--- title: "Privacy Policy | Amyloidose Schweiz" description: "Learn about our privacy policy and how we protect your personal data. Comprehensive information about data collection, processing and your rights." canonical_url: "https://www.amyloidose-schweiz.ch/en/datenschutz" locale: en meta: "og:description": "Learn about our privacy policy and how we protect your personal data. Comprehensive information about data collection, processing and your rights." "og:image": "https://www.amyloidose-schweiz.ch/og-image.png" "og:image:height": "630" "og:image:width": "1200" "og:title": "Privacy Policy" --- > Index of every page on this site: [llms.txt](https://www.amyloidose-schweiz.ch/llms.txt) # Privacy Policy ## 1 Privacy Policy This privacy policy informs you about the nature, scope and purpose of the collection and use of personal data on our website www.amyloidose-schweiz.ch (hereinafter "Website") by the Amyloidosis Switzerland Association (hereinafter "we" or "us") and provides information about your rights. These rights are governed by applicable data protection laws of Switzerland and the EU (GDPR). ## 2 Data Processing Controller The controller responsible for data processing on this website and contact person for privacy concerns is: amyloidose-schweiz.ch Verein Amyloidose Schweiz 6130 Willisau info@amyloidose-schweiz.ch ## 3 Data Collection on this Website ### 3.1 Website Hosting (Firebase) Our website is hosted by Google Firebase (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, represented in the EU by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). **The following data is automatically collected when visiting our website:** - IP address - Browser type and version - Operating system used - Referrer URL (previously visited page) - Time of server request - Transfer protocol and version number This data is processed based on Art. 6 Para. 1 lit. f GDPR (legitimate interest) to ensure the functionality and security of our website. Data is automatically deleted after 30 days. For more information, see Google's privacy policy: https://policies.google.com/privacy. The pages are delivered through Firebase Hosting's worldwide delivery network; the server function that generates the pages and receives the forms runs in Zurich (europe-west6). ### 3.2 Database (Firestore) We use Google Firestore, a NoSQL database service from Google LLC, to store contact requests, membership applications and copies of the emails our website sends. The newsletter mailing list is kept by Infomaniak (see 3.7); all we keep of it is the marker described below and the copies of the confirmation and welcome emails. **The following data is stored in our database:** - Contact form requests (name, email, phone, date of birth, message) - Membership applications (details as per the application form, see 3.6) - Copies of the emails our website sends (e.g. acknowledgements of receipt), for one year - For confirmed newsletter subscriptions only a technical marker: a non-reversible hash of your email address, the language and the time of confirmation (see 3.7) Processing is based on Art. 6 Para. 1 lit. b GDPR (contract fulfillment) for memberships and on Art. 6 Para. 1 lit. f GDPR (legitimate interest) for contact requests, email copies and the newsletter marker. All data is transmitted and stored encrypted. Google Firestore meets GDPR requirements and has appropriate certifications. Data is stored in data centers in Switzerland (Europe-West6, Zurich). ### 3.3 Server Log Files To optimize and maintain our website and for troubleshooting, we log technical information that is automatically transmitted when accessing our website: - IP address and operating system of your device - Browser type, version, language - Date and time of server request - Accessed file - The website from which access occurred (Referrer URL) - The status code (e.g., 404) - The transmission protocol used (e.g., HTTP/2) - When a page has a technical error, an error report from your browser (page path without search parameters, error text, location in the code) This data is collected and stored by our hosting provider to optimize processes and procedures, particularly in connection with website usage and system security and stability. This data is not combined with other data sources and is automatically deleted after 30 days at the latest. The legal basis for this data processing is Art. 6 Para. 1 lit. f GDPR (legitimate interest). ### 3.4 Contact Form When you use our contact form, your information is processed to handle the request and for follow-up questions. The following data is collected: - First and last name (required field) - Email address (required field) - Phone number (optional) - Date of birth (optional) - Message content (required field) The data is used exclusively to process your request and is deleted automatically 3 years after the request was sent. The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest for request processing). ### 3.5 Cookies We use cookies on our website. Cookies are small text files stored on your device. We distinguish between necessary and optional cookies: #### **Necessary Cookies:** These are required for basic website functions and cannot be disabled. - Your cookie choice (cookie-preference, kept for one year) - Your language setting (i18n\_redirected) - Sign-in cookie (\_\_session), only in the board's administration area - In addition, a note in your browser's local storage that you have closed an announcement banner #### **Optional Cookies:** These help us improve the website and are only set with your consent. - Analytics cookies from Google Analytics (see 4.1) You can configure your browser to be informed about cookie placement and decide individually or prevent cookies generally. Necessary cookies are stored based on Art. 6 Para. 1 lit. f GDPR. Optional cookies only with your consent according to Art. 6 Para. 1 lit. a GDPR. **Cookie settings in various browsers:** - [Mozilla Firefox](https://support.mozilla.org/kb/cookies-loeschen-daten-von-websites-entfernen) - [Internet Explorer](https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies) - [Google Chrome](https://support.google.com/accounts/answer/61416) - [Opera](https://www.opera.com/help) - [Safari](https://support.apple.com/kb/PH17191) ### 3.6 Membership When you apply for membership through our form, the following data is collected: - First and last name (required field) - Email address (required field) - Postal address: street, house number, postcode, town and country (required fields) - Phone number (optional) - Date of birth (optional) - Your connection to amyloidosis: the form of the disease, “Family and Relatives” or “Not yet diagnosed / Unknown” (voluntary, see below) - Message to us (optional) - Whether you would also like to receive the newsletter (optional, see 3.7) The data is used for member management and communication. The legal basis is Art. 6 Para. 1 lit. b GDPR (contract fulfillment). Data is stored as long as the membership exists, plus 10 years for tax retention obligations. The information about your connection to amyloidosis is voluntary. Because it can say something about your health, it counts as sensitive personal data. We use it solely to look after our members. The legal basis is your explicit consent, which you give by answering this question in the form (Art. 6 Para. 7 lit. a Swiss FADP, Art. 9 Para. 2 lit. a GDPR). You can withdraw your consent at any time by emailing info@amyloidose-schweiz.ch; we will then delete the information. ### 3.7 Newsletter (Infomaniak) You confirm your newsletter registration through a link we send you by email (double opt-in). We send this confirmation email and the welcome email ourselves, the same way as every other email from this website. Only after you have confirmed the link do we pass your details to Infomaniak Network SA (Av. de la Praille 26, 1227 Carouge, Switzerland), which keeps our mailing list and sends the newsletter. For newsletter registration, we collect: - Email address - First and last name - The language of the website on which you subscribed - The lists you chose (Newsletter, Updates and News, Event Invitations) #### **Data Processing:** - Double opt-in: until you confirm the link, we create no record for you; your details are contained only in the confirmation link, which is valid for seven days, and in the copy of that email (see 3.8) - After confirmation we keep only a technical marker (a non-reversible hash of your email address, the language and the time), so that a link that has already been used cannot subscribe you again. It is deleted automatically after about five weeks - Your address, name, language and chosen lists are stored by Infomaniak in data centers in Switzerland - When sending, Infomaniak may record whether a newsletter is opened and which links in it are clicked - Unsubscribe link in every newsletter - If you unsubscribe, Infomaniak does not delete your address but marks it as unsubscribed (unsubscribe list), so that you receive no further newsletters The legal basis is Art. 6 Para. 1 lit. a GDPR (consent). You can withdraw consent at any time. We keep the record of your unsubscription on the basis of Art. 6 Para. 1 lit. f GDPR (legitimate interest in respecting your withdrawal permanently). Your details remain stored with Infomaniak for as long as you are subscribed. After you unsubscribe, your address remains on the mailing list marked as unsubscribed; at your request we will delete this entry as well (see section 7). Infomaniak privacy policy: https://www.infomaniak.com/en/legal/confidentiality-policy ### 3.8 Email Sending (Infomaniak) For sending emails (confirmations, responses to contact requests), we use Infomaniak Network SA. **Processed data:** - Email addresses of senders and recipients - Email content - Metadata (sending time, delivery status) All emails are transmitted encrypted (TLS 1.2/1.3). Infomaniak is a Swiss company and is subject to Swiss data protection law. The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest for communication). The copies of sent emails in our sending queue are automatically deleted after one year. ### 3.9 Offline Collected Member Data In addition to the data collected online via our website, we also collect and process personal data collected offline in the context of our association activities. **This includes in particular:** - Participant data at events (e.g. information sessions, exchange meetings) - Registrations for association activities - Helper lists and contact details of volunteers - Member data from written or verbal registrations The legal basis is Art. 6 Para. 1 lit. b and f GDPR (contract performance and legitimate interest for association management). This data is treated confidentially and is subject to the same data protection provisions as data collected online. It is only used for association purposes and is not shared with third parties. The retention period depends on the respective purpose and legal retention periods. ## 4 External Services and Third Parties ### 4.1 Google Analytics 4 We use Google Analytics 4 from Google LLC, integrated via Firebase, to analyze user behavior on our website. Google Analytics is loaded only after you have given your consent in the cookie banner. **Processed data:** - Page views and dwell time - Device information (screen resolution, device type) - Approximate geographic origin (country/region) - Referrer information - Page loading measurements - Clicks on phone, e-mail, WhatsApp or map links (only the kind of link, never the number or address) - The successful submission of the contact or membership form (without its content) This data helps us improve the website and optimize content. #### **Privacy settings:** - Google Analytics 4 does not store IP addresses; for visitors from Switzerland and the EU, data is collected through servers in the EU - Page addresses are sent without query parameters, except campaign identifiers such as utm\_source; the admin area and the newsletter pages are not measured - Data sharing with Google is restricted - Demographic features and interests are disabled - Data retention is limited to 14 months The legal basis is Art. 6 Para. 1 lit. a GDPR (consent via cookie banner). You can withdraw your consent at any time via the “Cookie Settings” link in the footer of the website. Any transfer to Google LLC in the USA is based on the Swiss-U.S. and EU-U.S. Data Privacy Framework, under which Google is certified. You can disable Google Analytics at: https://tools.google.com/dlpage/gaoptout Google privacy policy: https://policies.google.com/privacy ### 4.2 Google Fonts For uniform display, we use Google Fonts. These are stored locally on our server, so no connection to Google is established. No personal data is transmitted to Google. ### 4.3 External Links Our website contains links to external third-party websites. When you click on these links, you leave our website. We have no control over the content and privacy practices of these external websites and assume no responsibility for their handling of your personal data. We recommend that you read the privacy policies of the external websites you visit, as these may differ from our privacy policies. This privacy policy applies exclusively to data collected through our website www.amyloidose-schweiz.ch. ### 4.4 YouTube Videos Our website contains embedded YouTube videos or links to YouTube videos. YouTube is operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). **When loading or playing YouTube videos, the following data is transmitted to Google:** - IP address - Browser and device information - Visited page URL - Time of access - YouTube cookie data (if present) - Interactions with the video (play, pause, etc.) YouTube uses this data to provide the video service, improve user experience, and for analytics purposes. The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest for providing multimedia content). We use YouTube's enhanced privacy mode (youtube-nocookie.com) when possible to reduce data transmission. You can prevent YouTube videos from loading through appropriate browser settings or add-ons. YouTube/Google privacy policy: https://policies.google.com/privacy ### 4.5 Cloudflare Turnstile (spam protection) Our forms (contact, membership application and newsletter signup) are protected against automated abuse with Cloudflare Turnstile. Turnstile is operated by Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). **When you open a page containing a form, the following data is transmitted to Cloudflare:** - IP address - Browser and device information - Visited page URL - Time of access - Characteristics of your interaction with the page (e.g. mouse and keyboard input) Cloudflare uses this data only to tell whether a form is submitted by a person or by a program. Turnstile does not build advertising profiles and does not use cookies for cross-site tracking. The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest in protecting our forms from spam and abuse). Our forms cannot be submitted without Turnstile. In that case you can always write to us directly at info@amyloidose-schweiz.ch. Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/ ## 5 International Data Transfers Some of the services we use (Google and Cloudflare) may transfer data to countries outside Switzerland and the EU/EEA, in particular to the USA. Google LLC and Cloudflare, Inc. are certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework; Google additionally uses EU Standard Contractual Clauses to protect your data during international transfers. ## 6 Data Sharing with Third Parties We only share your personal data with third parties in the following cases: - To our technical service providers (Infomaniak, Google, Cloudflare) within the scope of order processing - In case of legal obligation or official order - With your explicit consent - To enforce our rights or protect other users All service providers are contractually obligated to comply with data protection and may only use the data for agreed purposes. ## 7 Your Rights as a Data Subject Under the GDPR and Swiss data protection law, you have the following rights: - Right to access your data stored with us - Right to rectification of incorrect data - Right to deletion of your data ('right to be forgotten') - Right to restriction of processing - Right to data portability - Right to object to processing - Right to withdraw your consent To exercise your rights, please contact us via the contact form You also have the right to file a complaint with a data protection supervisory authority. ## 8 Data Security We implement technical and organizational measures to protect your data: - SSL/TLS encryption for all data transmissions - Encrypted storage in secure data centers - Regular security updates and monitoring - Access restrictions and authorization concepts - Regular data backups - Data protection training for our employees ## 9 Data Retention We store your data only as long as necessary for the respective purposes: - Contact requests: deleted automatically 3 years after they were sent - Copies of sent emails: deleted automatically after one year - Newsletter data: with Infomaniak for as long as you are subscribed, then marked as unsubscribed; our confirmation marker about five weeks - Member data: duration of membership + 10 years - Analytics data: 14 months - Server logs: 30 days ## 10 Changes to this Privacy Policy We reserve the right to update this privacy policy to adapt it to changed legal situations or changes to our services. The current version can always be found at www.amyloidose-schweiz.ch/datenschutz **Last updated: 9 October 2026** ## 11 Privacy Contact For questions about data protection or to exercise your rights, please contact: ``` Amyloidosis Switzerland Association 6130 Willisau Switzerland ``` [**Contact Us**](https://www.amyloidose-schweiz.ch/en/verein/kontakt) ## 12 Language Versions This privacy policy and our entire website are available in multiple languages. The German version is the binding and legally valid version. All other language versions are translations provided for user convenience, but may contain translation errors or inaccuracies. In case of discrepancies between the German version and other language versions, the German version shall take precedence.