Your Data
Privacy Policy for lupus-suisse.ch
In this privacy policy, we, Lupus suisse (hereinafter we), explain how we collect and process personal data on the website lupus-suisse.ch. Personal data refers to any information relating to an identified or identifiable person.
This privacy policy is designed to meet the requirements of the Swiss Data Protection Act (“DSG”). However, whether and to what extent these laws apply depends on the individual case.
Responsibility We are responsible for the data processing described here, unless otherwise stated in individual cases. If you have any data protection concerns, you can contact us at the following address:
Responsible party:
Martin Bienlein, President
Address:
Josefstrasse 92
8005 Zurich
Tel.: +41 44 487 60 67
Email: info@lupus-suisse.ch
Collection and Processing
Collection and Processing of Personal Data
We primarily process personal data that we collect in the course of our activities from members, donors, sponsors, related organizations, business partners, self-help groups and individuals interested in self-help, or that we collect from users when operating our website. This may include in particular:
- Personal information
- Contact information and location
- Registration details
- User information and usage data
- Payment data
- Recruitment details
- Customer inquiries
We generally process personal data only in accordance with the data protection laws applicable to us or if consent has been given by the person concerned or if there is another legal basis. Processing is carried out to the extent necessary to fulfill the respective purpose. The processing of data includes in particular the collection, storage, use, modification, transmission, archiving and destruction of collected personal data.
In addition to the data you provide to us directly, the categories of personal data include in particular your booked treatments and other data in connection with the use of the website (e.g., IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of visit, pages and content accessed, functions used, referring website, location information).
Purposes of Data Processing
We use the personal data we collect primarily to provide information about self-help in Switzerland and to receive donations, to facilitate self-help groups, and to purchase products and services from our suppliers and subcontractors, as well as to comply with our legal obligations at home and abroad.
In addition, we process personal data from you, to the extent permitted and deemed appropriate, for the following purposes in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:
- Provision of our website and other platforms
- Offering and further development of our services and websites
- Review and optimization of procedures for needs analysis for the purpose of direct customer contact and collection of personal data from publicly accessible sources for the purpose of customer acquisition;
- Advertising and marketing
- Needs and opinion research, media monitoring;
- Assertion of legal claims and defense in connection with legal disputes and official proceedings
- Prevention and investigation of criminal offenses and other misconduct (e.g., conducting internal investigations, data analysis for fraud prevention);
- Ensuring our operations, in particular our IT, our websites, apps and other platforms;
If you have given us consent to process your personal data for specific purposes (for example, when you register to receive newsletters or as a member), we process your personal data within the scope of and based on this consent, unless we have another legal basis and we require one under the data protection legislation applicable to us. Consent given may be revoked at any time for the future, but this has no effect on data processing that has already taken place.
Data Processing by Third Parties
a) Donations
To receive donations, we collect your data via a web application from RaiseNow AG, Hardturmstrasse 101, 8005 Zurich. For this purpose, the personal data you enter is processed by RaiseNow AG, in particular by processing your payment data. Their privacy policy can be found at the following link: https://www.raisenow.com/de-ch/datenschutz. The donation is received in trust by the association FairGive, Hardturmstrasse 101, 8005 Zurich, and forwarded directly to lupus suisse. Further information about the association FairGive is available at https://fairgive.org/.
b) Cookies / Tracking and Other Technologies in Connection with the Use of Our Website
We typically use “cookies” and similar technologies on our websites that can identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored by the web browser used on your computer or mobile device when you visit our website.
When you visit this website again, we can recognize you, even if we do not know who you are. In addition to cookies that are only used during a session and deleted after your website visit (“session cookies”), cookies can also be used to store user settings and other information for a certain period of time (e.g., two years) (“permanent cookies”).
However, you can set your browser to reject cookies, store them only for one session, or delete them prematurely. Most browsers are preset to accept cookies.
We use permanent cookies so that you can save user settings (e.g., language, auto-login), so that we can better understand how you use our services and content, and so that we can show you customized offers and advertising (which can also happen on websites of other companies; however, they do not learn from us who you are, if we even know that ourselves, because they only see that the same user who was on a certain page with us is on their website). Some cookies are set by us, some also by contractual partners with whom we work. If you block cookies, certain functionalities may no longer work.
We partially incorporate visible and invisible image elements in our newsletters, to the extent permitted, through the retrieval of which from our servers we can determine whether and when you opened the email, so that we can also measure and better understand how you use our services and tailor them to you. You can block this in your email program; most are preset to do so.
By using our website and consenting to receive newsletters and other marketing emails, you agree to the use of these technologies. If you do not want this, you must configure your browser or email program accordingly.
We use Google Analytics or comparable services on our websites, for example. This is a service provided by third parties who may be located in any country in the world.
Specifically, we use the following cookie and tracking tools:
Google Analytics and Google Search Engine: This allows us to measure and evaluate the use of the website (non-personally). Permanent cookies from Google LLC or Alphabet Inc. are also used for this purpose, which are set by the service provider Google. By setting these cookies, we can specifically provide our website users with advertising through Google on Google platforms such as YouTube or the Google Search Engine if they exhibit certain user behavior. Google Ireland relies on Google LLC, based in the USA, as a processor. These are subsidiaries of Alphabet Inc., also based in the USA. We have configured the service so that the IP addresses of visitors are shortened by Google in Europe before being forwarded to the USA and therefore cannot be traced back. We have disabled the “Data Sharing” and “Signals” settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google can draw conclusions about the identity of visitors from this data for its own purposes, create personal profiles, and link this data with the Google accounts of these individuals. If you have registered with the service provider yourself, the service provider also knows you. The processing of your personal data by the service provider is then carried out under the responsibility of the service provider in accordance with its privacy policy. The service provider only tells us how our respective website is used (no information about you personally).
We also use so-called plug-ins from social networks such as Facebook, Twitter, Soundcloud, YouTube or Instagram on our websites. This is visible to you (typically via corresponding symbols). We have configured these elements so that they are disabled by default. If you activate them (by clicking on them), the operators of the respective social networks can register. You can then use our website wherever you are located. The operators of these social networks can use this information for their purposes. The processing of your personal data is then carried out under the responsibility of these operators in accordance with their privacy policies. We do not receive any information about you from them.
Data Disclosure and Data Transfer Abroad
In the context of our administrative activities and/or to fulfill the processing purpose, we also disclose information to third parties to the extent permitted and deemed appropriate. This particularly concerns the following entities:
- Hostpoint AG (server location Switzerland; email hosting), Neue Jonastrasse 60, 8640
- Rheumaliga Schweiz, Josefstrasse 92, 8050 Zurich, www.rheumaliga-schweiz.ch (administrative work)
- Web tools such as Google, etc. (see above under Cookies / Tracking)
If a recipient is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with applicable data protection, unless they are already subject to a legally recognized framework for ensuring data protection and we cannot rely on an exception provision. An exception may apply in particular to legal proceedings abroad, but also in cases of overriding public interests or if contract performance requires such disclosure, if you have consented, or if it concerns data you have made publicly accessible and whose processing you have not objected to.
Many countries outside Switzerland or the EU and EEA currently do not have laws that guarantee an adequate level of data protection from the perspective of the DSG. The contractual arrangements mentioned can partially compensate for this weaker or absent legal protection. However, contractual arrangements cannot eliminate all risks (particularly from government access abroad). You should be aware of these residual risks, even if the risk in individual cases may be low.
Data Security We take appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse. However, we can only secure areas that we control. We also require our processors to take appropriate security measures. However, security risks cannot be completely eliminated in general; residual risks are unavoidable.
Profiling
We partially process your personal data automatically with the aim of evaluating certain personal aspects (profiling). We use evaluation tools that enable us to communicate according to needs. This is done via the third-party provider Google as part of web analysis, without us being able to see which specific individuals are involved (see above Cookies / Tracking).
Otherwise, we generally do not use fully automated decision-making. Should we use such procedures in individual cases, we will inform you separately about this, provided this is required by law, and inform you about the related rights.
Rights of the Data Subject You have the right, within the framework of the data protection law applicable to you and to the extent provided therein, to access, rectification, deletion, the right to restriction of data processing and otherwise to object to our data processing, in particular for further legitimate interests in processing, as well as to the release of certain personal data for the purpose of transfer to another entity (so-called data portability). Please note, however, that we reserve the right to assert the legally provided restrictions on our part, for example if we are obliged to retain or process certain data, have an overriding interest in doing so (to the extent we may rely on this), or need it to assert claims. If costs are incurred for you, we will inform you in advance.
The exercise of such rights generally requires that you clearly prove your identity (e.g., by means of a copy of an identity document, where your identity is otherwise not clear or cannot be verified). To assert your rights, you can contact us at the address given in Section 1.
Each data subject also has the right to enforce their claims in court or to file a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
Changes We may adjust this privacy policy at any time without prior notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you of the change by email or in another appropriate manner in the event of an update.
Privacy Policy as of: March 12, 2026