Privacy Policy of the Pestalozzi Children's Foundation
- Scope of application and controllers
This privacy policy provides information on how and for what purposes the Pestalozzi Children's Foundation (hereinafter referred to as "we" or "SKP") processes your personal data (hereinafter referred to as "you" or "visitor") that you disclose to us or that we collect from you. Personal data" refers to all data and information relating to an identified or identifiable natural person.
We process personal data in accordance with the provisions of the Swiss Data Protection Act (hereinafter referred to as "DSG") and, if and to the extent applicable, in accordance with the General Data Protection Regulation of the European Union (hereinafter referred to as "GDPR"). In so far as we deem it appropriate, we may provide you with additional privacy policy statements in addition to this privacy policy.
The name and address of the controller responsible for the processing are as follows:
Pestalozzi Children's Foundation
Kinderdorfstrasse 20
9043 Trogen
Telephone: +41 71 343 73 73
Email: digital@pestalozzi.ch
If you have any questions about data protection at the Pestalozzi Children's Foundation, please contact us at the address provided above.
We primarily process the personal data that we receive or collect in the course of our foundation activities from our visitors, project participants, donorsn, customers, suppliers and other business partners. In addition, we may also process personal data that we have obtained from publicly accessible sources directly or via specialised service providers, e.g. from the media, via public registers such as the commercial register or via public address providers (e.g. Swiss Post). Finally, we may also have received your personal data from your family members, from our business partners, from official bodies and authorities or from other third parties. When you provide us with personal data of other persons (e.g. family members), we ask you to ensure that these persons are aware of this privacy policy and only share their personal data with us if you have been permitted to do so and if the relevant personal data is correct.
The personal data we process includes, as the case may be, in particular personal and contact details (e.g.. name, address, telephone number and email address);, identifying and background information (e.g. language, date of birth, gender, religious denomination, specimen signatures);, contractual data which we receive or collect in connection with the initiation, conclusion and performance of contracts with you (e.g. services you have requested or enquired about, as well as related behavioural and transactional data, financial data for payment purposes such as bank account details); transactional data (e.g. payment transaction data, details of your payment order and details of the payee or beneficiary and the purpose of the payment); communication data (e.g. content of emails, written correspondence, chat messages, social media posts, comments on websites, telephone conversations, video conferences, proof of identity, marginal data); documentation data or data from your contacts with third parties (e.g. minutes of consultations or conversations, file notes, references); preference data (e.g. data on the use of our website); public data that can be obtained about you (e.g. land register and commercial register data, data from the media and the press); data in connection with (potential) proceedings or investigations by authorities, official agencies, courts, organisations or other bodies; data for compliance with legal requirements; image and sound recordings (e.g. photographs, videos and sound recordings, video surveillance system recordings as well as telephone and video conference call recordings) and technical data (e.g. IP address and other device IDs, identification numbers assigned to your device by cookies and similar technologies).
- Purpose of processing and legal basis
We process your personal data primarily to provide our services in the context of fulfilling our statutory duties as well as our contractual obligations. In particular, we process your personal data for the following purposes:
- to communicate with you, in particular to provide you with information or to process
your requests. If you contact us by email/contact form, you authorise us to respond to you via the same channel. Please note that unencrypted emails are transmitted via the open Internet, which means there is no guarantee that they cannot be viewed, accessed or tampered with by third parties. We therefore ask you not to send us confidential information by email. We exclude – as far as legally permissible – any liability which you may incur in particular as a result of faulty transmission, falsification of content or disruption of the network (interruptions, overloads, unlawful interference,
blocking); - to provide you with our services and our website as well as to analyse and improve them;
- for contractual processing, namely in connection with the initiation, conclusion and processing of contractual relationships. This includes all data processing that is necessary or expedient to enter into, perform and, if necessary, enforce a contract, such as processing to decide whether and how we enter into a contract with you, to provide contractually agreed services, for general accounting purposes, processing job applications (e.g. managing and evaluating job applications, conducting interviews including creating personality profiles, obtaining reference information), to enforce legal claims arising from contracts (debt collection, legal proceedings, etc.);
- in connection with accounting, data archiving and the management of our archives;
- for training and development purposes: we may process your personal data to conduct internal training and to provide further education and development for our employees;
- in the sale of claims, e.g. when we provide the purchaser with information about the nature and amount of the claim and, if applicable, the creditworthiness and behaviour of the debtor;
- to be able to hold events;
- to manage the business relationship with you (incl. invoicing);
- to inform you about recent developments or to provide you with other information about our services;
- for video surveillance to safeguard house rights and other measures related to IT, building and facility security, and protection of our employees and other persons and assets belonging to or entrusted to us (such as access controls, visitor lists, network and mail scanners, telephone recordings);
- in connection with restructuring or other actions under company law (e.g. due diligence, sale of a company);
- for the assertion of legal claims and defence in connection with legal disputes and official proceedings at home and abroad;
- to comply with our legal, regulatory (incl. self-regulations) and internal requirements and rules at home and abroad, incl. compliance with orders of a court or authority.
We process your personal data for the above purposes, depending on the situation, in particular based on the following legal bases:
- The processing of personal data is necessary for the fulfilment of a contract with you;
- You have given your consent for the processing of personal data relating to you;
- The processing of personal data is necessary for the fulfilment of a legal obligation;
- The processing is necessary in order to protect the vital interests of the data subject or another natural person; or
- We have a legitimate interest in processing the personal data.
- When visiting our Children's Village and organising events
We may process personal data that you disclose to us in connection with a visit to our Children's Village or an event organised by us, or that we collect from you in the process, in particular for the following purposes:
- to manage your visit and organise events;
- to look after guests;
- to report on our events (e.g. in the form of texts, photographs, videos and voice recordings);
- to treat medical emergencies;
- to market other services, offers and products of ours;
- to use for testimonials (giving reviews for a service, product or offer from us).
When processing your personal data for the aforementioned purposes, we rely on the following legal bases in addition to those mentioned in section 3.1, depending on the situation:
- The processing of personal data is necessary for the fulfilment of a contract with you;
- You have consented to the data processing;
- We have a legitimate interest in processing the personal data. Our legitimate interests consist, in particular, of providing you with our services, evaluating, improving and promoting our Children's Village and our events. Depending on the case, we may also have other legitimate interests.
When organising and implementing projects at home and abroad, we may in particular process personal data of participating children and young people, supervisors and employees of schools, partner companies and service providers. In particular, we may process this personal data for the following purposes:
- to organise and implement projects at home and abroad;
- accommodation, room allocations and catering (especially handling allergies, intolerances etc.);
- to document the projects in the form of texts, photos, video and voice recordings;
- to report on our events (e.g. in the form of texts, photographs, videos and voice recordings);
- to market other services, offers and products of ours;
- to use for testimonials (giving reviews for a service, product or offer from us).
When processing your personal data for the aforementioned purposes, we rely on the following legal bases in addition to those mentioned in section 3.1, depending on the situation:
- The processing of personal data is necessary for the fulfilment of a contract;
- You have consented to the data processing;
- We have a legitimate interest in processing the personal data. Our legitimate interests consist in particular of the implementation, evaluation, improvement and promotion of our projects. Depending on the case, we may also have other legitimate interests.
- When receiving donations (sponsorships, circle of friends, donations, inheritances & legacies)
If you make donations to us (for example in the form of sponsorships, circle of friends, donations, inheritances & legacies), we may process your personal data in particular for the following purposes:
- to process your donation (including invoicing and payment processing);
- for statistical analysis;
- for the management and solicitation of donors;
- for documentation and reporting via analogue and digital platforms.
When processing your personal data for the aforementioned purposes, we rely on the following legal bases in addition to those mentioned in section 3.1, depending on the situation:
- The processing of personal data is necessary for the fulfilment of a contract with you;
- You have consented to the data processing;
- We have a legitimate interest in processing the personal data. Our legitimate interests consist in particular of the analysis, management, improvement and promotion of our donation offers.
- When providing radio programmes for children and young people
When children and young people participate in our radio services, we may process their personal data in particular for the following purposes:
- to provide radio programmes for children and young people;
- to manage and promote radio programmes for children and young people;
- to report on our events (e.g. in the form of texts, photographs, videos and voice recordings);
- to market other services, offers and products of ours;
- to use for testimonials (giving reviews for a service, product or offer from us).
When processing your personal data for the aforementioned purposes, we rely on the following legal bases in addition to those mentioned in section 3.1, depending on the situation:
- The processing of personal data is necessary for the fulfilment of a contract;
- Consent has been given;
- We have a legitimate interest in processing the personal data. Our legitimate interests consist in particular of the analysis, management, improvement and promotion of our radio services.
- When visiting our websites
To visit our websites, you are not required to disclose any personal data. However, with each visit, the server collects a series of user information, which is temporarily stored in the server's log files. The information collected includes, among other items, the IP address, the date and time of access, the time zone difference from the GMT time zone, the name and URL of the file accessed, the website from which access is made, the browser used and the operating system used.
The use of this general information does not involve the identification of a specific individual. The collection of this information or data is technically necessary to display our websites to you and to ensure their stability and security. This information is also collected to improve the websites and analyse their usage. The legal basis for the temporary storage of the information and the log files is our legitimate interest in being able to offer our websites to you in sufficient quality and to continuously improve them.
-
- Contact form
You can contact us via the contact forms provided on our websites. The personal data you provide us with will be stored by us and processed for the purpose of handling your request. You consent to the legal basis for this personal data processing and it is in our legitimate interest to process your request.
-
- Cookies/tools
Our websites may use cookies or other technologies/tools such as pixels, tags or external services (hereinafter referred to as "cookies" or "tools"). Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system or mobile device, or they can be image files such as pixels. The cookie contains a unique character sequence that enables the unique identification of the browser or mobile device when the website or app is accessed again.
The purpose of using cookies is, on the one hand, to enable and simplify the use of our websites for users. Some functions of our websites are not available without the use of cookies (known as technically necessary cookies). On the other hand, we also use cookies/tools to analyse user behaviour on our websites, namely for measuring reach, and finally, for marketing purposes.
-
-
- Technically necessary cookies
-
Technically necessary cookies are required to enable our websites to function. As a result, it is not possible to disable these cookies in our systems. They usually record important actions, such as the number of requests made, editing your privacy settings, or filling out forms. While you may block these cookies in your browser, some parts of our websites may no longer function if you do so.
The legal basis for data processing when using technically necessary cookies is our legitimate interest, which lies primarily in ensuring the functionality and improvement of our website.
-
-
- Analytics and marketing cookies
-
Analytical cookies allow us to analyse visitor behaviour and traffic sources, enabling us to measure the performance of our websites and improve the user experience. They help us to identify which pages are popular and show how visitors navigate our websites. The information collected is aggregated and anonymous.
Marketing cookies allow us to deliver advertising that is relevant to you. These cookies can remember that you have visited our websites and share this information with other companies, including other advertisers.
We specifically use the following analytics and marketing cookies:
- Google Analytics of Google Ireland Ltd., Irland (hereinafter referred to as "Google"). The privacy policy for Google Analytics is available at: https://policies.google.com/privacy?hl=de.
- Matomo Analytics of InnoCraft Ltd., New Zealand. The privacy policy for Matomo Analytics is available at: https://matomo.org/privacy-policy/.
- Hotjar of Hotjar Ltd., Malta. The privacy policy for Hotjar is available at: https://www.hotjar.com/legal/policies/privacy/de/.
You are entitled to reject the use of cookies by (i) selecting the appropriate settings in your browser, (ii) using appropriate cookie blocker software (e.g. ghostery etc.) or (iii) for Google cookies, downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/ gaoptout?hl=de.
More information about the use of third-party tools is available in the description of the tools used in this privacy policy.
We may use the Google Tag Manager from Google on our websites. Google Tag Manager is a solution that enables website tags to be managed via an interface. The tool itself is a domain without cookies and, according to Google, collects no personal data. The tool triggers other tags, which in turn may collect personal data. Google Tag Manager does not access this data. If a deactivation is set at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. You are able to prevent the setting of tags at any time.
The legal basis for this is your consent and our legitimate interests.
-
- Matomo Tag Manager
We may use the Matomo Tag Manager of InnoCraft Ltd, New Zealand (hereinafter referred to as "Matomo Tag Manager") on our websites. Matomo Tag Manager is a tag management system for managing JavaScript and HTML tags used to implement tracking, analytics and marketing tools. Matomo itself does not collect any personal data, and no personal data is shared with third parties.
The legal basis for this is your consent and our legitimate interests.
We are able to embed videos from the YouTube platform on our websites, enabling them to be played directly from our websites. The YouTube videos are all embedded in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. It is only when you play the videos that data about you is transmitted.
The legal basis for processing your data is your consent. More information on personal data processing by Google in connection with the playing of YouTube videos is available at https://policies.google.com/privacy?hl=de&gl=de
-
- Google ReCaptcha
We may use Google reCAPTCHA from Google on our websites when making use of text fields. The purpose of reCAPTCHA is to verify whether the data input on our websites (e.g. in a contact form) is being done by a human or by an automated programme. We use reCAPTCHA to prevent features on our websites from being misused through spam, machine processing or otherwise. reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics for this purpose. This analysis begins automatically as soon as the website visitor enters the website. reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user) for analytical purposes.
The legal basis for processing your data is your consent and our legitimate interests. More information about reCAPTCHA is available at https://developers.google.com/recaptcha/.
-
- Eventfrog
We use the Eventfrog online ticket shop of Eventfrog AG to purchase or reserve tickets for our events. When using the platform and in particular when purchasing tickets on the platform, personal data is collected from you and processed for the purpose of processing the contract and participation in the event. More information about the processing of your personal data by Eventfrog AG is available at https://eventfrog.ch/de/datenschutzerklaerung.html.
-
- Google Fonts
We may use Google Fonts on our websites to display external fonts. This is a service provided by Google.
When our websites are accessed, a connection to Google servers, including those in the USA, is established to enable the display of certain fonts on our websites, which may involve your IP address being transmitted to the corresponding Google servers.
The legal basis is your consent and our legitimate interest, which lies in the optimisation and economic operation of our website.
More information on Google Fonts and on the options for preventing Google's use of data is available at https://adssettings.google.com/authenticated and https://policies.google.com/privacy.
-
- Facebook Pixel
We may use Facebook Pixel in connection with our websites. Facebook Pixel enables the operator Meta Platforms Ireland Limited or Meta Platforms, Inc. (USA, hereinafter collectively referred to as "Meta Platforms") to determine you, as a visitor to our websites, as the target audience for displaying Facebook advertisements.
We use Facebook pixels to display our Facebook advertisements only to those Facebook users who have also shown an interest in us or the content of our websites, or who have certain characteristics (e.g. interests in certain topics or services determined on the basis of the websites visited) that we transmit to Facebook. In doing so, our aim is also to ensure that our Facebook advertisements correspond to the potential interest of users and are not perceived as an annoyance. The Facebook pixel allows us to further track the effectiveness of the Facebook advertisements for statistical and market research purposes.
The legal basis for processing your data is your consent. More information on the processing of your personal data by Meta Platforms is available at https://de-de.facebook.com/privacy/policy.
-
- RaiseNow
We use the fundraising platform RaiseNow of Raisenow AG for our donation service or the collection and distribution of donations. When using the platform and in particular when donating money via the platform, personal data is collected from you and processed for the purpose of processing the contract and fulfilling the service.
More information about RaiseNow's processing of your personal data is available at https://www.raisenow.com/de-ch/datenschutz.
-
- Google Business Profile
We may use Google Business Profile in connection with our websites. Google Business Profile allows us to ensure that our websites are found in Google Search for specific search queries. Through Google Business Profile, we are also in a position to directly influence the presentation of SKP on Google.
When using Google Search and in particular when writing posts on our Business Profile, personal data is collected from you by Google.
More information on Google Business Profile and on how to prevent Google's use of your data is available at https://policies.google.com/privacy.
-
- Webshop
When you order products via our webshop, we may process your personal data in particular for the following purposes:
- to process your order (including invoicing and payment processing);
- to process returns and defects;
- for statistical analysis;
- to manage and promote our webshop;
- to report on our events (e.g. in the form of texts, photographs, videos and voice recordings);
- to market other services, offers and products of ours;
- to use for testimonials (giving reviews for a service, product or offer from us).
When processing your personal data for the aforementioned purposes, we rely on the following legal bases in addition to those mentioned in section 3.1, depending on the situation:
- The processing of personal data is necessary for the fulfilment of a contract with you;
- We have a legitimate interest in processing the personal data. Our legitimate interests consist in particular of evaluating, managing, improving and advertising our webshop.
- Newsletter
When you subscribe to our newsletter, your email address and other contact details are used to send you the newsletter. By subscribing to our newsletter, you consent to the associated processing of your personal data. Your full name and email address are required for sending the newsletter, and are stored after your registration. The legal basis for the processing of your data in connection with our newsletter is your consent to the sending of the newsletter. You can withdraw this consent and unsubscribe from the newsletter at any time. Your revocation is effected by clicking on the link provided in each newsletter email, by sending an email to digital@pestalozzi.ch or by sending a message to the contact details provided in the imprint.
SKP distributes its newsletter using Mailchimp, a newsletter tool from the third-party provider The Rocket Science Group LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta GA-30308, USA (hereinafter referred to as "Mailchimp"). The data transmitted when registering for the newsletter is stored on Mailchimp's servers in the USA. More information on data processing by Mailchimp is available in their respective privacy policy: https://mailchimp.com/de/legal/.
-
- Applications
You are welcome to submit your application for a position with us by post or via the email address provided on our website. The application documents and all personal data disclosed to us in this way is treated as strictly confidential, is not disclosed to any third party and is only processed for the purpose of processing your application for employment with us. Unless you agree otherwise, your application file is either returned to you or deleted/destroyed after the application process is completed, provided it is not subject to a legal obligation of retention. The legal basis for processing your data is your consent, the fulfilment of the contract with you and our legitimate interests.
4. Disclosure of personal data to recipients and abroad
4.1 Disclosure of personal data to recipients
In addition to the data transfers to recipients expressly mentioned in this privacy policy, we may disclose personal data to the following categories of recipients, where permitted:
- Service providers to whom we have outsourced certain services (e.g. IT and hosting providers, photographers, payment service providers, banks, insurance companies, etc.);
- Retailers, suppliers, subcontractors and other business partners;
- Accommodation and transport service managers;
- Domestic and foreign authorities, official agencies or courts;
- Partners of ours for the organisation and implementation of projects;
- Health professionals (e.g. doctors, paramedics);
- Third parties who collect data about you via websites;
- Consulting service providers, e.g. tax advisors, lawyers, and other authorised representatives;
- Insurance providers, social security services;
- Credit bureaus, which store this data for information on creditworthiness;
- Prospective purchasers or investors in the event of restructuring or other corporate activity;
- Auditors, supervisory bodies;
- Parties involved in potential or actual legal proceedings or litigation;
- The general public, including visitors to our website and social media.
4.2 Disclosure of personal data abroad
In principle, we process your personal data in Switzerland. However it is possible that in certain cases (e.g. for our projects abroad, when we use certain service providers) your personal data may also be transferred abroad, primarily to the member states of the European Union and EFTA, but also in some cases to England and the USA, and under some circumstances to other countries worldwide.
If we transfer data to a country without adequate legal data protection, we ensure an adequate level of protection as is required by law, through the use of appropriate contracts (namely on the basis of the standard contractual clauses of the European Commission) or rely on the legal exceptions of consent, the performance of the contract, the establishment, exercise or enforcement of legal claims, overriding public interests, published personal data, or when it is necessary to protect the integrity of the data subjects.
We process and store your personal data only for as long as is necessary in accordance with the processing purpose in question or if there is another legal basis (e.g. statutory retention periods) for doing so. Personal data that we hold on the basis of a contractual relationship with you will be retained for at least as long as the contractual relationship exists and the statutory limitation periods for possible claims by us are running or contractual retention obligations exist. As soon as your personal data is no longer required for the aforementioned purposes, it is in principle and as far as possible either archived, deleted or rendered anonymous.
You are entitled to information, rectification, deletion, the right to restrict data processing, as well as the right to object to our data processing and to surrender certain personal data for the purpose of transfer to another body (so-called data portability) within the scope of the data protection law applicable to you and to the extent provided for within such law. Please note, however, that we reserve the right to assert the restrictions provided for by law on our part, for example if we are obliged to retain or process certain data, have an overriding interest in doing so (insofar as we are entitled to rely on this) or require it for the assertion of claims. Should there be any costs incurred to you, we will inform you in advance.
Where data processing is based on your consent, you are entitled to revoke this at any time with future, following your initial consent. However this has no effect on the lawfulness of the processing performed on the basis of the consent up to the time of revocation.
The exercise of such rights usually requires that you clearly prove your identity (e.g. by means of a copy of your identity card where your identity is otherwise not clear or not possible to verify). Should you wish to exercise your rights, you can contact us at the address provided in section 1 of this privacy policy.
In addition, every data subject is entitled to assert their claims in court or to lodge a complaint with the relevant data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
- Data security
We undertake technical and organisational measures to protect your personal data from unauthorised access, misuse, loss and destruction. In particular, we use firewalls, have authorisation concepts in place, conduct regular IT security audits and have implemented other protective measures to ensure the most complete protection of personal data possible.
- Changes to this privacy policy
We expressly reserve the right to change this privacy policy at any time. Should such adaptations be made, we will immediately publish the adapted privacy policy on our website. The valid privacy policy is in each case is the one published on our website.
August 2023