Data Protection

How we use your data

  1. Controller and content of this privacy policy

We, the Implantat Stiftung Schweiz (Secretariat, c/o Bern Congress Organiser (BCO), Taubenstrasse 8, 3011 Bern, Switzerland) are the operator of the website www.implantatstiftung.ch and your contractual partner for services obtained from us. Unless otherwise stated, we are responsible for the data processing listed in this privacy policy.

Regarding data protection, we are primarily guided by the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (“FADP”), as well as the EU General Data Protection Regulation (“GDPR”), the provisions of which may be applicable in individual cases. To ensure you know which personal data we collect from you and for what purposes we use it, please take note of the following information.

  1. Contact person for data protection

If you have any questions regarding data protection or wish to exercise your rights, please contact our data protection contact person by sending an email to the following address: is@implantatstiftung.ch

Alternatively, you can contact us by mail at the following address:

Implantat Stiftung Schweiz
Secretariat
c/o Bern Congress Organiser (BCO)
Taubenstrasse 8
3011 Bern
Switzerland

 

  1. When visiting our website (logfile data)

When you visit our website, the servers of our hosting provider store every access in a protocol file (so-called logfile) for a maximum period of 12 months. The following data is collected and stored by us until automated deletion:

  • the IP address of the requesting computer
  • the date and time of access
  • the name and URL of the retrieved file
  • the website from which the access originated, including the search term used if applicable
  • the operating system of your computer and the browser you use (including type, version, and language setting)
  • device type in the case of access via mobile phones
  • the city or region from which the access originated, as well as
  • the name of your internet access provider

This data is processed for the purpose of enabling the use of our website, ensuring permanent system security and stability, and for error and performance analysis. It also allows us to optimize our website.

In the event of an attack on the website’s network infrastructure or in the event of suspicion of other unauthorized or abusive website use, the IP address and other data will be evaluated for clarification and defense and, if necessary, used within the framework of criminal proceedings for identification and for civil and criminal legal action against the users concerned.

Our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f GDPR lies in the purposes described above.

  1. Use of one of our contact options

If you contact us via our contact addresses and channels (e.g., by email or telephone), your personal data will be processed. The data you have provided to us will be processed, e.g., the name of your company, your name, your function, your email address or telephone number, and your request. In addition, the time the request was received is documented.

We process this data exclusively to answer your inquiry in the best possible way. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in answering your inquiry or, if your inquiry is aimed at the conclusion or execution of a contract, the performance of the contract within the meaning of Art. 6 para. 1 lit. b GDPR.

  1. Orders

You have the option to order publications or brochures. We process the following data, where mandatory fields are marked (e.g., with an asterisk):

  • Language
  • First name*
  • Last name*
  • Street and house number*
  • Postcode and city*
  • Email address

We use this data to receive and process your order. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in processing your order or, if your request is aimed at the conclusion or execution of a contract, the performance of the contract within the meaning of Art. 6 para. 1 lit. b GDPR.

  1. Use of your data for marketing purposes

6.1 Central data storage and analysis in the CRM system

If a clear assignment to your person is possible, we will store and link the data described in this privacy policy, i.e., in particular your personal details, your contacts, your contract data, and your surfing behavior on our website, in a central database.

This serves the efficient management of customer data and allows us to respond adequately to your concerns, and enables the efficient provision of the services you requested and the processing of the associated contracts.

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in the efficient management of customer data.

We use the software [Name] from [Company] ([Address], [Country]; [data protection guarantee if applicable]) for this purpose. The legal basis for this processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in the use of third-party services.

We evaluate this data to further develop our offers according to needs and to display and suggest the most relevant information and offers to you. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in the implementation of marketing measures.

  1. Cookies

Cookies are information files that your web browser stores on the hard drive or memory of your device when you visit our website. Cookies are assigned identification numbers through which your browser is identified and the information contained in the cookie can be read.

Among other things, cookies help to make your visit to our website easier, more pleasant, and more meaningful. We use cookies for various purposes that are technically necessary for the use of the website you desire. For example, cookies perform other technical functions required for the operation of the website, such as load balancing, i.e., distributing the performance load of the page across different web servers to relieve the servers. Finally, we also use cookies as part of the design and programming of our website, for example, to enable the uploading of scripts or codes.

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in providing a user-friendly and modern website.

Most internet browsers accept cookies automatically. Details on the services and data processing associated with individual cookies can be found in the following sections of this privacy policy.

You can configure your browser so that no cookies are stored on your device or a notice always appears when you receive a new cookie. On the following pages, you will find explanations on how to configure the processing of cookies for selected browsers.

Disabling cookies may mean that you cannot use all the functions of our website.

  1. Tracking, web analysis, and other tools

8.1 General information on tracking

For the purpose of demand-oriented design and continuous optimization of our website, we use the tools listed below. In this context, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website is usually transmitted to a server of the service provider together with the logfile data listed in Section 3, where it is stored and processed. Through the processing of the data, we receive the following information, among others:

  • navigation path that a visitor takes on the site (including content viewed and products selected or purchased)
  • duration of stay on the website or subpage
  • the subpage on which the website is exited
  • the country, region, or city from which access occurs
  • device (type, version, color depth, resolution, width and height of the browser window) and
  • returning or new visitor

On our behalf, the provider will use this information to evaluate the use of the website, to compile reports on website activity for us, and to provide other services related to website and internet use for the purposes of market research and the demand-oriented design of these websites.

The legal basis for these processing operations with the following tools is your consent within the meaning of Art. 6 para. 1 lit. a GDPR, unless otherwise stated. You can revoke your consent at any time or refuse processing by rejecting or switching off the relevant cookies in the settings of your web browser or by making use of the service-specific options described below.

For the further processing of data by the respective provider as the (sole) controller under data protection law, in particular any disclosure of this information to third parties such as authorities based on national legal regulations, please refer to the provider’s data protection information.

8.2 Google Analytics on www.implantatstiftung.ch

We use the web analysis service Google Analytics from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; EU standard contractual clauses) (“Google”). The data described in Section 10.1 regarding the use of the website can be transmitted to Google’s servers in the USA for the explained processing purposes. The IP address is shortened on this website before transmission within Switzerland, member states of the European Union, or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Users can prevent the collection of the data generated by the cookie and related to the website use by the user concerned (including the IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin.

Further information on data protection at Google can be found here.

  1. Retention periods

We store personal data only as long as is necessary to carry out the processing operations explained in this privacy policy within the scope of our legitimate interest.

In the case of contract data, storage is prescribed by statutory retention obligations. Requirements that oblige us to retain data arise from accounting regulations and tax law provisions.

According to these regulations, business communications, concluded contracts, and booking vouchers must be kept for up to 10 years. Data is deleted or anonymized as soon as there is no longer a retention obligation and no legitimate interest in retention.

  1. Data security

We use appropriate technical and organizational security measures to protect your personal data stored with us against loss and unlawful processing, in particular unauthorized access by third parties. Our employees and the service companies commissioned by us are obliged by us to maintain confidentiality and to observe data protection.

Furthermore, these persons are only granted access to personal data to the extent necessary to fulfill their tasks.

Our security measures are continuously adapted in line with technological developments.

However, the transmission of information via the internet and electronic means of communication always entails certain security risks, and we cannot assume an absolute guarantee for the security of information transmitted in this way.

  1. Your rights

Provided the legal requirements are met, you as a person affected by data processing have the following rights:

  • Right of access: You have the right to request access to your personal data stored by us at any time and free of charge if we process it.
  • Right to rectification: You have the right to have incorrect or incomplete personal data corrected and to be informed of the correction.
  • Right to erasure: You have the right to have your personal data deleted under certain circumstances.
  • Right to restriction of processing: You have the right to request that the processing of your personal data be restricted.
  • Right to data portability: You have the right to receive the personal data you have provided to us in a readable format free of charge.
  • Right to object: You can object to data processing at any time, in particular for data processing in connection with direct marketing (e.g., advertising emails).
  • Right to withdraw consent: You generally have the right to withdraw consent given at any time. However, processing activities based on your consent in the past do not become unlawful as a result of your withdrawal.
  • Right to lodge a complaint: You have the right to lodge a complaint with a competent supervisory authority, e.g., against the way your personal data is processed.

To exercise these rights, please use the contact details in Section 2.

Status: October 2023