Overall responsibility, owner

Fondation ART-THERAPIE
Rue de Beaumont 11
CH-1206 Genève
info@arttherapie.org

In this privacy policy, we inform you about what personal and company data we collect and store from you when you use our website and how we use this data, as well as with whom we may share this data. Personal data is always processed in accordance with the applicable data protection regulations (nFADP and/or GDPR).

In addition, you will receive information on what rights you have vis-à-vis us with regard to the use of your data.

We take the protection of your personal data very seriously!

Scope

Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Swiss Confederation (Data Protection Act, nFADP), and the EU Data Protection Regulation (GDPR), every person has the right to protection of their privacy as well as protection against misuse of their personal data.

We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. This privacy statement is intended to inform the users of this website about the nature, scope and purpose of the collection and use of personal data by the Fondation ART-THERAPIE.

This website can generally be used without entering personal data. If we do, we process personal data in accordance with Swiss data protection law (nFADP) and the European Union’s General Data Protection Regulation (GDPR). We draw your attention expressly to the fact that data transmission on the Internet may be subject to security vulnerabilities. It is not possible to provide complete protection against access by third parties.

What personal data do we obtain?

We process personal data (data that directly or indirectly identifies natural persons) that we have received from you or involved third parties within the scope of the business relationship or that we collect ourselves. This includes in particular your name, address, e-mail address, telephone numbers (landline and/or mobile), as well as - if necessary - your account details and VAT charges.

Personal data also includes information about your use of our website. In this context, we collect information about your visits to our website. This is usually done through the use of log files and cookies. You can find more information about log files and cookies below.

For what purpose do we collect personal data?

We only use your personal data to provide the services you have requested.

How long is the personal data stored?

We process and store your personal data for as long as it is necessary for the fulfilment of our contractual and legal obligations or otherwise for the purposes pursued with the processing, as well as beyond that in accordance with the legal storage and documentation obligations.

To whom do we disclose personal data?

We do not disclose your personal data to third parties unless you have consented to the disclosure of data or we are entitled or obliged to disclose data due to legal provisions and/or official or court orders. In particular, this may involve the disclosure of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.

What rights do you have regarding your data?

You have the right to obtain information about the origin, recipient and purpose of your stored personal data free of charge at any time. It also gives you the right to request the correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time at the address given in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Right to object to the collection of data in specific cases and to direct marketing (Art. 21 GDPR)

If data processing is carried out on the basis of GDPR Art. 6 (1) letter e or f , you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (objection under Article 21(1) of the GDPR).

If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) of the GDPR).

Right of appeal to the competent supervisory authority

In the event of breaches of the nFADP or the GDPR, data subjects shall have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach. The right of appeal is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL and TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Handling contact details

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you have provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not share this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 letter a of the GDPR). You can revoke this consent at any time. All you need to do is send us an informal message by e-mail. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or if the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions – in particular retention periods – remain unaffected.

Enquiries by e-mail and telephone

If you contact us by e-mail or telephone, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We will not share this data without your consent.

This data is processed on the basis of Art. 6 Para. 1 letter b of the GDPR, insofar as your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) letter a of the GDPR) and/or on our legitimate interests (Art. 6 (1) letter f of the GDPR), as we have a legitimate interest in the effective processing of requests addressed to us.

The data you send us via contact enquiries will remain with us until you request us to delete it, revoke your consent to store it or if the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

Cookies

The internet pages in some cases use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are filed on your computer and stored by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

We use the consent tool "Real Cookie Banner" to manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used and the related consents. Details on how "Real Cookie Banner" works can be found at https://devowl.io/de/rcb/datenverarbeitung.

The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of the personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

Newsletter

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide us with for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

Social media plug-ins

We use social media plug-ins on our website. If you have a user account with one of these networks and are logged in there at the time the social plug-in is activated, the network can assign your visit to our website to your user account. If you wish to avoid this, please log out of the respective network before activating the social plug-in.

Data processing on our YouTube channel under shared responsibility

To ensure a functional view of the website, we rely on a separate YouTube channel ultimately operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google"). YouTube is a video platform where users can post videos and make them publicly available.

Below we describe how we process your personal data jointly with Google when operating the YouTube platform:

The subject of the joint responsibility is the provision of our YouTube channel. We process your personal data within our YouTube channel only to the extent necessary for the provision of the YouTube channel. In addition, we process personal data within the YouTube channel for the purpose of carrying out any communication processes with users and interested parties of our YouTube channel. In this case, your personal data is processed exclusively on the basis of your voluntary declaration of consent.

Supplementary information on the processing of your personal data by Google can be found here:
https://policies.google.com/privacy?hl=de&gl=de#infocollect

You can view the general terms of use of the YouTube service here:
https://www.youtube.com/t/terms
https://www.youtube.com/intl/de/howyoutubeworks/policies/community-guidelines/

We have no direct influence on the type and scope of the processing of your personal data by Google within the scope of our YouTube channel. By using the YouTube channel, your personal data will also be processed by Google and may be transferred to the United States, Ireland and any other country in which Google does business, regardless of your country of residence.

Server log files (access data)

This site is hosted by Cyon GmbH on servers in Basel (CH). We work closely with our hosting providers to protect the databases as far as possible from unauthorised access, loss, misuse or falsification. When you access our websites, the following data is stored in log files: IP address, date, time, browser request and general information transmitted about the operating system or browser. This usage data forms the basis for statistical, anonymous evaluations so that trends can be identified which we can use to improve our services accordingly.

The owner of this website has concluded a data processing agreement (DPA) with the hosting partner. This can be viewed on request.

Changes to our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Geneva, 01.09.2023