1 Introduction

This Privacy Policy applies to the website www.capacityzurich.ch. This privacy policy informs our customers, interested parties, website visitors and third parties with whom we do business or interact (hereinafter “partners“, “participants“, “users” or “you“) about the collection, processing, disclosure, transfer of your personal data in connection with the use of our services, apps, websites, offers, interaction with us or cooperation (hereinafter “services“). Please do not hesitate to contact us at any time if you have any questions about data protection.

2 Applicable law and definitions

2.1 Applicable law

Our offer is aimed at users in Switzerland and our activities are focused on Switzerland. We are based in Switzerland and comply with the Swiss Data Protection Act (FADP) in its currently valid version. With this Privacy Policy, we submit to the provisions of the Data Protection Act applicable from September 01, 2023. You can find the full text of the law here: https://www.fedlex.admin.ch/eli/fga/2020/1998/de 

2.2 Definitions

The definitions of Art. 5 FADP apply, which we reproduce below.

1. Personal data: all information relating to an identified or identifiable natural person 
2. data subject: natural person about whom personal data is processed 
3. particularly sensitive personal data are: 

(1) Data concerning religious, philosophical, political or trade union beliefs or activities, 

(2) data concerning health, privacy or racial or ethnic origin, 

(3) genetic data, 

(4) biometric data that uniquely identifies a natural person 

(5) data relating to administrative and criminal prosecutions or sanctions 

(6) data on social assistance measures; 

1. Processing: any handling of personal data, regardless of the means and procedures used, in particular the collection, storage, retention, use, modification, disclosure, archiving, deletion or destruction of data; 
2. Disclosure: the transmission or making available of personal data; 
3. Profiling: any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements;
4. High-risk profiling: Profiling that entails a high risk to the personality or fundamental rights of the data subject by linking data that allows an assessment of essential aspects of the personality of a natural person; 
5. Data security breach: a breach of security that results in personal data being accidentally or unlawfully lost, deleted, destroyed or altered, or disclosed or made accessible to unauthorized persons 
6. Federal body: federal authority or agency or person entrusted with public tasks of the Confederation
7. controller: a private person or federal body which alone or jointly with others determines the purposes and means of the processing 
8. Processor: a private person or federal body that processes personal data on behalf of the controller.

3 Appropriate information about the collection of personal data

If we maintain a website, you will find this privacy policy on our website.

4 Contact person

4.1 Details of the controller

The data processing is carried out by: 

Capacity  

c/o The Impact Hub Zurich

Sihlquai 131

8005 Zurich

E-mail: info@capacityzurich.ch 

4.2 Contact for information and questions about data protection

For requests for information or questions about data protection, please get in touch with the contact person named under 4.1.

4.3 Data protection officer or data protection advisor

We are not currently obliged to appoint a data protection officer or data protection consultant. We have appointed a data protection officer (DPO) who is available to you as a contact person. If you have any data protection concerns, in particular if you wish to exercise your rights, you can contact the following address. Christian Nat, Leutschenstr. 1, 8807 Freienbach, christian@capacityzurich.ch. 

5 Data protection information

5.1 Purpose of processing

We process personal data for the following processing purposes, depending on whether you are in contact with us as a customer, supplier, employee, service provider or applicant, or whether you work with us. 

The processing purposes are: 

– Use and provision of the website and a newsletter

– Integration of social media services, use of cookies to ensure the functionality and analysis of the website

– Making contact and communication

– Advertising and marketing, organization of occasions and events

– Compliance with legal and regulatory obligations to which we are subject

– Fulfillment of contractual obligations, enforcement of and defense against claims

– Carrying out the association’s activities in accordance with the articles of association, activities that are within the scope of fulfilling our association’s purpose, also using technical aids 

– Conducting workshops and training courses, mentoring and coaching programs, entrepreneurship, Access, Access Fast Track or TENT programs, networking events, also using technical aids and applications

– Processing donations and grants, donation management

– Processing applications and offering job vacancies 

– Other purposes e.g. administrative purposes, evaluation of processes, quality assurance

Users’ personal data is generally collected directly by us when they use the website or make use of our services and goods. However, personal data may also be collected indirectly, e.g. when we correspond with third parties (e.g. suppliers, contact persons, etc.) or by obtaining additional information from generally accessible third-party data sources (e.g. social media, credit checks, etc.).

5.2 Categories of recipients

We specify the category of recipients to whom personal data may be disclosed depending on the respective activity.

• Web hosting provider, webmaster, IT service provider (if used)
• Provider of the content management system 
• Third parties who provide services and services
• Trustees, service providers for the fulfillment of legal or tax obligations
• Insurance companies
• Social media services
• Service partners
• Mentors, coaches, trainers
• Participants in the capacity programs 
• Existing and potential partners in the Access and Entrepreneurship programs 
• Association members, employees
• Service partners such as payment providers, post and parcel senders

5.3 Disclosure abroad

We provide information about the disclosure of personal data abroad. This is done in order to provide services, e.g. IT and website services, or to pursue our purposes in accordance with the Articles of Association.

Other EU countries: adequate level of data protection

USA: The USA does not currently guarantee an adequate level of data protection. The EU has adopted an adequacy decision, the (Swiss) Federal Council has not yet adopted such a decision, so that there is currently no adequacy decision within the meaning of the FADP (as of 08/2023). To ensure appropriate data protection, we generally base the data transfer on guarantees (standard data protection clauses (Art. 16 para. 2 d. FADP)) or exceptions (express consent of the data subject (Art. 17 para. 1 a FADP) or the disclosure is directly related to the conclusion or performance of a contract between the controller and the data subject (Art. 17 para. 1 b. no. 1 FADP). We reserve the right to refuse the transfer on the basis of an exception pursuant to Art. 17 para. 1 b. No. 2 FADP, Art. 17 para. 1 d – f FADP.

6 Cookies

We use cookies for our website to ensure the functionality of the website, to analyze user behavior and to improve our web and service offering. Cookies are small text files that are either only stored for the duration of the visit to the website (so-called “session cookies”) or are stored for longer and only deleted after a specified time, e.g. to recognize returning users or to enable shopping and the shopping cart function. Some services also set cookies. 

You can usually set which cookies you wish to allow in your browser settings. If all cookies are rejected (“functional cookies”), the visit and functionality of our website may be restricted or unavailable. You can find help on cookie management for common browsers here:

– Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen  

– Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies 

– Google Chrome: https://support.google.com/accounts/answer/61416?hl=de 

– Opera: http://www.opera.com/de/help  

– Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE 

7 Automated decision making

We do not use automated decision-making. Exclusively automated decision-making takes place when decisions are made about you by technical means and without human intervention.

8 Analysis tools

We have integrated analysis tools on our website in order to analyze user behavior, evaluate advertising measures or compile visitor statistics.

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google“). Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on our websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google may use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de). An opt-out cookie will be set to prevent the future collection of your data when you visit this website.

We have integrated Google Tag Manager, which as a tag management system enables us to facilitate the implementation of web analysis tools on our website and to offer you a better user experience from the information obtained. Tags are so-called code snippets that are used for analysis and marketing purposes. With Google Tag Manager, a Google service, the marketer can manage website tags via an interface. The Google Tag Manager itself (which implements the tags) is a cookie-free domain and does not collect any personal data. However, other tags are triggered, which in turn may collect data under certain circumstances. Google Tag Manager has no access to this data.

We have activated Google Ads, which allows us to place targeted ads on the Internet or using the Google network. In order to measure success, Google sets a cookie and stores the IP address and the internet address of the users who have accessed our website via the ad. This data is passed on to Google. 

Offers from Google are provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. You can find more information on Google’s terms of use and data protection at https://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/. 

9 Integration of external online and social media services

We have integrated Google Maps, the map service of the provider Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Information about your use, your location or other data (e.g. IP address) may be transmitted to “Google”, usually to a “Google” server in the USA, and stored there. This takes place regardless of whether you are logged into your Google account. However, if you are logged in, your data will be assigned to your account. If you do not wish your data to be associated with your Google profile, you must log out before accessing the website or activating any content. The services store your data as user profiles and use them for the purposes of providing the services, maintaining and improving the services, measuring performance, developing new services and providing personalized services, including content and advertisements. You have the right to object to the creation of these user profiles, whereby you must contact Google directly to exercise this right. 

We have integrated Google Fonts to offer you a better user experience. Google Fonts allows us to use fonts provided by Google.

We have integrated Google reCaptcha, which performs automated tests to distinguish human actions from those of machines based on interaction patterns. These tests are used as access control.

You can find Google’s data protection information at: https://policies.google.com/privacy  and you can opt out of personalized advertising at https://adssettings.google.com/authenticated.

We have integrated the WordPress Multilingual Plugin (“WPML”) in order to be able to translate our website into various languages. You can find the WordPress data protection information at: https://automattic.com/de/privacy/ and https://wordpress.com/de/tos/.

We have integrated a plugin/tool that allows cookies to be used only after a website visitor has given their consent.

We have integrated a plugin/tool that makes it possible to make donations to us via Paypal or Twint via the website. Payment is processed via the respective payment service provider that you select for your donation. The Twint privacy policy can be found at https://www.twint.ch/datenschutz/. The PayPal privacy policy can be found at https://www.paypal.com/webapps/mpp/ua/privacy-full.

We have integrated YouTube videos to offer you a better user experience and to present our offers and activities. As a result, YouTube receives the information that you have accessed the corresponding subpage of our website and data on location (GPS data), IP address and devices used, including information about objects in the vicinity of your device, such as WLAN access points, radio masts and Bluetooth-enabled devices as well as sensor data from your device (see “YouTube” data protection information of the provider) can be transmitted. This takes place regardless of whether you are logged in to Google or YouTube. However, if you are logged in, your data will be assigned to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating a video. YouTube stores your data as user profiles and uses them for the purposes of providing the services, maintaining and improving the services, measuring performance, developing new services and providing personalized services, including content and advertisements. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

The data is also processed in the USA as part of this service. The information generated by the cookies about the use of our website is usually transferred to a server in the USA and stored there.

The YouTube data protection information can be found at: https://policies.google.com/privacy and an opt-out from personalized advertising is possible at https://adssettings.google.com/authenticated.

We have integrated the newsletter service Mailchimp to process our newsletter. As a result, Mailchimp receives the date of registration on the email list, the email and IP address, the name of the new member on the new list, as well as the physical address and demographic information. The data is also processed in the USA as part of this service. The information generated by the cookies about the use of our website is usually transferred to a server in the USA and stored there. 

You can find the Mailchimp data processing information at: https://mailchimp.com/de/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses. 

We use the sharing tool AddToAny. This allows you to share the content displayed with people in your environment. You can use the AddToAny share function to do this. A direct connection between your browser and the AddToAny server is established via the plugin as soon as you visit our website. AddToAny then receives the information that you have visited our site with your IP address. AddToAny anonymizes the IP addresses. Cookies are used when AddToAny is used. The information generated by the cookies about the use of our website is generally transmitted to a server in the USA.

You can find more information on data processing by AddToAny at https://www.addtoany.com/terms and https://www.addtoany.com/privacy. 

We have also integrated Accredible (+Credential). A platform that can be used to automatically create, manage and distribute digital certificates, open badges and blockchain certificates. The company is based in the USA, which means that (if the service is used at all) data is generally processed in the USA. 

You can find more information on data processing by Accredible at https://www.accredible.com/legal/data-security-privacy-policies. 

10 Newsletter

On our website you are given the opportunity to subscribe to our newsletter. You can see from the input form which data is collected. By subscribing to our newsletter, you agree that we may use the data you provide within the scope of this privacy policy. In particular, we may send you our e-mail newsletter on a regular basis. You can unsubscribe from the newsletter at any time using the function provided for this purpose in the newsletter.

11 Social media presence

We are active on various social media platforms and provide information about our services. We do not publish any customer or personal data or information on social media platforms without the express consent of our clients. However, we may process data about you if, for example, you are at one of our events or functions and we post about it on social media. The providers of these platforms can analyze their use and process it for their own marketing purposes as the controller. 

If you click on a social media link on the website, you will be redirected to the corresponding page; the data processing is then carried out by the respective provider.

LinkedIn: https://www.linkedin.com/company/capacity-zurich/ 

Provider: LinkedIn Ireland Unlimited Company, Ireland

Data protection information: https://de.linkedin.com/legal/privacy-policy? 

Instagram: https://www.instagram.com/capacityzurich/ 

Provider: Meta Platforms Ireland Limited, Ireland

Data protection information: https://privacycenter.instagram.com/policy 

Facebook: https://www.facebook.com/CapacityZurich/ 

Provider: Meta Platforms Ireland Limited, Ireland

Data protection information: https://de-de.facebook.com/privacy/policy/ 

YouTube: https://www.youtube.com/channel/UCCJ5eep9N2b2NEGyDAQqzgw 

Provider: Google Ireland Limited, Ireland

Data protection information: https://www.youtube.com/intl/de_be/howyoutubeworks/user-settings/privacy/ 

X: https://twitter.com/CapacityZurich

Provider: Twitter International Unlimited Company, Ireland

Data protection information: https://twitter.com/de/privacy 

12 Donation Technology

We make use of donation technology engineered by RaiseNow AG, Hardturmstrasse 101, 8005 Zürich, whose privacy policy can be viewed here:https://www.raisenow.com/ch-en/datenschutz On the basis of our interests and donation processing, personal and payment-related data as well as communication preferences are captured by RaiseNow, in accordance with GDPR art. 6 par. 1 lit. b and a processing contact we have with them, as per art. 28 par. 3 line 1. RaiseNow AG based in Switzerland and RaiseNow GmbH based in Germany both comply with all requirements of the European General Data Protection Regulation. Switzerland is considered a safe country to which the European Commission has affirmed an appropriate level of data protection by means of a decision on conformity. This includes, for example, the security of data processing, which is regularly checked and certified by TÜV SÜD at RaiseNow AG on the basis of the PCI-DSS SAQ D Level 2 security standard (https://developer.raisenow.com/docs/pci-dss/Certificate-of-Validation_en.pdf). RaiseNow may use any collected data in anonymous form, that is without assignment to a donor, to optimize or improve its own services, but may not contact donors directly or pass this data on to third parties.

13 Reservation of right of amendment

This privacy policy is not part of a contract with you. We reserve the right to amend this privacy policy at any time with effect for the future. This may occur, for example, if an appropriate level of data protection is determined for a data transfer abroad or if we expand or restrict our service. 

This privacy policy reflects the legal status of the Data Protection Act applicable from 01/09/2023.

If you have any questions about our privacy policy or the processing of personal data, please do not hesitate to contact us.

14 Inconsistency and ambiguity

In the event of any inconsistency or ambiguity between the German and English versions of this document, the German version shall prevail.