Privacy policy

Somaha Foundation privacy policy

With this pri­vacy policy, we inform about the pro­ces­sing of per­so­nal data in con­nec­tion with our acti­vi­ties and ope­ra­ti­ons inclu­ding our somaha-stiftung.ch web­site. We inform in par­ti­cu­lar about what, how, and where we pro­cess per­so­nal data. We also inform about the rights of per­sons whose data we pro­cess.

For indi­vi­dual or addi­tio­nal acti­vi­ties and ope­ra­ti­ons, fur­ther pri­vacy poli­cies or other infor­ma­tion on data pro­tec­tion may apply.

1. Contact Addresses

Somaha Foun­da­tion
Wein­berg­strasse 102
8006 Zurich
Switz­er­land

info@somaha-stiftung.ch

In indi­vi­dual cases, third par­ties may be respon­si­ble for pro­ces­sing per­so­nal data or there may be joint respon­si­bi­lity with third par­ties.

2. Terms and Legal Bases

2.1 Terms

Data Sub­ject: Natu­ral per­son whose per­so­nal data we pro­cess.

Per­so­nal Data: All infor­ma­tion that rela­tes to an iden­ti­fied or iden­ti­fia­ble natu­ral per­son.

Par­ti­cu­larly Sen­si­tive Per­so­nal Data: Data on trade union, poli­ti­cal, reli­gious or ideo­lo­gi­cal views and acti­vi­ties, data on health, inti­macy, or belon­ging to an eth­nic or racial group, gene­tic data, bio­me­tric data that uni­quely iden­tify a natu­ral per­son, data on cri­mi­nal and admi­nis­tra­tive sanc­tions or pro­se­cu­ti­ons, and data on mea­su­res of social assis­tance.

Pro­ces­sing: Any hand­ling of per­so­nal data, regard­less of the means and pro­ce­du­res used, such as query­ing, matching, adjus­ting, archi­ving, retai­ning, rea­ding, dis­clo­sing, obtai­ning, recor­ding, coll­ec­ting, dele­ting, dis­clo­sing, orga­ni­zing, sto­ring, alte­ring, dis­se­mi­na­ting, lin­king, des­troy­ing, and using per­so­nal data.

3. Nature, Scope, and Purpose of Processing Personal Data

We pro­cess the per­so­nal data that are neces­sary to per­ma­nently, huma­nely, safely, and relia­bly per­form our acti­vi­ties and ope­ra­ti­ons. The pro­ces­sed per­so­nal data may par­ti­cu­larly fall into the cate­go­ries of brow­ser and device data, con­tent data, com­mu­ni­ca­tion data, meta­data, usage data, mas­ter data inclu­ding inven­tory and cont­act data, loca­tion data, tran­sac­tion data, con­tract data, and pay­ment data.

We also pro­cess per­so­nal data that we receive from third par­ties, obtain from publicly acces­si­ble sources, or coll­ect in the course of our acti­vi­ties and ope­ra­ti­ons, pro­vi­ded such pro­ces­sing is legally per­mis­si­ble.

We pro­cess per­so­nal data, as neces­sary, with the con­sent of the data sub­jects. In many cases, we may pro­cess per­so­nal data wit­hout con­sent, for exam­ple, to ful­fill legal obli­ga­ti­ons or to pro­tect over­ri­ding inte­rests. We may also seek con­sent from data sub­jects even if their con­sent is not requi­red.

We pro­cess per­so­nal data for the dura­tion neces­sary for the respec­tive pur­pose. We anony­mize or delete per­so­nal data, in par­ti­cu­lar depen­ding on legal reten­tion and limi­ta­tion peri­ods.

4. Disclosure of Personal Data

We may dis­c­lose per­so­nal data to third par­ties, have them pro­ces­sed by third par­ties, or pro­cess them jointly with third par­ties. Such third par­ties are, in par­ti­cu­lar, spe­cia­li­zed pro­vi­ders whose ser­vices we use.

We may dis­c­lose per­so­nal data, for exam­ple, to banks and other finan­cial ser­vice pro­vi­ders, aut­ho­ri­ties, edu­ca­tio­nal and rese­arch insti­tu­ti­ons, advi­sors and lawy­ers, inte­rest groups, IT ser­vice pro­vi­ders, coope­ra­tion part­ners, cre­dit and eco­no­mic infor­ma­tion agen­cies, logi­stics and ship­ping com­pa­nies, mar­ke­ting and adver­ti­sing agen­cies, media, orga­niza­ti­ons and asso­cia­ti­ons, social insti­tu­ti­ons, tele­com­mu­ni­ca­ti­ons com­pa­nies, and insu­rance com­pa­nies.

5. Communication

We pro­cess per­so­nal data to be able to com­mu­ni­cate with third par­ties. In this con­text, we par­ti­cu­larly pro­cess data pro­vi­ded by a data sub­ject when cont­ac­ting us, for exam­ple by pos­tal mail or email. We may store such data in an address book or with com­pa­ra­ble tools.

Third par­ties who trans­mit data about other per­sons are requi­red to ensure data pro­tec­tion for such data sub­jects. This includes, among other things, ensu­ring the accu­racy of the trans­mit­ted per­so­nal data.

6. Applications

We pro­cess per­so­nal data about appli­cants to the ext­ent neces­sary to assess their sui­ta­bi­lity for an employ­ment rela­ti­onship or for the sub­se­quent exe­cu­tion of an employ­ment con­tract. The neces­sary per­so­nal data are deri­ved in par­ti­cu­lar from the reques­ted infor­ma­tion, for exam­ple in the con­text of a job adver­ti­se­ment. We may publish job adver­ti­se­ments with the help of sui­ta­ble third par­ties, for exam­ple in elec­tro­nic and print media or on job por­tals and job plat­forms.

We also pro­cess the per­so­nal data that appli­cants vol­un­t­a­rily pro­vide or publish, par­ti­cu­larly as part of cover let­ters, resu­mes, and other appli­ca­tion docu­ments as well as online pro­files.

We may enable appli­cants to store their infor­ma­tion in our talent pool to con­sider them for future job ope­nings. We may also use such infor­ma­tion to main­tain cont­act and inform about news. If we believe an appli­cant is sui­ta­ble for an open posi­tion based on the infor­ma­tion pro­vi­ded, we may inform the appli­cant accor­din­gly.

7. Data Security

We take appro­priate tech­ni­cal and orga­niza­tio­nal mea­su­res to ensure a level of data secu­rity appro­priate to the respec­tive risk. With our mea­su­res, we par­ti­cu­larly ensure the con­fi­den­tia­lity, avai­la­bi­lity, tracea­bi­lity, and inte­grity of the pro­ces­sed per­so­nal data, alt­hough abso­lute data secu­rity can­not be gua­ran­teed.

Access to our web­site and other online pre­sen­ces is pro­vi­ded using trans­port encryp­tion (SSL / TLS, par­ti­cu­larly with Hyper­text Trans­fer Pro­to­col Secure, abbre­via­ted HTTPS). Most brow­sers warn against visi­ting web­sites wit­hout trans­port encryp­tion.

Our digi­tal com­mu­ni­ca­tion is sub­ject – as basi­cally all digi­tal com­mu­ni­ca­tion – to mass sur­veil­lance wit­hout cause and sus­pi­cion by secu­rity aut­ho­ri­ties in Switz­er­land, the rest of Europe, the United Sta­tes of Ame­rica (USA), and other count­ries. We can­not directly influence the cor­re­spon­ding pro­ces­sing of per­so­nal data by intel­li­gence agen­cies, police depart­ments, and other secu­rity aut­ho­ri­ties. We also can­not rule out that a data sub­ject is spe­ci­fi­cally moni­to­red.

8. Personal Data Abroad

We pro­cess per­so­nal data basi­cally in Switz­er­land. Howe­ver, we may dis­c­lose or export per­so­nal data to other count­ries, par­ti­cu­larly to pro­cess them there or have them pro­ces­sed.

We may dis­c­lose per­so­nal data to all count­ries and ter­ri­to­ries on Earth, pro­vi­ded the local law ensu­res ade­quate data pro­tec­tion accor­ding to a decis­ion of the Swiss Fede­ral Coun­cil.

We may dis­c­lose per­so­nal data to count­ries whose law does not ensure ade­quate data pro­tec­tion, pro­vi­ded other reasons ensure appro­priate data pro­tec­tion, par­ti­cu­larly based on stan­dard data pro­tec­tion clau­ses or other sui­ta­ble gua­ran­tees. Excep­tio­nally, we may export per­so­nal data to count­ries wit­hout ade­quate or appro­priate data pro­tec­tion if the spe­ci­fic data pro­tec­tion requi­re­ments are met, such as the expli­cit con­sent of the data sub­jects or a direct con­nec­tion with the con­clu­sion or exe­cu­tion of a con­tract. We are happy to pro­vide data sub­jects with infor­ma­tion on any gua­ran­tees or deli­ver a copy of gua­ran­tees upon request.

9. Rights of Data Subjects

9.1 Data Protection Claims

We grant data sub­jects all claims in accordance with appli­ca­ble data pro­tec­tion law. Data sub­jects have, in par­ti­cu­lar, the fol­lo­wing rights:

  • Access: Data sub­jects can request infor­ma­tion on whe­ther we pro­cess per­so­nal data about them, and if so, what per­so­nal data is invol­ved. Data sub­jects also receive the infor­ma­tion neces­sary to assert their data pro­tec­tion claims and ensure trans­pa­rency. This includes the pro­ces­sed per­so­nal data as such, but also, among other things, infor­ma­tion on the pur­pose of pro­ces­sing, the dura­tion of reten­tion, any dis­clo­sure or export of data to other count­ries, and the ori­gin of the per­so­nal data.
  • Cor­rec­tion and Rest­ric­tion: Data sub­jects can have incor­rect per­so­nal data cor­rec­ted, incom­plete data com­ple­ted, and the pro­ces­sing of their data rest­ric­ted.
  • Dele­tion and Objec­tion: Data sub­jects can have per­so­nal data dele­ted (“right to be for­got­ten”) and object to the pro­ces­sing of their data with future effect.
  • Data Por­ta­bi­lity: Data sub­jects can request the release of per­so­nal data or the trans­fer of their data to ano­ther con­trol­ler.

We may defer, limit, or deny the exer­cise of data sub­jects’ rights to the ext­ent legally per­mis­si­ble. We may inform data sub­jects of any con­di­ti­ons to be met for the exer­cise of their data pro­tec­tion claims. For exam­ple, we may refuse to pro­vide infor­ma­tion in whole or in part by refer­ring to trade secrets or the pro­tec­tion of other per­sons. We may also refuse to delete per­so­nal data in whole or in part by refer­ring to legal reten­tion obli­ga­ti­ons.

We may excep­tio­nally pro­vide for costs for the exer­cise of rights. We inform data sub­jects in advance about any costs.

We are obli­ged to iden­tify data sub­jects who request infor­ma­tion or assert other rights with appro­priate mea­su­res. Data sub­jects are requi­red to coope­rate.

9.2 Legal Protection

Data sub­jects have the right to enforce their data pro­tec­tion claims through legal action or to lodge a com­plaint with a data pro­tec­tion super­vi­sory aut­ho­rity.

The data pro­tec­tion super­vi­sory aut­ho­rity for pri­vate con­trol­lers and fede­ral bodies in Switz­er­land is the Fede­ral Data Pro­tec­tion and Infor­ma­tion Com­mis­sio­ner (FDPIC).

10. Use of the Website

10.1 Cookies

We may use coo­kies. Coo­kies – our own coo­kies (first-party coo­kies) as well as coo­kies from third par­ties whose ser­vices we use (third-party coo­kies) – are data stored in the brow­ser. Such stored data does not neces­s­a­rily have to be tra­di­tio­nal coo­kies in text form.

Coo­kies can be stored in the brow­ser tem­po­r­a­rily as “ses­sion coo­kies” or for a cer­tain period as so-cal­led per­ma­nent coo­kies. “Ses­sion coo­kies” are auto­ma­ti­cally dele­ted when the brow­ser is clo­sed. Per­ma­nent coo­kies have a cer­tain sto­rage dura­tion. Coo­kies enable, in par­ti­cu­lar, reco­gni­zing a brow­ser on the next visit to our web­site and thus, for exam­ple, mea­su­ring the reach of our web­site. Per­ma­nent coo­kies can also be used for online mar­ke­ting, for exam­ple.

Coo­kies can be deac­ti­va­ted and dele­ted at any time in the brow­ser set­tings. Wit­hout coo­kies, our web­site may no lon­ger be fully available. We request – at least where and to the ext­ent neces­sary – active con­sent to the use of coo­kies.

10.2 Logging

We may log the fol­lo­wing data for each access to our web­site and our other online pre­sence, pro­vi­ded that such data is trans­mit­ted to our digi­tal infra­struc­ture: date and time inclu­ding time zone, IP address, access sta­tus (HTTP sta­tus code), ope­ra­ting sys­tem inclu­ding user inter­face and ver­sion, brow­ser inclu­ding lan­guage and ver­sion, acces­sed indi­vi­dual sub-page of our web­site inclu­ding the amount of data trans­mit­ted, last acces­sed web­site in the same brow­ser win­dow (refer­rer or refer­rer).

We log such data, which may also be per­so­nal data, in log files. The data is neces­sary to pro­vide our online pre­sence per­ma­nently, huma­nely, and relia­bly. The data is also neces­sary to ensure data secu­rity – also by third par­ties or with the help of third par­ties.

10.3 Counting Pixels

We may inte­grate coun­ting pixels into our online pre­sence. Coun­ting pixels are also known as web bea­cons. Coun­ting pixels – also from third par­ties whose ser­vices we use – are usually small, invi­si­ble images or Java­Script code that are auto­ma­ti­cally retrie­ved when acces­sing our online pre­sence. Coun­ting pixels can record at least the same data as log files.

11. Notifications and Communications

11.1 Success and Reach Measurement

Noti­fi­ca­ti­ons and com­mu­ni­ca­ti­ons may con­tain web links or coun­ting pixels that record whe­ther an indi­vi­dual mes­sage was ope­ned and which web links were cli­cked. Such web links and coun­ting pixels can also record the use of noti­fi­ca­ti­ons and com­mu­ni­ca­ti­ons in a per­so­na­li­zed man­ner. We need this sta­tis­ti­cal recor­ding of usage for suc­cess and reach mea­su­re­ment to be able to send noti­fi­ca­ti­ons and com­mu­ni­ca­ti­ons effec­tively and user-fri­endly, as well as per­ma­nently, secu­rely, and relia­bly, based on the needs and rea­ding habits of the reci­pi­ents.

11.2 Consent and Objection

You gene­rally have to con­sent to the use of your email address and other cont­act addres­ses unless the use is per­mis­si­ble for other legal reasons. For obtai­ning a dou­ble-con­firmed con­sent, we may use the “dou­ble opt-in” pro­ce­dure. In this case, you will receive a mes­sage with ins­truc­tions for dou­ble con­fir­ma­tion. We may log obtai­ned cons­ents inclu­ding IP address and timestamp for evi­dence and secu­rity reasons.

You can gene­rally object to recei­ving noti­fi­ca­ti­ons and com­mu­ni­ca­ti­ons, such as news­let­ters, at any time. By objec­ting, you can also object to the sta­tis­ti­cal recor­ding of usage for suc­cess and reach mea­su­re­ment. Excluded are neces­sary noti­fi­ca­ti­ons and com­mu­ni­ca­ti­ons in con­nec­tion with our acti­vi­ties and ope­ra­ti­ons.

11.3 Service Providers for Notifications and Communications

We send noti­fi­ca­ti­ons and com­mu­ni­ca­ti­ons with the help of spe­cia­li­zed ser­vice pro­vi­ders.

We use, in par­ti­cu­lar:

12. Social Media

We are pre­sent on social media plat­forms and other online plat­forms to com­mu­ni­cate with inte­res­ted per­sons and inform about our acti­vi­ties and ope­ra­ti­ons. In con­nec­tion with such plat­forms, per­so­nal data may also be pro­ces­sed out­side of Switz­er­land.

The gene­ral terms and con­di­ti­ons (GTC) and terms of use as well as pri­vacy poli­cies and other pro­vi­si­ons of the indi­vi­dual ope­ra­tors of such plat­forms apply. These pro­vi­si­ons par­ti­cu­larly inform about the rights of data sub­jects directly towards the respec­tive plat­form, such as the right to access.

13. Services of Third Parties

We use ser­vices from spe­cia­li­zed third par­ties to per­form our acti­vi­ties and ope­ra­ti­ons per­ma­nently, huma­nely, safely, and relia­bly. With such ser­vices, we can, among other things, embed func­tions and con­tent into our web­site. For such embed­ding, the ser­vices used must tech­ni­cally record at least tem­po­r­a­rily the IP addres­ses of users.

For neces­sary secu­rity-rela­ted, sta­tis­ti­cal, and tech­ni­cal pur­po­ses, third par­ties whose ser­vices we use may pro­cess data in con­nec­tion with our acti­vi­ties and ope­ra­ti­ons in an aggre­ga­ted, anony­mi­zed, or pseud­ony­mi­zed man­ner. This includes per­for­mance or usage data to pro­vide the respec­tive ser­vice.

Digital Infrastructure

We use ser­vices from spe­cia­li­zed third par­ties to obtain the neces­sary digi­tal infra­struc­ture in con­nec­tion with our acti­vi­ties and ope­ra­ti­ons. This includes, for exam­ple, hos­ting and sto­rage ser­vices from sel­ec­ted pro­vi­ders.

We use, in par­ti­cu­lar:

14. Final Provisions

We may amend and sup­ple­ment this pri­vacy policy at any time. We will inform about such amend­ments and sup­ple­ments in an appro­priate man­ner, par­ti­cu­larly by publi­shing the cur­rent pri­vacy policy on our web­site.