Privacy Policy

3.1 Website Hosting (Firebase)

Our website is hosted by Google Firebase (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, represented in the EU by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

The following data is automatically collected when visiting our website:

• IP address (anonymized after 24 hours)
• Browser type and version
• Operating system used
• Referrer URL (previously visited page)
• Hostname of the accessing computer
• Time of server request
• Transfer protocol and version number

This data is processed based on Art. 6 Para. 1 lit. f GDPR (legitimate interest) to ensure the functionality and security of our website.

Data is automatically deleted after 30 days.

For more information, see Google's privacy policy: https://policies.google.com/privacy. Data is stored in Europe-West6 (Zurich).

3.2 Database (Firestore)

For storing user data, contact requests and newsletter subscriptions, we use Google Firestore, a NoSQL database service from Google LLC.

The following data is stored in our database:

• Contact form requests (name, email, phone, message)
• Newsletter subscriptions (email, name, preferences)
• Membership applications (personal data as per application form)
• User accounts (if registered)

Processing is based on Art. 6 Para. 1 lit. a GDPR (consent) for newsletters and Art. 6 Para. 1 lit. b GDPR (contract fulfillment) for memberships.

All data is transmitted and stored encrypted. Google Firestore meets GDPR requirements and has appropriate certifications.

Data is stored in data centers in the EU (Europe-West6, Zurich).

3.3 Server Log Files

To optimize and maintain our website and for troubleshooting, we log technical information that is automatically transmitted when accessing our website:

• IP address and operating system of your device
• Browser type, version, language
• Date and time of server request
• Accessed file
• The website from which access occurred (Referrer URL)
• The status code (e.g., 404)
• The transmission protocol used (e.g., HTTP/2)

This data is collected and stored by our hosting provider to optimize processes and procedures, particularly in connection with website usage and system security and stability.
This data is not combined with other data sources and is automatically deleted after 30 days at the latest.
The legal basis for this data processing is Art. 6 Para. 1 lit. f GDPR (legitimate interest).

3.4 Contact Form

When you use our contact form, your information is processed to handle the request and for follow-up questions. The following data is collected:

• First and last name (required field)
• Email address (required field)
• Phone number (optional)
• Message content (required field)

The data is used exclusively to process your request and is deleted after completion of processing or after 3 years. The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest for request processing).

3.5 Cookies

We use cookies on our website. Cookies are small text files stored on your device. We distinguish between necessary and optional cookies:

You can configure your browser to be informed about cookie placement and decide individually or prevent cookies generally.

Necessary cookies are stored based on Art. 6 Para. 1 lit. f GDPR. Optional cookies only with your consent according to Art. 6 Para. 1 lit. a GDPR.

Cookie settings in various browsers:

• Mozilla Firefox
• Internet Explorer
• Google Chrome
• Opera
• Safari

3.6 Registration/Membership

When registering or applying for membership, the following data is collected:

• First and last name
• Email address
• Postal address
• Phone number
• Additional information depending on membership type

The data is used for member management and communication. The legal basis is Art. 6 Para. 1 lit. b GDPR (contract fulfillment). Data is stored as long as the membership exists, plus 10 years for tax retention obligations.

3.7 Newsletter (Infomaniak)

For our newsletter, we use the services of Infomaniak Network SA (Av. de la Praille 26, 1227 Carouge, Switzerland). For newsletter registration, we collect:

• Email address (required field)
• First and last name (optional)
• Communication preferences

The legal basis is Art. 6 Para. 1 lit. a GDPR (consent). You can withdraw consent at any time.

Data is stored until consent is withdrawn.

Infomaniak privacy policy: https://www.infomaniak.com/en/legal/privacy-policy

3.8 Email Sending (Infomaniak)

For sending emails (confirmations, responses to contact requests), we use Infomaniak Network SA.

Processed data:

• Email addresses of senders and recipients
• Email content
• Metadata (sending time, delivery status)

All emails are transmitted encrypted (TLS 1.2/1.3). Infomaniak is a Swiss company and is subject to Swiss data protection law.

The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest for communication).

Emails are automatically deleted from servers after 30 days.

4.1 Google Analytics 4

We use Google Analytics 4 from Google LLC to analyze user behavior on our website.

Processed data:

• Anonymized IP addresses
• Page views and dwell time
• Device information (screen resolution, device type)
• Approximate geographic origin (country/region)
• Referrer information

This data helps us improve the website and optimize content.

The legal basis is Art. 6 Para. 1 lit. a GDPR (consent via cookie banner).

You can disable Google Analytics at: https://tools.google.com/dlpage/gaoptout

Google privacy policy: https://policies.google.com/privacy

4.2 Google Maps API

To display interactive maps and location information, we use the Google Maps API.

When loading the map, the following data is transmitted to Google:

• IP address
• Displayed map areas
• Zoom level and interactions
• Browser and device information

The data is used by Google to provide the map service and improve their services.

The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest for location display).

You can prevent Google Maps loading through appropriate browser settings.

Google Maps privacy policy: https://policies.google.com/privacy

4.3 Google Fonts

For uniform display, we use Google Fonts. These are stored locally on our server, so no connection to Google is established.

No personal data is transmitted to Google.

4.4 External Links

Our website contains links to external third-party websites. When you click on these links, you leave our website.

We have no control over the content and privacy practices of these external websites and assume no responsibility for their handling of your personal data.

We recommend that you read the privacy policies of the external websites you visit, as these may differ from our privacy policies.

This privacy policy applies exclusively to data collected through our website www.amyloidose-schweiz.ch.

4.5 YouTube Videos

Our website contains embedded YouTube videos or links to YouTube videos. YouTube is operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

When loading or playing YouTube videos, the following data is transmitted to Google:

• IP address
• Browser and device information
• Visited page URL
• Time of access
• YouTube cookie data (if present)
• Interactions with the video (play, pause, etc.)

YouTube uses this data to provide the video service, improve user experience, and for analytics purposes.

The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest for providing multimedia content).

We use YouTube's enhanced privacy mode (youtube-nocookie.com) when possible to reduce data transmission.

You can prevent YouTube videos from loading through appropriate browser settings or add-ons.

YouTube/Google privacy policy: https://policies.google.com/privacy