Privacy Policy

Compliance with the currently applicable data protection regulations is important to us. We adhere to the provisions of Swiss data protection legislation. This data protection declaration explains what personal data we collect on our website (and other websites operated by us) and how we handle it. Personal data is understood to be all information that relates to an identified or identifiable person.

1. Contact

SVEB is responsible under data protection law for the data processing described in this data protection declaration, unless otherwise communicated in individual cases. You can contact us for your data protection concerns and to exercise your rights as follows.

SVEB Schweizerischer Verband für Weiterbildung
Michelle Mathys
Hardstrasse 235
8005 Zürich
michelle.mathys@alice.ch

2. What data do we process?

We process different categories of data about you. The main categories are as follows

• Technical data: When you use our website, we collect the IP address of your terminal device and other technical data to ensure the functionality and security of these offerings. This data also includes logs recording the use of our systems. We generally retain technical data for 12 months. In order to ensure the functionality of these offers, we may also assign an individual code to you or your end device (e.g. in the form of a cookie, cf. 9.1). The technical data in itself does not allow any conclusions to be drawn about your identity. However, in the context of registrations, access controls or the processing of contracts, they can be linked to other data categories (and thus possibly to your person).
• Registration data: Registration data such as first name and surname as well as e-mail address are usually collected in the context of the use of products or services offered. They are provided by the user himself/herself. Registration data may be collected in the case of access controls to certain facilities. We generally retain registration data for 12 months after the end of the use of the service or the termination of the user account.
• Communication data: If you are in contact with us via the contact form, email, telephone, letter or other means of communication, we collect the data exchanged between you and us, including your contact details and the boundary data of the communication. We usually keep this data for 12 months from the last exchange with you. This period may be longer where this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons. Emails in personal mailboxes and written correspondence may generally be retained for at least 10 years.
• Master data: We use the term master data to refer to the basic data that we need, in addition to the contractual data (see below), to process our contractual and other business relationships or for marketing and advertising purposes, such as name, contact details and information about, for example, your role and function, your bank account(s), your date of birth, customer history, powers of attorney, signature authorisations and consent forms. We process your master data if you are a customer or other business contact or work for one (e.g. as a contact person of the business partner), or because we want to address you for our own purposes or the purposes of a contractual partner (e.g. as part of marketing and advertising, with invitations to events, with newsletters etc.). We receive master data from you yourself (e.g. when making a purchase or as part of a registration), from bodies for which you work or from third parties such as our contractual partners, associations and from publicly accessible sources such as public registers or the Internet (websites, social media, etc.). We generally keep this data for 10 years from the last exchange with you, but at least from the end of the contract. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons. For pure marketing and advertising contacts, the period is considerably shorter, no more than 2 years since the last contact.
• Contract data: This is data that accrues in connection with the conclusion or processing of a contract, e.g. information about contracts and the services to be provided or provided, as well as data from the run-up to the conclusion of a contract, the information required or used for processing and information about reactions. We generally collect this data from you, from contractual partners and from third parties involved in the processing of the contract, but also from third-party sources (e.g. providers of creditworthiness data) and from publicly accessible sources. We generally keep this data for 10 years from the last contractual activity, but at least from the end of the contract. This period may be longer if this is necessary for reasons of evidence or to comply with legal or contractual requirements or for technical reasons.
• Behavioural and preference data: Depending on our relationship with you, we try to get to know you and better tailor our products, services and offers to you. To do this, we collect and use data about your preferences. The data processed for this purpose is partly already known to us (e.g. when you use our services), or we receive this information from you when you provide it to us voluntarily. We anonymise or delete this data when it is no longer meaningful for the purposes pursued, which means 24 months for product and service preferences. This period may be longer if this is necessary for reasons of evidence or to comply with legal or contractual requirements or for technical reasons.

You disclose much of the data mentioned here yourself (e.g. via forms, in the context of communication with us, in connection with contracts, when using the website, etc.). You are not obliged to do so, subject to individual cases, e.g. in the context of binding protection concepts (legal obligations). If you wish to conclude contracts with us or claim services, you must also provide us with data, in particular master data, contract data and registration data, as part of your contractual obligation under the relevant contract. When using our website, the processing of technical data is unavoidable. If you wish to gain access to certain systems or buildings, you will need to provide us with registration data. However, in the case of behavioural and preference data, you generally have the option of objecting or not giving consent.

Insofar as this is not inadmissible, we also take data from publicly accessible sources (e.g. debt enforcement registers, land registers, commercial registers, the media or the Internet incl. social media) or receive data from authorities and other third parties (such as associations, contractual partners, Internet analysis services etc.).

3. For what purposes do we process your data?

We process your data primarily to fulfil our services, but also for purposes in which we have a legitimate interest corresponding to the purpose:

• Further development of our services, offers and websites
• Advertising and marketing (including the organisation of events), unless you have objected to the use of your data (if we send you advertising as an existing customer of ours, you can object to this at any time. In this case, we would put you on a blocking list against further advertising mailings).
• Market research to improve our services, operations and product development.
• security purposes and for access control on our websites
• Enforcement of legal claims and defence in connection with legal disputes and regulatory proceedings.
• As part of the membership process, your data will be retained for historical record keeping.

4. On what basis do we process your data?

Where we ask for your consent for certain processing (e.g. for marketing mailings and for advertising control and behavioural analysis on the website), we will inform you separately about the relevant purposes of the processing. You can revoke consents at any time with future effect by notifying us in writing (by post) or, where not otherwise stated or agreed, by email; you can find our contact details in chapter 1. In chapter “Use of the website” you can find out about online tracking. Where you have a user account, revocation or contacting us may also be possible via the relevant website or other service. Once we have received notification that you have withdrawn your consent, we will no longer process your data for the purposes to which you originally consented, unless we have another legal basis for doing so. The revocation of your consent will not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Where we do not ask you for your consent for processing, we base the processing of your personal data on the fact that the processing is necessary for the initiation or execution of a contract with you (or the entity you represent) or that we or third parties have a legitimate interest in doing so, so in particular in order to pursue the purposes and related objectives described above under chapter 3 and to be able to implement corresponding measures. Our legitimate interests also include compliance with legal regulations, insofar as this is not already recognised as a legal basis by the respective applicable data protection law (e.g. in the case of the GDPR, the law in the EEA and in Switzerland). However, this also includes the marketing of our products and services, the interest in better understanding our markets and in managing and further developing our company, including operations, safely and efficiently.

5. Who do we disclose your data to?

In connection with our contracts, the website, our services and products, our legal obligations or otherwise to protect our legitimate interests and the other purposes listed in Chapter 3, we also disclose your personal data to third parties, in particular to the following categories of recipients:

• Service providers: we work with service providers in Switzerland and abroad who process data about you on our behalf or in joint responsibility with us or receive data about you from us in their own responsibility. We work with external service providers (e.g. IT support service companies such as Microsoft, Mailchimp, Google Analytics). These recipients are based in Germany, but also in other countries within Europe as well as the USA. Data is transferred to countries with an adequate level of protection. If there is no adequate level of protection in a third country, we have concluded a contract with the respective contractual partner with so-called standard contractual clauses of the European Commission, so that an adequate level of protection is ensured.
• Authorities: We may pass on personal data to offices, courts and other authorities in Switzerland and abroad if we are legally obliged or entitled to do so or if this appears necessary to protect our interests. The authorities process data about you that they receive from us on their own responsibility.
• Other persons: This refers to other cases where the involvement of third parties arises from the purposes set out in Chapter 3, e.g. service recipients, media and associations in which we participate or if you are part of one of our publications.
• trusted third parties:
  • Printers
  • Third parties entrusted with the implementation or organisation of camps and events.
  • IT service providers and other order processors
  • our auditors

All these categories of recipients may in turn involve third parties, so that your data may also become accessible to them. We can restrict processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. authorities, banks, etc.).

6. How long do we process your data?

Your personal data will be processed and stored for as long as is necessary to fulfil our contractual obligations, legal requirements or the purposes pursued with the data processing. This includes the entire duration of the business relationship – from the initiation to the execution and termination of a contract. In addition, we take into account the requirements of statutory storage and documentation obligations. Personal data is retained for as long as claims can be made against our company. This is also done in accordance with legal obligations or legitimate business interests (for example, for verification and documentation purposes). As soon as your personal data is no longer required for the aforementioned purposes, it will be deleted or anonymised. For operational data (e.g. system logs, logs), shorter retention periods of a maximum of twelve months generally apply.

7. How do we protect your data?

We take technical and organisational measures to protect your personal data from unauthorised access and misuse. These measures include the implementation of instructions, training, IT and network security solutions, access and usage restrictions and controls.

8. What rights do you have?

To help you control the processing of your personal data, you also have the following rights in connection with our data processing, depending on the applicable data protection law:

• the right to request information from us as to whether and what data we are processing from you;
• the right to have us correct data if it is inaccurate;
• the right to request that we delete data;
• the right to request that we provide certain personal data in a commonly used electronic format or transfer it to another data controller;
• the right to withdraw consent where our processing is based on your consent;
• the right to obtain, on request, further information necessary to exercise these rights.

If you wish to exercise any of the above rights against us, please contact us in writing by email; you will find our contact details in Chapter 1. In order for us to be able to exclude abuse, we must identify you (e.g. with a copy of your ID card, unless otherwise possible). Please note that conditions, exceptions or restrictions apply to these rights under applicable data protection law (e.g. to protect third parties or trade secrets). We will inform you accordingly if necessary.

9. Use of the website

When you visit alice.ch, certain system administration, statistical, backup or tracking data is automatically stored either on our own servers or on servers of services and products that we use or have implemented. This data includes:

9.1 Cookies

We use cookies on our websites to identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you use when you visit our website. This allows us to recognise you when you return to this website, even if we do not know who you are. In addition to cookies that are only used during a session and deleted after your visit to the website (“session cookies”), cookies can also be used to store user settings and other information for a certain period of time (e.g. two years) (“permanent cookies”). However, you can set your browser to reject cookies, save them for one session only or otherwise delete them prematurely. Most browsers are preset to accept cookies. We use persistent cookies to help us better understand how you use our services and content and to make our website more user-friendly, effective and secure.

If you block cookies, certain functionalities (such as language selection, ordering processes) may not function optimally.

9.2 Google Analytics

Google Analytics: Google Ireland (based in Ireland) is the provider of the “Google Analytics” service and acts as our order processor. Google Ireland relies on Google LLC (based in the USA) as its order processor (both “Google”). Google uses performance cookies (see above) to track the behaviour of visitors to our website (duration, frequency of pages viewed, geographical origin of access, etc.) and compiles reports for us on the use of our website on this basis. We have configured the service in such a way that the IP addresses of visitors are shortened by Google in Europe before being forwarded to the USA and thus cannot be traced. We have switched off the “Data sharing” and “Signals” settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google can draw conclusions about the identity of visitors from this data for its own purposes, create personal profiles and link this data to the Google accounts of these individuals. If you agree to the use of Google Analytics, you explicitly agree to such processing, which also includes the transfer of personal data (in particular website and app usage data, device information and individual IDs) to the USA and other countries. Information on the data protection of Google Analytics can be found here [https://support.google.com/analytics/answer/6004245] and if you have a Google account, you can find further details on processing by Google here [https://policies.google.com/technologies/partner-sites?hl=de].

9.3 reCAPTCHA

We use ReCAPTCHA to prevent automated bots (programs) from acting on the website. It is a procedure that makes it possible to verify whether the user is actually human. For humans, the tasks are simple, but for computers they are difficult to solve.

9.4 Social media: X (formerly Twitter) and LinkedIn, Youtube and Google Maps

We use the “X” and “LinkedIn” channels as so-called “social media plug-ins”, each of which has its headquarters in the USA. We integrate the videos of the platform “YouTube” of the provider Google LLC with headquarters in the USA. We use the service “Google Maps” to enable you to calculate a route. The responsible party for the operation of this application is the external provider Google LLC, which is located in the USA.

Please note the respective valid data protection regulations of the provider.

9.5 Order forms on the website

You can order products and services via order forms on the website. For this purpose, we collect data that is absolutely necessary in connection with the conclusion of contracts or their processing (e.g. first name, last name, address, payment information, etc.). The collection of this contractual data serves to conclude and process the contractual relationship. This data is stored for a maximum of 10 years from the end of the contract processing.

10. Newsletter

It is possible to subscribe to free newsletters. To send the newsletter, we use the provider Mailchimp. Your email address, your name (if you have voluntarily given your name) and your click behaviour are stored by Mailchimp in the USA (for further details, please refer to Mailchimp’s privacy policy). Mailchimp is currently certified under the Privacy Shild.

11. Communication by e-mail

If you contact us by e-mail, we record your contact data such as first name, surname, e-mail address and/or telephone number, and employer if applicable, in a system provided for this purpose. We store this data for a specific purpose and adhere to the legally prescribed deletion periods and retention obligations. We collect and process this data for the purpose of communicating with you.

12. Registration for participation in an SVEB event

On our website, we offer users the opportunity to register for participation in SVEB events by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process:

• Name and name
• Address (street, postcode, city)
• Telephone number
• E-mail address

The following data is also stored at the time of registration:

• The user’s IP address and
• Date and time of registration

The user’s consent to the processing of this data is obtained as part of the registration process.

Registration serves to conclude a contract with the user for registration for an SVEB event, which is usually subject to a fee.

Registration of the user is therefore necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures.

As a user, you have the option of cancelling your registration at any time or having the data stored about you changed.

13. Can this data protection declaration be changed?

This privacy policy is not part of any contract with you. We may amend this Privacy Policy at any time. The version published on this website is the current version.