Dataprotection policy
1 Introduction
This Privacy Policy applies to the website www.capacityzurich.ch. This privacy policy informs our participants, interested parties, website visitors and third parties with whom we do business or interact (hereinafter “partners“, “participants“, “users” or “you“) about the collection, processing, disclosure, transfer of your personal data in connection with the use of our services, apps, websites, offers, interaction with us or cooperation (hereinafter “services“). Please do not hesitate to contact us at any time if you have any questions about data protection.
2 Applicable law and definitions
2.1 Applicable law
Our offer is aimed at users in Switzerland and our activities are focused on Switzerland. We are based in Switzerland and comply with the Swiss Data Protection Act (FADP) in its currently valid version. With this Privacy Policy, we submit to the provisions of the Data Protection Act applicable from September 01, 2023. You can find the full text of the law here: https://www.fedlex.admin.ch/eli/fga/2020/1998/de
2.2 Definitions
The definitions of Art. 5 FADP apply, which we reproduce below.
- Personal data: all information relating to an identified or identifiable natural person
- data subject: natural person about whom personal data is processed
- particularly sensitive personal data are:
(1) Data concerning religious, philosophical, political or trade union beliefs or activities,
(2) data concerning health, privacy or racial or ethnic origin,
(3) genetic data,
(4) biometric data that uniquely identifies a natural person
(5) data relating to administrative and criminal prosecutions or sanctions
(6) data on social assistance measures;
- Processing: any handling of personal data, regardless of the means and procedures used, in particular the collection, storage, retention, use, modification, disclosure, archiving, deletion or destruction of data;
- Disclosure: the transmission or making available of personal data;
- Profiling: any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements;
- High-risk profiling: Profiling that entails a high risk to the personality or fundamental rights of the data subject by linking data that allows an assessment of essential aspects of the personality of a natural person;
- Data security breach: a breach of security that results in personal data being accidentally or unlawfully lost, deleted, destroyed or altered, or disclosed or made accessible to unauthorized persons
- Federal body: federal authority or agency or person entrusted with public tasks of the Confederation
- controller: a private person or federal body which alone or jointly with others determines the purposes and means of the processing
- Processor: a private person or federal body that processes personal data on behalf of the controller.
3 Appropriate information about the collection of personal data
If we maintain a website, you will find this privacy policy on our website.
4 Contact person
4.1 Details of the controller
The data processing is carried out by:
Capacity
c/o The Impact Hub Zurich
Sihlquai 131
8005 Zurich
E-mail: info@capacityzurich.ch
4.2 Contact for information and questions about data protection
If you have any data protection concerns, in particular if you wish to exercise your rights, please get in contact with: Christian Nat, c/o The Impact Hub Zürich, Sihlquai 131, 8005 Zürich, data.protection@capacityzurich.ch
4.3 Data protection officer or data protection advisor
We are not currently obliged to appoint a data protection officer or data protection consultant.
5 Data protection information
5.1 Purpose of processing
We process personal data for the following processing purposes, depending on whether you are in contact with us as a customer, supplier, employee, service provider or applicant, or whether you work with us.
The processing purposes are:
- Use and provision of the website and a newsletter
- Integration of social media services, use of cookies to ensure the functionality and analysis of the website
- Making contact and communication
- Conducting the association’s operations in alignment with its articles of association, including activities aimed at fulfilling our association’s objectives, leveraging technical tools where necessary.
- Conducting programmes, including workshops and training courses, mentoring and coaching activities, including all Capacity Programmes and Initiatives , networking events, also leveraging technical tools and applications.
- Processing applications to the Capacity Programmes , to the Talent Placement Initiative and offering job vacancies
- Promoting and providing talents from our Talent Pool
- Conducting programmes and activities with and for our alumni
- Evaluating the short, medium and long term impact of the programmes, interventions and activities on all the stakeholders.
- Promotion, marketing and organisation of Events
- Processing donations and grants, donation management
- Fulfillment of contractual obligations, enforcement of and defense against claims
- Participation in scientific and/or funded projects
- Compliance with legal and regulatory obligations to which we are subject
- Other purposes e.g. administrative purposes, evaluation of processes, quality assurance
5.2 Categories of recipients
We specify the category of recipients to whom personal data may be disclosed depending on the respective activity.
- Web hosting provider, webmaster, IT service provider (if used)
- Provider of the content management system
- Third parties who provide services
- Trustees, service providers for the fulfillment of legal or tax obligations
- Insurance companies
- Social media services
- Service partners
- Mentors, coaches, trainers
- Participants and alumni in the capacity programmes and initiatives
- Project and research partners
- Association members, employees, volunteers
- Third parties who provide services such as payment providers, post and parcel senders and other
5.3 Disclosure abroad
We provide information about the disclosure of personal data abroad. This is done in order to provide services, e.g. IT and website services, or to pursue our purposes in accordance with the Articles of Association.
Other EU countries: adequate level of data protection
USA: The USA does not currently guarantee an adequate level of data protection. The EU has adopted an adequacy decision, the (Swiss) Federal Council has not yet adopted such a decision, so that there is currently no adequacy decision within the meaning of the FADP (as of 08/2023). To ensure appropriate data protection, we generally base the data transfer on guarantees (standard data protection clauses (Art. 16 para. 2 d. FADP)) or exceptions (express consent of the data subject (Art. 17 para. 1 a FADP) or the disclosure is directly related to the conclusion or performance of a contract between the controller and the data subject (Art. 17 para. 1 b. no. 1 FADP). We reserve the right to refuse the transfer on the basis of an exception pursuant to Art. 17 para. 1 b. No. 2 FADP, Art. 17 para. 1 d – f FADP.
6 Cookies
We use cookies for our website to ensure the functionality of the website, to analyze user behavior and to improve our web and service offering. Cookies are small text files that are either only stored for the duration of the visit to the website (so-called “session cookies”) or are stored for longer and only deleted after a specified time, e.g. to recognize returning users or to enable shopping and the shopping cart function. Some services also set cookies.
You can usually set which cookies you wish to allow in your browser settings. If all cookies are rejected (“functional cookies”), the visit and functionality of our website may be restricted or unavailable. You can find help on cookie management for common browsers here:
– Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
– Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
– Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
– Opera: http://www.opera.com/de/help
– Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
7 Automated decision making
We may use Workable’s technology to select appropriate candidates for us to consider based on criteria expressly identified by us, or typical in relation to the role for which you have applied. The process of finding suitable candidates is automatic, however, any decision as to who will be accepted into a programme or who we will recommend to fill the job opening will be made by our staff.
Otherwise, we do not use automated decision-making. We do not use exclusively automated decision-making, where decisions about you are made by technical means and without human intervention.
8 Analysis tools
We have integrated analysis tools on our website in order to analyze user behavior, evaluate advertising measures or compile visitor statistics.
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google“). Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on our websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google may use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de). An opt-out cookie will be set to prevent the future collection of your data when you visit this website.
We have integrated Google Tag Manager, which as a tag management system enables us to facilitate the implementation of web analysis tools on our website and to offer you a better user experience from the information obtained. Tags are so-called code snippets that are used for analysis and marketing purposes. With Google Tag Manager, a Google service, the marketer can manage website tags via an interface. The Google Tag Manager itself (which implements the tags) is a cookie-free domain and does not collect any personal data. However, other tags are triggered, which in turn may collect data under certain circumstances. Google Tag Manager has no access to this data.
We have activated Google Ads, which allows us to place targeted ads on the Internet or using the Google network. In order to measure success, Google sets a cookie and stores the IP address and the internet address of the users who have accessed our website via the ad. This data is passed on to Google.
Offers from Google are provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. You can find more information on Google’s terms of use and data protection at https://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/.
9 Integration of external online and social media services
We have integrated Google Maps, the map service of the provider Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Information about your use, your location or other data (e.g. IP address) may be transmitted to “Google”, usually to a “Google” server in the USA, and stored there. This takes place regardless of whether you are logged into your Google account. However, if you are logged in, your data will be assigned to your account. If you do not wish your data to be associated with your Google profile, you must log out before accessing the website or activating any content. The services store your data as user profiles and use them for the purposes of providing the services, maintaining and improving the services, measuring performance, developing new services and providing personalized services, including content and advertisements. You have the right to object to the creation of these user profiles, whereby you must contact Google directly to exercise this right.
We have integrated Google Fonts to offer you a better user experience. Google Fonts allows us to use fonts provided by Google.
We have integrated Google reCaptcha, which performs automated tests to distinguish human actions from those of machines based on interaction patterns. These tests are used as access control.
You can find Google’s data protection information at: https://policies.google.com/privacy and you can opt out of personalized advertising at https://adssettings.google.com/authenticated.
We have integrated the WordPress Multilingual Plugin (“WPML”) in order to be able to translate our website into various languages. You can find the WordPress data protection information at: https://automattic.com/de/privacy/ and https://wordpress.com/de/tos/.
We have integrated a plugin/tool that allows cookies to be used only after a website visitor has given their consent.
We have integrated a plugin/tool that makes it possible to make donations to us via Paypal or Twint via the website. Payment is processed via the respective payment service provider that you select for your donation. The Twint privacy policy can be found at https://www.twint.ch/datenschutz/. The PayPal privacy policy can be found at https://www.paypal.com/webapps/mpp/ua/privacy-full.
We have integrated YouTube videos to offer you a better user experience and to present our offers and activities. As a result, YouTube receives the information that you have accessed the corresponding subpage of our website and data on location (GPS data), IP address and devices used, including information about objects in the vicinity of your device, such as WLAN access points, radio masts and Bluetooth-enabled devices as well as sensor data from your device (see “YouTube” data protection information of the provider) can be transmitted. This takes place regardless of whether you are logged in to Google or YouTube. However, if you are logged in, your data will be assigned to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating a video. YouTube stores your data as user profiles and uses them for the purposes of providing the services, maintaining and improving the services, measuring performance, developing new services and providing personalized services, including content and advertisements. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
The data is also processed in the USA as part of this service. The information generated by the cookies about the use of our website is usually transferred to a server in the USA and stored there.
The YouTube data protection information can be found at: https://policies.google.com/privacy and an opt-out from personalized advertising is possible at https://adssettings.google.com/authenticated.
We have integrated the newsletter service Mailchimp to process our newsletter. As a result, Mailchimp receives the date of registration on the email list, the email and IP address, the name of the new member on the new list, as well as the physical address and demographic information. The data is also processed in the USA as part of this service. The information generated by the cookies about the use of our website is usually transferred to a server in the USA and stored there.
You can find the Mailchimp data processing information at: https://mailchimp.com/de/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.
We use the sharing tool AddToAny. This allows you to share the content displayed with people in your environment. You can use the AddToAny share function to do this. A direct connection between your browser and the AddToAny server is established via the plugin as soon as you visit our website. AddToAny then receives the information that you have visited our site with your IP address. AddToAny anonymizes the IP addresses. Cookies are used when AddToAny is used. The information generated by the cookies about the use of our website is generally transmitted to a server in the USA.
You can find more information on data processing by AddToAny at https://www.addtoany.com/terms and https://www.addtoany.com/privacy.
We have also integrated Accredible (+Credential). A platform that can be used to automatically create, manage and distribute digital certificates, open badges and blockchain certificates. The company is based in the USA, which means that (if the service is used at all) data is generally processed in the USA.
You can find more information on data processing by Accredible at https://www.accredible.com/legal/data-security-privacy-policies.
10 Newsletter
On our website you are given the opportunity to subscribe to our newsletter. You can see from the input form which data is collected. By subscribing to our newsletter, you agree that we may use the data you provide within the scope of this privacy policy. In particular, we may send you our e-mail newsletter on a regular basis. You can unsubscribe from the newsletter at any time using the function provided for this purpose in the newsletter.
11 Social media presence
We are active on various social media platforms and provide information about our services. We do not publish any customer or personal data or information on social media platforms without the express consent of our clients. However, we may process data about you if, for example, you are at one of our events or functions and we post about it on social media. The providers of these platforms can analyze their use and process it for their own marketing purposes as the controller.
If you click on a social media link on the website, you will be redirected to the corresponding page; the data processing is then carried out by the respective provider.
LinkedIn: https://www.linkedin.com/company/capacity-zurich/
Provider: LinkedIn Ireland Unlimited Company, Ireland
Data protection information: https://de.linkedin.com/legal/privacy-policy?
Instagram: https://www.instagram.com/capacityzurich/
Provider: Meta Platforms Ireland Limited, Ireland
Data protection information: https://privacycenter.instagram.com/policy
Facebook: https://www.facebook.com/CapacityZurich/
Provider: Meta Platforms Ireland Limited, Ireland
Data protection information: https://de-de.facebook.com/privacy/policy/
YouTube: https://www.youtube.com/channel/UCCJ5eep9N2b2NEGyDAQqzgw
Provider: Google Ireland Limited, Ireland
Data protection information: https://www.youtube.com/intl/de_be/howyoutubeworks/user-settings/privacy/
X: https://twitter.com/CapacityZurich
Provider: Twitter International Unlimited Company, Ireland
Data protection information: https://twitter.com/de/privacy
12 Donation Technology
We make use of donation technology engineered by RaiseNow AG, Hardturmstrasse 101, 8005 Zürich, whose privacy policy can be viewed here:https://www.raisenow.com/ch-en/datenschutz On the basis of our interests and donation processing, personal and payment-related data as well as communication preferences are captured by RaiseNow, in accordance with GDPR art. 6 par. 1 lit. b and a processing contact we have with them, as per art. 28 par. 3 line 1. RaiseNow AG based in Switzerland and RaiseNow GmbH based in Germany both comply with all requirements of the European General Data Protection Regulation. Switzerland is considered a safe country to which the European Commission has affirmed an appropriate level of data protection by means of a decision on conformity. This includes, for example, the security of data processing, which is regularly checked and certified by TÜV SÜD at RaiseNow AG on the basis of the PCI-DSS SAQ D Level 2 security standard (https://developer.raisenow.com/docs/pci-dss/Certificate-of-Validation_en.pdf). RaiseNow may use any collected data in anonymous form, that is without assignment to a donor, to optimize or improve its own services, but may not contact donors directly or pass this data on to third parties.
13 Reservation of right of amendment
This privacy policy is not part of a contract with you. We reserve the right to amend this privacy policy at any time with effect for the future. This may occur, for example, if an appropriate level of data protection is determined for a data transfer abroad or if we expand or restrict our service.
This privacy policy reflects the legal status of the Data Protection Act applicable from September 9, 2023.
If you have any questions about our privacy policy or the processing of personal data, please do not hesitate to contact us.
14 Inconsistency and ambiguity
In the event of any inconsistency or ambiguity between the German and English versions of this document, the German version shall prevail.