Privacy Policy

Zurich, January 12, 2023

A. Your Rights at a Glance

Every data subject has

• the right to access and rectification;

• all data concerning you that is contained in a data collection

• regarding the purpose and, where applicable, the legal basis for processing,

• regarding the categories of data being processed,

• regarding the parties involved in a data collection, and

• regarding the individuals and entities to whom data is disclosed

• the right to restrict data processing;

the right to generally prohibit us from processing your data;

We reserve the right to invoke the restrictions provided for by law.

​

B. General Information

This Privacy Policy informs you about how we, the Regenbogenhaus Zürich Association, collect and process your personal data. It is intended for:

• Members (including former members);

• Prospective members;

• Customers;

• Subscribers (newsletter);

• Business partners;

• Employees;

• Users of the website www.dasregenbogenhaus.ch;

• as well as all individuals who contact us in any other way.

The applicable laws are the Federal Act on Data Protection of June 19, 1992 (DSG; SR 235.1) and the corresponding Ordinance to the Federal Act on Data Protection of June 14, 1993 (VDSG; SR 235.11).

​

 

C. Principle

The protection of your data is of great importance to us. We respect your fundamental rights, in particular your right to privacy. It makes no difference whether you provide us with your data electronically, by mail, or by telephone. As a general rule, we process your personal data only to the extent necessary for managing member data, providing and ensuring a fully functional website, and delivering our services, campaigns, and work.

Our range of services is subject to Swiss data protection law. The EU recognizes that Swiss data protection law ensures an adequate level of data protection. We strive to achieve the level of protection provided by the EU’s General Data Protection Regulation (GDPR) in the foreseeable future.

 

 

D. Organization

The Regenbogenhaus Zürich Association is an association governed by private law; its members are legal entities and natural persons.

 

 

E. Data Controller

The Board of Directors is responsible for the association’s data processing. If you have any data protection concerns, you can contact us at the following address (Board of Directors, Regenbogenhaus Zürich, Zollstrasse 117, 8005 Zürich, info@dasregenbogenhaus.ch).

 

 

F. Personal Data (Art. 3(a) DSG)

Personal data refers to any information relating to an identified or identifiable individual.

We process only the following main categories of personal data:

• Last names, first names, titles;

• Correspondence data;

• Contact information.

If you are a member or prospective member of the Regenbogenhaus Zürich association, your address and other personal data will be stored in our membership database.

​

 

G. Processing of Personal Data

The processing of personal data refers to any handling of personal data, in particular the collection, storage, use, modification, disclosure, archiving, or destruction of data.

Processing may be carried out electronically or manually.

We, the Regenbogenhaus Zürich Association, primarily process personal data from

• members (including former members);

• prospective members;

• subscribers (newsletter);

• customers;

• business partners;

• employees;

• users of the website www.dasregenbogenhaus.ch

When we collect personal data from you (such as your name, address, or email address), this is generally done on a voluntary basis and after providing appropriate information.

If it is not possible to obtain consent in advance and the processing of the data is permitted by law, your data will be processed even without your consent. In this context, we process, in particular, information that a data subject provides when contacting us—for example, by mail, email, contact form, phone, or social media.

The processing of your data generally takes place only with your consent, unless the processing is permitted for other reasons. By becoming a member, you grant your consent. This includes, in particular, processing:

when evident from the circumstances (e.g., address changes);

after prior notification;

to safeguard our overriding legitimate interests (e.g., collection of outstanding debts; accounting obligations);

to fulfill a contract (e.g., sale of items); or for corresponding pre-contractual measures (establishing contact to order items);

In addition to the data you provide us directly, the personal data we process also includes data about you that we receive from third parties, in particular:

• Data related to newsletters, e.g., whether and when you opened an email, information about your device, and which links in the newsletter you clicked on.

• Data related to the use of the website (e.g., IP address, information about your device and settings, cookies, date and time of the visit, pages and content viewed, features used, referring website, location data)

• Information about you in correspondence and meetings with third parties;

• Information about you provided to us by individuals in your network (the organization you represent, etc.) so that we can enter into and fulfill contracts with you or involving you (e.g., references, your shipping address, powers of attorney, information regarding compliance with legal requirements, information from banks, insurance companies, sales partners, and other contractual partners of ours regarding your use of or provision of services, such as payments made and purchases made;

• information about you from media and the Internet (to the extent this is appropriate in the specific case, e.g., in the context of a job application, press review, marketing/sales, etc.);

If you provide us with personal data of other individuals (e.g., individuals from the same organization), please ensure that these individuals are familiar with this Privacy Policy and only share their personal data with us if you have been authorized to do so by the data subject and if such personal data is accurate.

We regularly verify the accuracy of your data. If your data is inaccurate or incomplete in light of the purpose for which it was collected or processed, we will correct or destroy it.

We maintain a presence on social media platforms to communicate with interested individuals and inform them about our offerings and initiatives. In doing so, the general terms and conditions (GTC), privacy policies, and other provisions of the respective platform operators apply.

​

 

H. Purpose of Processing Personal Data (Art. 4(3) DSG)

We collect only personal data that is directly related to our association’s purpose and that is necessary to provide and further develop our services. The data processed in this context, as well as the nature, scope, purpose, and necessity of its processing, are determined by the underlying contractual relationship.

We collect your personal data specifically for the following purposes:

the administration of member data, in particular:

• address maintenance;

• Sending email newsletters;

• Invoicing and invoice verification;

• Correspondence;

• Entering into agreements and contracts;

• Selling and shipping items;

To the extent that you have given us your consent to process your personal data for specific purposes (e.g., when you register as a member or to receive newsletters), we process your personal data within this scope and based on this consent. We reserve the right to rely on other legal bases.

Consent may be revoked at any time; however, this has no effect on data processing that has already taken place.

​

 

I. Retention Period for Personal Data

We process personal data only for as long as necessary for the respective purpose or purposes, i.e., for example, for the duration of membership or the entire business relationship. If we are required by law or otherwise to retain your data for a longer period—such as due to accounting obligations—we will restrict processing accordingly.

Your data will be deleted no later than 10 years after the end of the business relationship or membership. For technical reasons, data may be retained in backup copies beyond this period.

​

 

J. Use of Cookies

We typically use “cookies” and similar technologies on our website to identify your browser or device. A cookie is a small amount of data that is sent to your computer or automatically stored on your computer or mobile device by the web browser you’re using when you visit our website. When you visit this website again, this allows us to recognize you, even if we don’t know who you are. In addition to cookies that are used only during a session and deleted after your visit to the website (“session cookies”), cookies may also be used to store usage preferences and other information over a specific period of time (e.g., two years) (“persistent cookies”). We use permanent cookies to store user settings (e.g., login forms). Some cookies are set by us, while others are set by business partners with whom we collaborate. You can configure your browser to reject cookies, store them only for a single session, or delete them early. Most browsers are set to accept cookies. If you block cookies, certain features (such as language selection, shopping cart, and ordering processes) may no longer function.

​

 

K. Use of Google Analytics

The service provider does not receive any personal data from us. However, it can track your use of the website, combine this information with data from other websites you have visited that are also tracked by the service provider, and use the insights for its own purposes (e.g., ad targeting). If you have registered with the service provider (e.g., Google) yourself, the service provider already knows you. The processing of your personal data by the service provider is then carried out under the service provider’s responsibility in accordance with its privacy policy. The service provider only informs us about how our respective website is used (no information about you personally).

The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data (according to Google Inc.). You can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as prevent Google from processing this data, by using the corresponding browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=de

 

 

L. Newsletters and Emails

We use the Mailchimp service to send our newsletters and automated emails.

In some cases, and to the extent permitted, we include visible and invisible image elements as well as links in our newsletters; by tracking these, we can determine whether, when, and on what type of device (mobile/tablet/desktop) an email was opened. We also receive an analysis of the most-clicked links. We track this data to better understand how our newsletters are read and to improve them. You can block images from loading in your email program; however, the information mentioned above is still collected as soon as you click on a link.

We do not use these technologies for payment reminders or invitations to the general meeting sent via email.

By using our website and consenting to receive newsletters and other emails, you agree to the use of this technology. If you do not wish to do so, you must adjust the settings of your browser or email program accordingly.

 

 

M. Data Disclosure

As a general rule, we do not disclose your data within the scope of our activities and for the purposes set forth in Section E. To the extent necessary and permitted for the fulfillment of our tasks, data may be disclosed, in particular, to the following third parties:

• Service providers, suppliers, and other business partners of the Regenbogenhaus Zürich association

​

 

N. Data Security

We take appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse.

Despite appropriate and suitable organizational and technical measures, the processing of personal data on the Internet may always involve security vulnerabilities. We therefore cannot guarantee absolute data security.

​

 

O. Obligation to Provide Personal Data

You are generally not legally obligated to provide us with data.

However, in the case of membership or when using other services—such as ordering items from our online store—you must provide the personal data necessary for joining the association or for establishing and conducting a business relationship and fulfilling the associated contractual obligations.

When using the website, certain information is collected to ensure secure data transmission (such as your IP address). You can prevent this data from being used to identify you by taking appropriate technical measures (e.g., using a Tor browser).

 

 

P. Rights of the Data Subject

You have the following rights under the data protection law applicable to you and to the extent provided therein:

• the right of access and rectification;

• the right to restrict data processing;

• the right to generally prohibit us from processing your data;

We reserve the right to assert the restrictions provided for by law on our part (e.g., retention requirements), particularly if we are obligated to retain or process certain data, have an overriding legitimate interest in doing so, or need it to assert claims (e.g., outstanding invoice amounts).

The right of access grants you, in particular, the right to the following information:

• all data relating to you contained in a data collection, including, where possible, information on its source,

• the purpose of the processing (i.e., the relevant administrative task or specific business purpose) and, where applicable, the legal basis for the processing,

• the categories of data being processed,

• the parties involved in a data collection, and

• information about the individuals and entities to whom data is transferred (data recipients)

Exercising your rights may conflict with contractual agreements. This may have consequences such as early termination of the contract or financial implications. If this is not already stipulated in the contract, we will inform you in advance.

Exercising these rights requires that you verify your identity by providing a copy of your ID. To exercise your rights, you may contact us at the address provided in Section C.

Every data subject has the right to enforce their claims in court or to file a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner:

Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Bern.

​

 

Q. Changes

We may amend this Privacy Policy at any time without prior notice. The current version published on www.dasregenbogenhaus.ch/datenschutz applies. If this Privacy Policy is part of an agreement with you, we will notify you of any changes via email or other appropriate means in the event of an update.

This Privacy Policy takes effect on March 9, 2023.