In this privacy statement, we explain how we collect and process personal data. This privacy statement primarily takes into account the revised Swiss Data Protection Act (revDSG) and in individual cases, especially in the case of web-based analytics tools and third-party tools, also the provisions of the EU General Data Protection Regulation (EU GDPR). Which of these laws are applicable depends on the individual case. . Specific circumstances are also regulated in other documents (e.g. General Terms and Conditions, Conditions of Participation).
We primarily process the personal data that we receive in the course of our activities, services and business relationships and other persons involved in them and that we collect in the operation of our website, apps and other applications.
In principle, we only collect data that is necessary for the respective processing purposes. We also do not sell any data to third parties. Personal data is all information that relates to a specific or identifiable person. A data subject is a person whose personal data is being processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, procurement, deletion, storage, modification, destruction and use of personal data.
We process personal data for the duration required for the respective purpose or purposes. In the case of longer-term retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.
We use the personal data we collect for the following processing purposes:
- Donation generation and administration.
- Financial management (processing of incoming payments, disbursements, etc.).
- Course and Event Administration.
- Exchange projects and international cooperation projects
- Online store
- Offer and further develop our offers, services and websites, apps and other platforms on which we are present.
- Advertising and marketing, unless you have objected to the use of your data (if we send you information from us as an existing donor, you can object to this at any time - we will then put you on a blacklist against further deliveries).
- Market research and media review.
- Warranties of our operations, especially IT, our websites, apps, and other platforms.
If you have given us permission to process your personal data for specific purposes, we process your personal data within this framework and based on your consent, unless we require a different legal basis.
We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk, in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as the access, entry, disclosure, safeguarding of availability and its separation. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, the deletion of data, and responses to data compromise. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.
In the course of our processing of personal data, your data may be transferred to or disclosed to other entities, companies, legally independent organizational units or persons. The recipients of this data may include, for example, service providers entrusted with IT tasks, companies for the production of mailings or applications that improve our collection activities. In such cases, we observe the legal requirements and conclude appropriate contracts and agreements with the recipients of your data for your protection.
We do not transfer personal data to third parties in a country outside Switzerland and the EU that does not have adequate data protection.
However, we cannot rule out the possibility that web tools used by us to operate our website (such as Microsoft Clarity) transmit anonymized data to the USA or other countries. However, in the context of the use of foreign-based web tools, we check whether their operators undertake to comply with legal data protection.
We process your personal data partly automatically with the aim of evaluating certain personal interests. We use profiling exclusively to be able to inform and advise you about our projects in a targeted manner. In doing so, we use evaluation tools that enable us to provide needs-based communication and advertising.
We do not use fully automated decision making.
We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations or other purposes pursued with the processing. We comply with the statutory retention and documentation obligations. As a rule, they amount to 10 years after completion of a service.
Donor data is stored in a separate database (CRM Sextant). You have the right to have your donor data deleted. In this case, we inactivate your data to ensure that your data is not re-entered into our donation database via other channels (e.g. address rental). If you explicitly request deletion, we cannot guarantee that it will be re-added to our donation database via external address companies.
We conduct audio and video conferences with our stakeholders and project partners. We also conduct digital webinars in our educational work. In doing so, we make sure that we use services that have appropriate data protection. The study leaders of the webinars are experienced users of the respective software. However, participation in these digital events is at your own risk. Mission 21 rejects any liability in this context (e.g. data protection violations). If the webinars are recorded and made available on our website, participants will be asked for their active consent.
Furthermore, we refer to the privacy statements of the respective providers. We mainly use MS Teams and ZOOM.
When you donate money to us or pay for a chargeable service, your payment data is collected. The data of your credit cards run exclusively through our payment partners, so that they can not be stored by us.
Data collection on the Mission 21 website
We point out that data transmission over the Internet (eg communication by e-mail) security gaps. A complete protection of the data against access by third parties is not possible.
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
When you donate money to us online or pay for a paid service, your payment data is collected. The data for payment processing or your credit card information run exclusively through our payment partners, so they can not be stored by us. Your personal information is transmitted to Mission 21 in encrypted form by our service provider. Our service provider is the company RaiseNow AG, located at Hardturmstrasse 101, 8005 in Zurich.
In addition, we work together with the most common credit card and payment providers. The company SIX, located at Pfingstweidstrasse 110, 8005 Zurich, guarantees secure payment processing. It operates the infrastructure for the Swiss financial center. The respective valid data protection statements can be found on the website of the respective provider.
If you order something in our online store, we process the necessary data given by you to enable you to order the selected products. This includes master data (inventory data), communication data, payment data. We transmit personal data to third parties only if this is necessary in the context of the contract (eg delivery of the goods or customer requests for delivery, payment processing, etc.).
The data subjects of the processing include our customers, prospective customers and other business partners. The processing is carried out for the purpose of providing contractual services in the context of the operation of an online store, billing, delivery and customer service.
You can optionally create a user account to view your orders. As part of the registration process, the required mandatory information will be provided to users. The user accounts are not public and cannot be indexed by search engines, e.g. Google.
If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent. The same applies to information provided on the registration form. Here, we only pass on your data if it is necessary for the purpose (e.g. name for booking an overnight stay at Hotel Odelya).
If you would like to receive the newsletter offered on this website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. Further data will not be collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.
You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe link" in the newsletter.
Our provider for the online newsletter is the company getunik ag at Hardturmstrasse 101 in 8005 Zurich. Getunik ag is obliged to ensure that any subcontractors also comply with the legal requirements of data protection.
Mission 21 issues various publications, such as "encounter" a magazine that informs you about the various activities and partners of Mission 21. Of course, you can unsubscribe from Mission 21's publications at any time by sending us an email or calling us immediately.
You can set your browser so that you are informed about the setting of cookies and you can also exclude them.
For more information, see the next chapter.
This website uses the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to comfortably use the map function. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. For more information on the purpose and scope of data collection and processing by Google, as well as further information on your rights in this regard and settings options for protecting your privacy, please visit: www.google.de/intl/de/policies/privacy.
This website uses Google conversion tracking. If you have reached our website via an ad placed by Google, a cookie is set on your computer by Google Ads. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across Ads customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users.
If you do not wish to participate in the tracking, you can refuse the setting of a cookie required for this - for example, by means of a browser setting that generally deactivates the automatic setting of cookies or by setting your browser in such a way that cookies from the domain "googleleadservices.com" are blocked.
Please note that you must not delete the opt-out cookies as long as you do not want any measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.
This website uses the remarketing function of Google Inc. The function is used to present interest-based advertisements to website visitors within the Google advertising network. A so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognize the visitor when they visit websites that belong to the Google advertising network. On these sites, the visitor may be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller of this website is located outside the European Economic Area or Switzerland, the Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google". Google Ireland (based in Ireland) relies on Google LLC (based in the USA) as an order processor, with which we can measure and apply the use of the website (non-personal). We have configured the service so that the IP addresses of visitors in Europe are shortened before being forwarded to the USA and thus cannot be traced. We have turned off the "data sharing" and "signals" settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google can draw conclusions about the identity of visitors from this data for its own purposes, create personal profiles and link this data to the Google accounts of these individuals. Insofar as you have registered with the service provider yourself, the service provider also knows you. The processing of your personal data by the service provider then takes place under the responsibility of the service provider in accordance with its data protection provisions. The service provider only informs us how our respective website is used (no information about you personally).
The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under "My data", "Personal data".
The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DS-GVO. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. We would like to point out that on this website Google Analytics has been extended by the code "_anonymizeIp();" to ensure anonymized collection of IP addresses. This means that IP addresses are processed in abbreviated form, which means that they cannot be linked to a specific person. Insofar as the data collected about you is related to a person, this is therefore immediately excluded and the personal data is thus immediately deleted.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
Furthermore, you can also prevent the use of Google Analytics by clicking on this link: Deactivate Google Analytics. This saves a so-called opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your end device, these opt-out cookies will also be deleted, i.e. you will have to set the opt-out cookies again if you want to continue to prevent this form of data collection. The opt-out cookies are set per browser and computer/end device and must therefore be activated separately for each browser, computer or other end device.
Google Web Fonts
This website uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. If your browser does not support web fonts, a standard font is used by your computer.
Google Tag Manager
Google Tag Manager is a solution with which we can manage so-called website tags via an interface and thus, for example, integrate Google Analytics and other Google marketing services into our online offering. The Tag Manager itself, which implements the tags, does not process any personal data of the users. With regard to the processing of users' personal data, please refer to the following information on Google services. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html
More third-party tools
Mission 21 uses other tools for technical applications such as CRIF for address matching or Micorosoft Clarity. These are used to correct addresses or for anonymous evaluations (e.g. scrolling behavior on the website).
We provide social media sharing options on our website to provide information about Mission 21. We consider the underlying promotional purpose to be a legitimate interest within the meaning of Art. Para. 1 lit. f DSGVO/. However, the responsibility for data protection compliant operation lies with the respective provider. By using sharing or other options, you consent to the data processing of these providers. We work with the following providers:
This website uses functions of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA . When you call up our pages with Facebook plug-ins, a connection is established between your browser and the Facebook servers. In the process, data is already transferred to Facebook. If you have a Facebook account, this data can be linked to it. If you do not want this data to be associated with your Facebook account, please log out of Facebook before visiting our site. Interactions, in particular the use of a comment function or the clicking of a "Like" or "Share" button are also passed on to Facebook. You can find out more at https://de-de.facebook.com/about/privacy.
This website uses functions of Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. When you call up our pages with Twitter plug-ins, a connection is established between your browser and the servers of Twitter. In the process, data is already transferred to Twitter. If you have a Twitter account, this data can be linked to it. If you do not wish this data to be associated with your Twitter account, please log out of Twitter before visiting our site. Interactions, in particular the clicking of a "Re-Tweet" button, are also passed on to Twitter. You can find out more at https://twitter.com/privacy.
Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.
We use the marketing services of the social network LinkedIn of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn") within our online offer.
This includes, for example, information about the operating system, the browser, the website you previously visited (referrer URL), which websites the user visited, which offers the user clicked on, and the date and time of your visit to our website.
The information generated by the cookie about your use of this website is transferred pseudonymously to a LinkedIn server in the USA and stored there. LinkedIn therefore does not store the name or email address of the respective user. Rather, the above-mentioned data is only assigned to the person for whom the cookie was generated. This does not apply if the user has allowed LinkedIn to process without pseudonymization or has a LinkedIn account.
We use LinkedIn Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. All LinkedIn companies have adopted the standard contractual clauses to ensure that the data traffic to the USA and Singapore necessary for the development, implementation and maintenance of the services takes place in a lawful manner. If we ask users for consent, the legal basis for processing is Art. 6 (1) lit. a DSGVO. Otherwise, the legal basis for the use of LinkedIn Analytics is Art. 6 para. 1 p. 1 lit. f DSGVO.
Functions of the "YouTube" service are integrated on this website. "YouTube" is owned by Google Ireland Limited, a company incorporated and operated under the laws of Ireland, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.
Your legal agreement with "YouTube" consists of the terms and conditions found at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de.
If you have a Vimeo user account and do not want Vimeo to collect data about you through this website and link it to your membership data stored with Vimeo, you must log out of Vimeo before visiting this website.
In addition, Vimeo calls up the Google Analytics tracker via an iFrame in which the video is called up. This is Vimeo's own tracking, to which we have no access. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers. You can also prevent the collection of data generated by Google Analytics and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Below you will find a list of your rights in connection with the data processed by you, which you can exercise via the published contact details.
Please note that these rights may be restricted or excluded in individual cases, for example if this is necessary to protect other persons, to safeguard interests worthy of protection or to comply with legal obligations.
Right to information
You can request information about whether personal data concerning you is being processed by Mission 21. If this is the case, you can request specific information about the processing.
Right to rectification
You may request that personal data concerning you be corrected and/or completed if such data is inaccurate or incomplete.
Right to deletion
You can request the deletion of the personal data concerning you. The data will be deleted if the relevant requirements are met.
The right to erasure cannot be granted if the processing is necessary for the exercise of the right to freedom of expression, for compliance with a legal obligation or a task carried out in the public interest, or for the establishment, exercise or defense of legal claims.
Right to restriction of processing
You can request the restriction of the processing of your personal data if you dispute the accuracy of this data, the processing is unlawful, the data is no longer needed or you object.
If the processing of the data is restricted, it may only be stored. Further processing may only take place with your consent, for the assertion, exercise or defense of legal claims, to protect the rights of another person or for reasons of important public interest. In the event that the restriction is lifted, you will be notified.
Right of objection
You may object to data processing concerning you if it is carried out on the legal basis of the performance of a public task or legitimate interests and you are in a special situation. Likewise, you may object if the data processing was carried out in order to make direct marketing. In this case, the corresponding data will no longer be used for this purpose.
Right to data portability
You have the right to receive the personal data concerning you, which is based on consent, on a contract or on processing with the aid of automated procedures, in a structured, common and machine-readable form and to transfer this data to a third party.
Insofar as this is technically feasible, you may request direct transmission. The rights and freedoms of other persons must not be affected by this.
You may also request that incorrect personal data about you be corrected.
Right to revoke the declaration of consent under data protection law
You can revoke your consent to the processing of personal data concerning you at any time. The lawful processing until the time of the revocation is not affected by this.
Complaint to supervisory authority
You also have the right to lodge a complaint with the competent supervisory authority if you have concerns about whether the processing of your personal data complies with the law. The competent Swiss supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC).
The copyright and all other rights to the content, images, photos or other files on the website belong exclusively to the operator of this website or the specifically named copyright holders. For the reproduction of all files, the written consent of the copyright holder must be obtained in advance.
Limitation of liability
Version July 1, 2023