In this data protection declaration, we provide information on what personal data we process in connection with our activities and operations, including our website sairop.swiss. In particular, we provide information on why, how and where we process which personal data. We also provide information on the rights of persons whose data we process.
Further data protection declarations and other legal documents, such as general terms and conditions (GTCs), terms of use, or terms of participation, may apply to individual or additional activities and operations.
We are subject to Swiss data protection law and any applicable foreign data protection law, such as the European Union (EU) General Data Protection Regulation (GDPR) in particular. The European Commission acknowledges that Swiss data protection law ensures adequate data protection.
Responsibility for the processing of personal data:
Swiss Academy of Engineering Sciences SATW
St. Annagasse 18
8001 Zurich
Switzerland
In any individual cases where other controllers are responsible for the processing of personal data, we explicitly point this out.
Personal data is any information relating to an identified or identifiable individual. A data subject is a person whose personal data we process.
Processing includes any handling of personal data, regardless of the means or procedures used, such as querying, matching, adapting, archiving, filing, reading, disclosing, procuring, recording, collecting, deleting, revealing, sorting, organising, storing, modifying, disseminating, linking, destroying or using personal data.
The European Economic Area (EEA) comprises the member states of the European Union (EU), along with the Principality of Liechtenstein, Iceland and Norway. The General Data Protection Regulation (GDPR) describes the processing of personal data as the performing of operations on person-specific data.
We process personal data in accordance with Swiss data protection law, including the Federal Act on Data Protection (Data Protection Act, FADP) and the Data Protection Ordinance (DSV) in particular.
If (and to the extent that) the General Data Protection Regulation (GDPR) is applicable, we process personal data on at least one of the following legal bases:
We process the personal data that is necessary in order to be able to carry out our activities and operations sustainably in a user-friendly, secure and reliable manner. Such personal data can fall into the following categories in particular: inventory and contact data, browser and device data, content data, meta or secondary data and usage data, location data, sales data, or contract and payment data.
We process personal data for the duration that is necessary for the relevant purpose(s) or required by law. Personal data that no longer has to be processed is anonymised or deleted.
We may have personal data processed by third parties. We may process personal data jointly with third parties or transmit it to third parties. Such third parties include, in particular, specialised providers whose services we use. We also ensure data protection when such third parties are involved.
We only process personal data with the consent of the data subject, unless the processing is permitted for other legal reasons. Processing without consent may, for example, be permissible for fulfilment of a contract with the data subject and for corresponding pre-contractual measures in order to protect our overriding legitimate interests, due to the need for such processing being indicated by the circumstances or after prior information.
In this context, we process, in particular, information that a data subject voluntarily provides us with when contact is made (for example via letter, email, instant messaging, contact form, social media or telephone) or when registering for a user account. We may store such information, for instance in an address book, in a customer relationship management (CRM) system, or by using similar means. If we receive transmitted data about other persons, the transmitting persons are obliged to guarantee data protection vis-à-vis these persons and to ensure the accuracy of this personal data.
We also process personal data that we receive from third parties, obtain from publicly accessible sources, or collect while carrying out our activities and operations, if (and to the extent that) such processing is permitted for legal reasons.
We generally process personal data in Switzerland and the European Economic Area (EEA). However, we may also export or transfer personal data to other countries, particularly in order to process it there or have it processed there.
We may export personal data to all countries and territories on Earth or elsewhere in the universe, provided that the law there ensures adequate data protection as per the decree of the Swiss Federal Council and, if (and to the extent that) the General Data Protection Regulation (GDPR) is applicable, as per the decision of the European Commission.
We may transfer personal data to countries whose law does not ensure adequate data protection, provided that data protection is ensured for other reasons, in particular on the basis of standard data protection clauses or other appropriate guarantees. By way of exception, we may export personal data to countries without adequate or appropriate data protection if the special legal requirements pertaining to data protection are met, for example with the express consent of the data subjects, or if the export is directly related to arranging or fulfilling a contract. On request, we gladly provide data subjects with information about any guarantees or a copy of any guarantees.
We grant data subjects all their entitlements under applicable data protection law. In particular, data subjects have the following rights:
We may suspend, restrict or refuse the exercising of data subjects’ rights to the extent permitted by law. We can draw data subjects’ attention to any requirements that must be met in order to secure their entitlements under data protection law. For example, we may refuse to provide information, in whole or in part, citing trade secrets or the protection of other persons. We may also, for example, refuse to delete personal data, in whole or in part, citing statutory retention obligations.
We may, by way of exception, stipulate costs for exercising rights. We inform data subjects of any costs in advance.
We are obliged to take appropriate measures to identify data subjects who request information or assert other rights. Data subjects are obliged to cooperate.
Data subjects have the right to secure their entitlements under data protection law through legal channels or to lodge an objection with a competent data protection supervisory authority.
The data protection supervisory authority for private controllers and federal bodies in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
If (and to the extent that) the General Data Protection Regulation (GDPR) is applicable, data subjects have the right to lodge an objection with a competent European data protection supervisory authority.
We take suitable technical and organisational measures to ensure data security as appropriate for the respective risk. However, we cannot guarantee absolute data security.
Access to our website is provided via transport encryption (SSL/TLS, in particular with Hypertext Transfer Protocol Secure, HTTPS for short). Most browsers indicate transport encryption with a padlock in the address bar.
Our digital communication, like all digital communication in general, is subject to mass surveillance without cause or suspicion, as well as other monitoring by security authorities in Switzerland, the rest of Europe, the United States of America (USA) and other countries. We cannot directly influence the corresponding processing of personal data by secret services, police agencies or other security authorities.
We may use cookies. Cookies, be they our own (first-party cookies) or those of third parties whose services we use (third-party cookies), are blocks of data that are stored in the browser. Such stored data need not be limited to traditional cookies in text form.
Cookies can be stored in the browser temporarily as ‘session cookies’ or for a certain period of time, as so-called ‘persistent cookies’. Session cookies are automatically deleted when the browser is closed. Persistent cookies have a specific storage period. In particular, cookies make it possible to recognise a browser the next time it visits our website and thus, for example, to measure our website’s reach. However, persistent cookies can, for example, also be used for online marketing.
Cookies can be completely or partially deactivated or deleted in the browser settings at any time. Without cookies, the full scope of our website might no longer be available. We actively request explicit consent to the use of cookies, at least if (and to the extent that) this is necessary.
In the case of cookies used for measuring performance and reach, or for advertising, a general objection (‘opt-out’) is possible for numerous services via AdChoices (Digital Advertising Alliance of Canada), the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).
We may collect the following information each time our website is accessed, provided that this information is transmitted by your browser to our server infrastructure or can be determined by our web server: date and time (including time zone), Internet Protocol (IP) address, access status (HTTP status code), operating system (including user interface and version), browser (including language and version), individual subpage accessed on our website (including volume of transferred data), website last accessed in the same browser window (referer or referrer).
We store such information, which may also constitute personal data, in server log files. This information is needed in order to provide our website sustainably in a user-friendly and reliable manner, as well as to ensure data security and thus, in particular, the protection of personal data – also on the part of third parties or with the aid of third parties.
We may use tracking pixels on our website. Tracking pixels are also referred to as ‘web beacons’. Tracking pixels, including those from third parties whose services we use, are small, usually invisible images that are automatically downloaded upon a visit to our website. Tracking pixels can be used to collect the same information that is stored in server log files.
We send notifications and messages via email and other communication channels, such as instant messaging or SMS.
Notifications and messages may contain web links or tracking pixels that record whether an individual message has been opened and which web links have been clicked in that context. Such web links and tracking pixels may also record usage of notifications and messages on a person-specific basis. We need to record such usage statistics for measuring performance and reach, so that we can send notifications and messages based on the recipients’ needs and reading habits – effectively, sustainably, and in a user-friendly, secure and reliable manner.
Use of your email address and other contact addresses generally requires your express consent, unless such use is permitted for other legal reasons. For any consent, we use the ‘double opt-in’ procedure where possible, meaning that you receive an email with a web link, which has to be clicked by you as confirmation, so that no misuse by unauthorised third parties can take place. We may keep a record of such consents, including Internet Protocol (IP) address, date and time, as evidence and for security reasons.
In general, you can object to receiving notifications and messages, such as newsletters, at any time. With such an objection, you can simultaneously object to the recording of usage statistics for measuring performance and reach. We reserve the right to send necessary notifications and messages in connection with our activities and operations.
We send notifications and messages with the aid of specialised service providers.
We are present on social media platforms and other online platforms, so that we can communicate with interested persons, and provide information about our activities and operations. In connection with such platforms, personal data may also be processed outside of Switzerland and the European Economic Area (EEA).
For each such platform, the individual operators’ General Terms and Conditions (GTCs), terms of use, data protection declarations and other provisions apply. In particular, such provisions provide information on the rights of data subjects directly regarding the respective platform, which include, for example, the right to information.
For our social media presence on Facebook, including so-called ‘Page Insights’, we hold joint responsibility with Meta Platforms Ireland Limited (Ireland) – if (and to the extent that) the General Data Protection Regulation (GDPR) is applicable. Meta Platforms Ireland Limited is one of the Meta companies (including in the USA). Page Insights provide information about how visitors interact with our Facebook page. We use Page Insights so that we can run our social media presence on Facebook in an effective and user-friendly manner.
Further information on the type, scope and purpose of data processing, information on the rights of data subjects, and the contact details of Facebook and Facebook’s data protection officer can be found in Facebook’s privacy policy. We have accepted Facebook’s so-called ‘Controller Addendum’ and have thus agreed, in particular, that Facebook is responsible for ensuring the rights of data subjects. For the so-called ‘Page Insights’, the corresponding information can be found on the pages ‘information about Page Insights’ and ‘information about Page Insights data’.
We use services provided by specialised third parties, so that we can carry out our activities and operations sustainably in a user-friendly, secure and reliable manner. With such services, we can, among other things, embed functions and content in our website. In the context of such embedding, the utilised services record users’ Internet Protocol (IP) addresses, at least temporarily, for reasons of technical necessity.
In order to fulfil necessary security-related, statistical and technical purposes, third parties whose services we use may process data in connection with our activities and operations, in aggregated, anonymised or pseudonymised form. For example, this data can be the performance or usage data required in order to offer the respective service.
In particular, we use:
We use services provided by specialised third parties so that we can utilise necessary digital infrastructure in connection with our activities and operations. They include, for example, hosting and storage services from selected providers.
In particular, we use:
We use services from selected providers so that we can communicate better with third parties, such as potential and existing customers.
We use specialised audio and video conferencing services so that we can communicate online. For example, this enables us to hold virtual meetings or conduct online classes and webinars. For participation in audio and video conferences, the legal texts pertaining to the individual services, such as data protection declarations and terms of use, also apply.
We recommend that participants in audio or video conferences mute the microphone by default and either blur the background or insert a virtual background, depending on their current situation.
In particular, we use:
We use third-party services so that we can embed maps in our website.
In particular, we use:
We use services from specialised third parties to enable direct playback of digital audio and video content, such as music or podcasts.
In particular, we use:
We use third-party services so that we can embed selected fonts, icons, logos and symbols in our website.
In particular, we use:
We make use of the possibility to have targeted advertising for our activities and operations displayed by third parties, for instance on social media platforms and in search engines.
With such advertising, we particularly wish to reach persons who are already interested in our activities and operations, or who might be interested in them (remarketing and targeting). For this purpose, we may transmit corresponding (possibly also personal) information to third parties who enable such advertising. We may also determine whether our advertising is successful, meaning whether it results in visits to our website in particular (conversion tracking).
Third parties with whom we advertise and with whom you are registered as a user might be able to link your use of what we offer online to your profile with them.
In particular, we use:
We use services and programs to find out how what we offer online is being used. In this context, we can, for example, measure the performance and reach of our activities and operations, as well as the effectiveness of third-party links to our website. However, we can also, for example, test and compare how different versions of what we offer online, or parts thereof, are being used (‘A/B testing’ methodology). Based on the resulting measurements of performance and reach, we can, in particular, correct errors, enhance popular content or make improvements to what we offer online.
During the use of services and programs for measuring performance and reach, the Internet Protocol (IP) addresses of individual users have to be stored. IP addresses are generally shortened (‘IP masking’) in order to adhere to the principle of data minimisation via appropriate pseudonymisation and thus to improve the protection of users’ data.
During the use of services and programs for measuring performance and reach, cookies may be used and user profiles may be created. User profiles include, for example, the pages visited or content viewed on our website, information on the size of the screen or browser window and the (at least approximate) location. In general, user profiles are only created pseudonymously. We do not identify individual users via user profiles. Individual services provided by third parties with whom users are registered might be able to link usage of what we offer online to the user account or user profile pertaining to the respective service.
In particular, we use:
We compiled this data protection declaration using the tool Datenschutz-Generator provided by the firm Datenschutzpartner.
We may adjust or add to this data protection declaration at any time. We will provide information about such adjustments and additions in an appropriate form, in particular by publishing the respective current data protection declaration on our website.