to the data protection agreement and the contract with our third party provider, Alnovis AG, Rothenburg, our fundraising service provider.
The service providers are obliged to process the data only as we are allowed to do ourselves. It is ensured that no use of the data by the service providers takes place beyond the actual processing of a service and that they neither use the data for themselves nor pass it on to a third party. We have the corresponding audit and control rights granted to us for this purpose.
This also applies to the contact data that you have provided us with in connection with a service used, an offer, when ordering brochures or when registering to download brochures and for which we reserve the right to use them for donation mailings. The data is transmitted to Alnovis for this purpose via our FTP server.
You have the right to revoke or delete your data at any time; for more information, see Chapter 11. Contact the address mentioned in Chapter 2.
The foundation aha! Swiss Allergy Centre offers the following payment options for donations: SMS, Visa, Mastercard, American Express, PostFinance Card, PostFinance e-finance and via deposit slip. The transmission of data is encrypted. The foundation aha! Swiss Allergy Centre does not store any card data itself; your payment data is handled directly by an external partner certified by the credit card industry (PCI DSS). Our service providers may process the information exclusively for the fulfilment of their tasks and are obliged to comply with the applicable data protection regulations.
We will send you information about our services and offers via various communication channels such as e-mails (aha! newsletter; Pollen-Newsletter) and push notifications (Pollen-News app). You can unsubscribe from the newsletter at any time. For example, you will often find the message "Cancel subscription" under the subject line of the e-mail, but in any case, you will find the message "Unsubscribe newsletter" in the footer of the newsletter. You can prevent the receipt of push messages at any time using the settings of your mobile device.
If you unsubscribe from a newsletter, the newsletter will not be delivered, but your data will not be deleted. If you would like the entire data record to be deleted, please contact us, see Chapters 11 and 2.
In the run-up to events, we will write to you by e-mail with a so-called "Save The Date" to draw your attention to the date of an upcoming event. Only users who are interested in one of our services or offers and have, therefore, left their contact data or are in contact with us in any other form will be contacted.
The transmission of the entered data via the contact forms from your computer to a server at our partner, the full-service web agency WeServe AG, 3097 Bern-Liebefeld, is encrypted. The data entered in the contact form will not be saved on your computer (no cookie or similar). The same applies to the transmission of your data entered via the donation form of RaiseNow, Zurich, whose donation forms are used at www.stories.aha.ch.
Despite encryption, absolute security is not possible. The server forwards your data entered in the contact form by e-mail for processing. These e-mails are not encrypted.
The use of e-mails is not technically secure; e-mails may not be delivered. When e-mails are transmitted, they can leave national borders, even if the sender and recipient are in the same country. The confidentiality of e-mails cannot be guaranteed if encryption is missing or insufficient. Unencrypted e-mails are, therefore, not suitable for sending confidential information.
By using the contact form or by sending an e-mail, you agree to communication via e-mail with knowledge of the risks described.
Our web agency, WeServe AG, hosts the systems and data itself. The servers are located in Switzerland, are physically accessible exclusively by the web agency, WeServe AG, and are shielded as well as possible against unauthorised external access.
You have the right to see the information we have stored about you free of charge and at any time, as well as the right to correct that information. Please contact us regarding this. You will find our contact details in Section 2 of this data protection declaration.
You can revoke your consent to this data protection declaration at any time and request the deletion of your personal data. Please contact us regarding this. You will find our contact details in Section 2 of this data protection declaration.
A deletion request for your profile in the user database of the data recorded via the websites or the data recorded on the corresponding FTP servers via the apps is possible at any time. The deletion can be carried out partially (e.g. only for the newsletter, but not for logging into the aha!shop), or as a whole. In this case, we delete your entire data record from the user database of the CMS tool. If you would like to download brochures again later, you would have to register and create a login again. If you wish a complete and final deletion, your data will also be set to "deleted" in our address management system Cobra. When requesting for a deletion, please specify whether you would like to have a partial or a complete one.
Please note that we are obliged under commercial and tax law to keep documents such as invoices for booked offers and services, ordered brochures, donations, etc. for at least 10 financial years. We can, therefore, neither delete nor process the personal data contained in these documents. Your request for cancellation, therefore, only applies to this extent for future processing.
If a contractual relationship is still pending at the time of receipt of your cancellation and deletion request, your personal data will be processed further until the order has been completely processed. Your revocation under data protection law has expressly no influence on the processing of existing contractual relationships and is not regarded as an extraordinary reason for termination.
There is a difference between deleting and blocking addresses for donation letters/mailings/telephone fundraising campaigns, etc. If someone wants their address to be deleted, we point out that the address will be blocked and not deleted. If it is deleted, it cannot be completely ruled out that further communication will be received as a result of a future import of addresses from our address management system. If you are affected and wish to have your personal data completely blocked, please contact us via our contact details in Section 2.
You will be informed by e-mail as soon as your address has been corrected, deleted or blocked as requested.
Cookies are small text files, usually consisting of letters and digits, which are sent when visiting a website and stored in the user's browser. We also use the technologies common to most websites.
Cookies help make our offers more user-friendly, efficient and secure. The files allow certain information to be recorded. For example, if you visit our pages repeatedly, the browser you are using will return the contents of the cookie. This allows us to be notified in anonymous form that you have already visited our site.
Certain cookies are automatically deleted at the end of the browser session (so-called session cookies), others are stored for a specified time or permanently in the user's browser and then delete themselves independently (so-called temporary or permanent cookies).
The special names and types of cookies and other comparable technologies used by us may change from time to time. Here is a short glossary to help you better understand these principles:
We use analysis cookies to record and statistically evaluate usage behaviour (e.g. pages visited, sub-pages visited, search queries made, etc., including clicked advertising banners of our sponsors and cooperation partners). These cookies enable us to count visits and determine sources of access to measure and improve the performance of our website. They help us answer the questions of which pages are most popular, which are least used and how visitors move around the website. All information collected by these cookies is aggregated and therefore anonymous. If you do not accept these cookies, we cannot know when you visited our website.
We allow companies that advertise on our site to collect user data for analysis purposes using tracking cookies. Placed advertising is identified as such on the websites www.aha.ch or www.pollenundallergie.ch. It should also be noted that the placement of advertising is subject to strict sponsoring guidelines and general terms and conditions (Both documents are only available in German. Please contact us if you have any questions.) and is controlled by HON during the annual audit.
You can disable or remove cookies using tools that are available as part of most commercial browsers. Preferences must be set separately for each browser you use, with different browsers offering different functionalities and options; see section Technical Notes.
Please note, however, that our online offers may not function or may only function to a limited extent if cookies are disabled.
Included below are links to the technical information of the most common browsers.
However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within the member states of the European Union or in other countries that are contracting parties to the Agreement on the European Economic Area.
The full IP address will be sent to a Google server in the USA and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate the use of websites, to compile reports on website activities and to provide the website operator with further services associated with the use of the website and the internet.
The IP address sent by your browser for the purposes of Google Analytics is not combined with any other Google data.
You can also object to the collection or evaluation of your data by this tool by downloading and installing the browser plugin available under the following link: Browser Plugin.
However, we would like to point out that Google Analytics is an important tool for us with which we can regularly measure and analyse the quality of our websites based on visitor numbers and visitor behaviour.
Ultimately, these figures help us to optimise our offers in a user-oriented manner. These figures also serve as a reporting tool for our supporters. As a foundation and non-profit organisation, we depend on financial support from third parties. Only in this way is it possible for us to keep the evidence-based content up to date at all times and to guarantee its quality.
We use the web analysis service Hotjar of Hotjar Ltd ("Hotjar") for our websites. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta). Using this tool, movements on our website can be traced (so-called heatmaps). For example, you can see how far users are scrolling and which buttons users click, and how often. Furthermore, the tool also allows feedback to be obtained directly from the users of the website. In this way, we gain valuable information to make our websites faster and more customer-friendly.
When using this tool, we pay particular attention to the protection of your personal data. This way we can only see which buttons are clicked on, the course of the mouse, how far the mouse scrolls, the screen size of the device, device type and browser information, location (only the country) and the preferred language to display our website.
Hotjar offers every user the option of using a "Do Not Track header" to prevent the use of the Hotjar tool so that no data is recorded on the visit to the respective website. For detailed instructions with information about your browser.
We use Google Grants advertising to promote our services, offers and evidence-based information. The provider commissioned by us for the management and administration of this application uses the "Google AdWords" online advertising program and, as part of Google AdWords, conversion tracking on a case-by-case basis. Google Conversion Tracking is an analysis service provided by Google Inc.
When you click an ad delivered by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity period; they contain no personal data and are, therefore, not used for personal identification.
If you visit certain pages within our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the advert and have been directed to that page.
Each Google AdWords advertiser has a different cookie. There is, therefore, no way of tracking cookies through the websites of AdWords customers.
The information gathered by this conversion cookie helps generate conversion statistics for AdWords customers who have opted in to conversion tracking. Here, customers can find out the total number of users who have clicked on their advert and were directed to the page using the conversion tracking tag. However, they do not obtain any information that can be used to personally identify users.
If you do not want to participate in tracking, you can block the installation of cookies by selecting the appropriate settings on your browser software (disable option). By doing so, you will not be included in the conversion tracking statistics.
Some of our websites contain links to the external social network Facebook. This website is operated exclusively by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The links are marked by the Facebook logo (blue "F") at the bottom of our website.
If the user follows the links with a click, the respective Facebook plug-ins will be enabled, and the user's browser will establish a direct connection to the respective Facebook servers. When visiting our websites, these plugins are always switched off. If you want to connect to Facebook, you need to enable the plugin manually.
If you are logged on to your personal account on Facebook when visiting our site, information that you have visited our website will be transmitted to Facebook. Facebook can connect your visit to the website with your account.
This information is transmitted to Facebook and stored there. To prevent this, you must log out of your Facebook account before clicking on the link.
The functions assigned by the operators, in particular, the provision of information and user data, are activated not by the visit to our website but by clicking the link.
To find out more about the purpose and scope of data collection by Facebook, their further processing and use of your data, as well as your rights in this respect and settings options for protecting your privacy, please refer to the Facebook data protection policy
If you do not want Facebook to link the data collected on our website to your Facebook account, you should log out of Facebook before visiting our website. You can also completely prevent Facebook plugins from loading using browser add-ons, e.g.
The "+1" button of the social network Google Plus from Google is partially embedded on our websites. When you visit our websites with the "+1"-button, you have the choice of switching this plugin on or off. The plugin is automatically switched off when visiting our websites. If you decide to activate this plugin, a connection to the Google servers in the USA is established, and the button is displayed on the website by a message to your browser.
Both your IP address and the information that you have visited our website are transmitted to the Google server. This applies regardless of whether you are registered or logged in to Google Plus. A transmission takes place even if the user is not registered or not logged in. The "+1" button is not used to record your visits across the Internet. Google does not permanently log your browsing history when a "+1" button is displayed, and does not otherwise evaluate your visit to a page with a "+1" button. Google stores information about your visit for about two weeks for system maintenance and troubleshooting purposes. However, this data is not structured according to individual profiles, user names or URLs and is not forwarded to us.
If you are also a Google Plus member and logged in to Google Plus during the time you use the plugin, the information collected about your visit to the website will be linked to your Google Plus account and shared with other users. Even in the case of interactions that are possible with the various Google plugins, the corresponding information about you is collected and transmitted to Google and stored.
An overview of the different types of Google plugins can be found here.
If you have made your profile public in Google Plus preferences, your Google "+1" may appear on Google services, such as search results or your Google profile, or elsewhere on websites and ads, along with your profile name and photo. If you do not want Google to associate the collected information directly with your Google Plus profile, you must log out of Google Plus or leave the plugin off before visiting our websites.
The functions assigned by Google Play, in particular, the provision of information and user data, are activated not by a visit to our website but by clicking on the relevant link.
You can also prevent the Google plugins from loading by installing appropriate add-ons in your browser, e.g. with the "NoScript" script blocker.
Social plugins ("plugins") of the microblogging service Twitter, operated by Twitter Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"), can be used on our websites. These plugins are identified by a Twitter logo, for example, in the form of a blue "Twitter bird". An overview of the Twitter plugins and their appearance.
If you visit one of our websites, this plugin is always switched off when entering our websites. If you decide to activate this plugin, your browser establishes a direct connection to the Twitter servers. The content of the plugin is transferred from Twitter directly to your browser and embedded in the page. Thanks to this connection, Twitter receives the information that your browser has accessed the relevant page of our website, even if you do not have a profile on Twitter or are currently not logged in to Twitter. This information (including your IP address) is transmitted from your browser directly to a Twitter server in the USA and stored there.
If you are logged in to Twitter, Twitter can link your visit to our website directly to your Twitter account. If you interact with the plugins, for example, by pressing the "Tweet" button, that information is also transmitted directly to a Twitter server and stored there. The information is also published on your Twitter account and displayed to your contacts there.
The functions assigned by Twitter, in particular, the provision of information and user data, are activated not by a visit to the website but by a click on a link.
If you do not want Twitter to link the data collected on our website directly to your Twitter account, you must log out of Twitter before visiting our website. You can completely prevent Twitter plugins from loading by using browser add-ons, e.g. the script blocker "NoScript".
Changes to this data protection declaration are effective from the time of their publication on our website. The processing of personal data collected under an older data protection declaration is carried out in accordance with this data protection declaration.
We reserve the right to change this data protection declaration at any time and to inform customers about the changes in an appropriate manner.
Update: September 2018