Your Data

Pri­va­cy Poli­cy for lupus-suisse.ch

In this pri­va­cy poli­cy, we, Lupus suis­se (her­ein­af­ter we), explain how we coll­ect and pro­cess per­so­nal data on the web­site lupus-suisse.ch. Per­so­nal data refers to any infor­ma­ti­on rela­ting to an iden­ti­fi­ed or iden­ti­fia­ble person. 

This pri­va­cy poli­cy is desi­gned to meet the requi­re­ments of the Swiss Data Pro­tec­tion Act (“DSG”). Howe­ver, whe­ther and to what ext­ent the­se laws app­ly depends on the indi­vi­du­al case. 

Respon­si­bi­li­ty We are respon­si­ble for the data pro­ces­sing descri­bed here, unless other­wi­se sta­ted in indi­vi­du­al cases. If you have any data pro­tec­tion con­cerns, you can cont­act us at the fol­lo­wing address: 

Respon­si­ble par­ty:
Mar­tin Bien­lein, Pre­si­dent

Address:
Josef­stras­se 92
8005 Zurich
Tel.: +41 44 487 60 67
Email: info@lupus-suisse.ch

Coll­ec­tion and Processing

Coll­ec­tion and Pro­ces­sing of Per­so­nal Data

We pri­ma­ri­ly pro­cess per­so­nal data that we coll­ect in the cour­se of our acti­vi­ties from mem­bers, donors, spon­sors, rela­ted orga­nizati­ons, busi­ness part­ners, self-help groups and indi­vi­du­als inte­re­sted in self-help, or that we coll­ect from users when ope­ra­ting our web­site. This may include in particular: 

  • Per­so­nal information
  • Cont­act infor­ma­ti­on and location
  • Regi­stra­ti­on details
  • User infor­ma­ti­on and usa­ge data
  • Payment data
  • Recruit­ment details
  • Cus­to­mer inquiries

We gene­ral­ly pro­cess per­so­nal data only in accordance with the data pro­tec­tion laws appli­ca­ble to us or if con­sent has been given by the per­son con­cer­ned or if the­re is ano­ther legal basis. Pro­ces­sing is car­ri­ed out to the ext­ent neces­sa­ry to ful­fill the respec­ti­ve pur­po­se. The pro­ces­sing of data inclu­des in par­ti­cu­lar the coll­ec­tion, sto­rage, use, modi­fi­ca­ti­on, trans­mis­si­on, archi­ving and des­truc­tion of coll­ec­ted per­so­nal data. 

In addi­ti­on to the data you pro­vi­de to us direct­ly, the cate­go­ries of per­so­nal data include in par­ti­cu­lar your boo­ked tre­at­ments and other data in con­nec­tion with the use of the web­site (e.g., IP address, MAC address of the smart­phone or com­pu­ter, infor­ma­ti­on about your device and set­tings, coo­kies, date and time of visit, pages and con­tent acces­sed, func­tions used, refer­ring web­site, loca­ti­on information).

Pur­po­ses of Data Processing

We use the per­so­nal data we coll­ect pri­ma­ri­ly to pro­vi­de infor­ma­ti­on about self-help in Switz­er­land and to recei­ve dona­ti­ons, to faci­li­ta­te self-help groups, and to purcha­se pro­ducts and ser­vices from our sup­pliers and sub­con­trac­tors, as well as to com­ply with our legal obli­ga­ti­ons at home and abroad.

In addi­ti­on, we pro­cess per­so­nal data from you, to the ext­ent per­mit­ted and dee­med appro­pria­te, for the fol­lo­wing pur­po­ses in which we (and some­ti­mes third par­ties) have a legi­ti­ma­te inte­rest cor­re­spon­ding to the purpose:

  • Pro­vi­si­on of our web­site and other platforms
  • Offe­ring and fur­ther deve­lo­p­ment of our ser­vices and websites
  • Review and opti­mizati­on of pro­ce­du­res for needs ana­ly­sis for the pur­po­se of direct cus­to­mer cont­act and coll­ec­tion of per­so­nal data from publicly acces­si­ble sources for the pur­po­se of cus­to­mer acquisition;
  • Adver­ti­sing and marketing
  • Needs and opi­ni­on rese­arch, media monitoring;
  • Asser­ti­on of legal claims and defen­se in con­nec­tion with legal dis­pu­tes and offi­ci­al proceedings
  • Pre­ven­ti­on and inve­sti­ga­ti­on of cri­mi­nal offen­ses and other mis­con­duct (e.g., con­duc­ting inter­nal inve­sti­ga­ti­ons, data ana­ly­sis for fraud prevention);
  • Ensu­ring our ope­ra­ti­ons, in par­ti­cu­lar our IT, our web­sites, apps and other platforms;

If you have given us con­sent to pro­cess your per­so­nal data for spe­ci­fic pur­po­ses (for exam­p­le, when you regi­ster to recei­ve news­let­ters or as a mem­ber), we pro­cess your per­so­nal data within the scope of and based on this con­sent, unless we have ano­ther legal basis and we requi­re one under the data pro­tec­tion legis­la­ti­on appli­ca­ble to us. Con­sent given may be revo­ked at any time for the future, but this has no effect on data pro­ces­sing that has alre­a­dy taken place. 

Data Pro­ces­sing by Third Parties

a) Dona­ti­ons

To recei­ve dona­ti­ons, we coll­ect your data via a web appli­ca­ti­on from Rai­se­Now AG, Hard­turm­stras­se 101, 8005 Zurich. For this pur­po­se, the per­so­nal data you enter is pro­ces­sed by Rai­se­Now AG, in par­ti­cu­lar by pro­ces­sing your payment data. Their pri­va­cy poli­cy can be found at the fol­lo­wing link: https://www.raisenow.com/de-ch/datenschutz. The dona­ti­on is recei­ved in trust by the asso­cia­ti­on Fair­Gi­ve, Hard­turm­stras­se 101, 8005 Zurich, and for­ward­ed direct­ly to lupus suis­se. Fur­ther infor­ma­ti­on about the asso­cia­ti­on Fair­Gi­ve is available at https://fairgive.org/.

b) Coo­kies /​ Track­ing and Other Tech­no­lo­gies in Con­nec­tion with the Use of Our Website

We typi­cal­ly use “coo­kies” and simi­lar tech­no­lo­gies on our web­sites that can iden­ti­fy your brow­ser or device. A coo­kie is a small file that is sent to your com­pu­ter or auto­ma­ti­cal­ly stored by the web brow­ser used on your com­pu­ter or mobi­le device when you visit our website. 

When you visit this web­site again, we can reco­gni­ze you, even if we do not know who you are. In addi­ti­on to coo­kies that are only used during a ses­si­on and dele­ted after your web­site visit (“ses­si­on coo­kies”), coo­kies can also be used to store user set­tings and other infor­ma­ti­on for a cer­tain peri­od of time (e.g., two years) (“per­ma­nent cookies”). 

Howe­ver, you can set your brow­ser to reject coo­kies, store them only for one ses­si­on, or dele­te them pre­ma­tu­re­ly. Most brow­sers are pre­set to accept cookies.

We use per­ma­nent coo­kies so that you can save user set­tings (e.g., lan­guage, auto-log­in), so that we can bet­ter under­stand how you use our ser­vices and con­tent, and so that we can show you cus­to­mi­zed offers and adver­ti­sing (which can also hap­pen on web­sites of other com­pa­nies; howe­ver, they do not learn from us who you are, if we even know that our­sel­ves, becau­se they only see that the same user who was on a cer­tain page with us is on their web­site). Some coo­kies are set by us, some also by con­trac­tu­al part­ners with whom we work. If you block coo­kies, cer­tain func­tion­a­li­ties may no lon­ger work. 

We par­ti­al­ly incor­po­ra­te visi­ble and invi­si­ble image ele­ments in our news­let­ters, to the ext­ent per­mit­ted, through the retrie­val of which from our ser­vers we can deter­mi­ne whe­ther and when you ope­ned the email, so that we can also mea­su­re and bet­ter under­stand how you use our ser­vices and tail­or them to you. You can block this in your email pro­gram; most are pre­set to do so. 

By using our web­site and con­sen­ting to recei­ve news­let­ters and other mar­ke­ting emails, you agree to the use of the­se tech­no­lo­gies. If you do not want this, you must con­fi­gu­re your brow­ser or email pro­gram accordingly.

We use Goog­le Ana­ly­tics or com­pa­ra­ble ser­vices on our web­sites, for exam­p­le. This is a ser­vice pro­vi­ded by third par­ties who may be loca­ted in any coun­try in the world. 

Spe­ci­fi­cal­ly, we use the fol­lo­wing coo­kie and track­ing tools:

Goog­le Ana­ly­tics and Goog­le Search Engi­ne: This allo­ws us to mea­su­re and eva­lua­te the use of the web­site (non-per­so­nal­ly). Per­ma­nent coo­kies from Goog­le LLC or Alpha­bet Inc. are also used for this pur­po­se, which are set by the ser­vice pro­vi­der Goog­le. By set­ting the­se coo­kies, we can spe­ci­fi­cal­ly pro­vi­de our web­site users with adver­ti­sing through Goog­le on Goog­le plat­forms such as You­Tube or the Goog­le Search Engi­ne if they exhi­bit cer­tain user beha­vi­or. Goog­le Ire­land reli­es on Goog­le LLC, based in the USA, as a pro­ces­sor. The­se are sub­si­dia­ries of Alpha­bet Inc., also based in the USA. We have con­fi­gu­red the ser­vice so that the IP addres­ses of visi­tors are shor­ten­ed by Goog­le in Euro­pe befo­re being for­ward­ed to the USA and the­r­e­fo­re can­not be tra­ced back. We have dis­ab­led the “Data Sha­ring” and “Signals” set­tings. Alt­hough we can assu­me that the infor­ma­ti­on we share with Goog­le is not per­so­nal data for Goog­le, it is pos­si­ble that Goog­le can draw con­clu­si­ons about the iden­ti­ty of visi­tors from this data for its own pur­po­ses, crea­te per­so­nal pro­files, and link this data with the Goog­le accounts of the­se indi­vi­du­als. If you have regi­stered with the ser­vice pro­vi­der yours­elf, the ser­vice pro­vi­der also knows you. The pro­ces­sing of your per­so­nal data by the ser­vice pro­vi­der is then car­ri­ed out under the respon­si­bi­li­ty of the ser­vice pro­vi­der in accordance with its pri­va­cy poli­cy. The ser­vice pro­vi­der only tells us how our respec­ti­ve web­site is used (no infor­ma­ti­on about you personally).

We also use so-cal­led plug-ins from social net­works such as Face­book, Twit­ter, Sound­cloud, You­Tube or Insta­gram on our web­sites. This is visi­ble to you (typi­cal­ly via cor­re­spon­ding sym­bols). We have con­fi­gu­red the­se ele­ments so that they are dis­ab­led by default. If you acti­va­te them (by clicking on them), the ope­ra­tors of the respec­ti­ve social net­works can regi­ster. You can then use our web­site whe­re­ver you are loca­ted. The ope­ra­tors of the­se social net­works can use this infor­ma­ti­on for their pur­po­ses. The pro­ces­sing of your per­so­nal data is then car­ri­ed out under the respon­si­bi­li­ty of the­se ope­ra­tors in accordance with their pri­va­cy poli­ci­es. We do not recei­ve any infor­ma­ti­on about you from them. 

Data Dis­clo­sure and Data Trans­fer Abroad

In the con­text of our admi­ni­stra­ti­ve acti­vi­ties and/​or to ful­fill the pro­ces­sing pur­po­se, we also dis­c­lo­se infor­ma­ti­on to third par­ties to the ext­ent per­mit­ted and dee­med appro­pria­te. This par­ti­cu­lar­ly con­cerns the fol­lo­wing entities: 

  • Host­point AG (ser­ver loca­ti­on Switz­er­land; email hosting), Neue Jonastras­se 60, 8640
  • Rheu­ma­li­ga Schweiz, Josef­stras­se 92, 8050 Zurich, www.rheumaliga-schweiz.ch (admi­ni­stra­ti­ve work)
  • Web tools such as Goog­le, etc. (see abo­ve under Coo­kies /​ Track­ing)

If a reci­pi­ent is loca­ted in a coun­try wit­hout ade­qua­te legal data pro­tec­tion, we con­trac­tual­ly obli­ge the reci­pi­ent to com­ply with appli­ca­ble data pro­tec­tion, unless they are alre­a­dy sub­ject to a legal­ly reco­gni­zed frame­work for ensu­ring data pro­tec­tion and we can­not rely on an excep­ti­on pro­vi­si­on. An excep­ti­on may app­ly in par­ti­cu­lar to legal pro­ce­e­dings abroad, but also in cases of over­ri­ding public inte­rests or if con­tract per­for­mance requi­res such dis­clo­sure, if you have con­sen­ted, or if it con­cerns data you have made publicly acces­si­ble and who­se pro­ces­sing you have not objec­ted to. 

Many count­ries out­side Switz­er­land or the EU and EEA curr­ent­ly do not have laws that gua­ran­tee an ade­qua­te level of data pro­tec­tion from the per­spec­ti­ve of the DSG. The con­trac­tu­al arran­ge­ments men­tio­ned can par­ti­al­ly com­pen­sa­te for this wea­k­er or absent legal pro­tec­tion. Howe­ver, con­trac­tu­al arran­ge­ments can­not eli­mi­na­te all risks (par­ti­cu­lar­ly from govern­ment access abroad). You should be awa­re of the­se resi­du­al risks, even if the risk in indi­vi­du­al cases may be low. 

Data Secu­ri­ty We take appro­pria­te tech­ni­cal and orga­nizatio­nal secu­ri­ty mea­su­res to pro­tect your per­so­nal data from unaut­ho­ri­zed access and misu­se. Howe­ver, we can only secu­re are­as that we con­trol. We also requi­re our pro­ces­sors to take appro­pria­te secu­ri­ty mea­su­res. Howe­ver, secu­ri­ty risks can­not be com­ple­te­ly eli­mi­na­ted in gene­ral; resi­du­al risks are unavoidable. 

Pro­fil­ing

We par­ti­al­ly pro­cess your per­so­nal data auto­ma­ti­cal­ly with the aim of eva­lua­ting cer­tain per­so­nal aspects (pro­fil­ing). We use eva­lua­ti­on tools that enable us to com­mu­ni­ca­te accor­ding to needs. This is done via the third-par­ty pro­vi­der Goog­le as part of web ana­ly­sis, wit­hout us being able to see which spe­ci­fic indi­vi­du­als are invol­ved (see abo­ve Coo­kies /​ Track­ing).

Other­wi­se, we gene­ral­ly do not use ful­ly auto­ma­ted decis­i­on-making. Should we use such pro­ce­du­res in indi­vi­du­al cases, we will inform you sepa­ra­te­ly about this, pro­vi­ded this is requi­red by law, and inform you about the rela­ted rights. 

Rights of the Data Sub­ject You have the right, within the frame­work of the data pro­tec­tion law appli­ca­ble to you and to the ext­ent pro­vi­ded the­r­ein, to access, rec­ti­fi­ca­ti­on, dele­ti­on, the right to rest­ric­tion of data pro­ces­sing and other­wi­se to object to our data pro­ces­sing, in par­ti­cu­lar for fur­ther legi­ti­ma­te inte­rests in pro­ces­sing, as well as to the release of cer­tain per­so­nal data for the pur­po­se of trans­fer to ano­ther enti­ty (so-cal­led data por­ta­bi­li­ty). Plea­se note, howe­ver, that we reser­ve the right to assert the legal­ly pro­vi­ded rest­ric­tions on our part, for exam­p­le if we are obli­ged to retain or pro­cess cer­tain data, have an over­ri­ding inte­rest in doing so (to the ext­ent we may rely on this), or need it to assert claims. If costs are incur­red for you, we will inform you in advance. 

The exer­cise of such rights gene­ral­ly requi­res that you cle­ar­ly pro­ve your iden­ti­ty (e.g., by means of a copy of an iden­ti­ty docu­ment, whe­re your iden­ti­ty is other­wi­se not clear or can­not be veri­fi­ed). To assert your rights, you can cont­act us at the address given in Sec­tion 1. 

Each data sub­ject also has the right to enforce their claims in court or to file a com­plaint with the com­pe­tent data pro­tec­tion aut­ho­ri­ty. The com­pe­tent data pro­tec­tion aut­ho­ri­ty in Switz­er­land is the Fede­ral Data Pro­tec­tion and Infor­ma­ti­on Com­mis­sio­ner (http://www.edoeb.admin.ch).

Chan­ges We may adjust this pri­va­cy poli­cy at any time wit­hout pri­or noti­ce. The cur­rent ver­si­on published on our web­site applies. If the pri­va­cy poli­cy is part of an agree­ment with you, we will inform you of the chan­ge by email or in ano­ther appro­pria­te man­ner in the event of an update. 

Pri­va­cy Poli­cy as of: March 12, 2026