Privacy Policy
Information on the collection of personal data of www.active-shop.ch/active-shop.net
Active Communication AG (AC) dedicates its utmost attention to data protection.
This information is intended to show you how we process your personal data at AC and inform you of your rights grounded in data protection law.
The Privacy Policy for the website www.activecommunication.ch provides you with information about data collected via the website.
1. Who is responsible for the data processing and who can I contact?
Data processing is the responsibility of:
Active Communication AG
Sumpfstrasse 28
CH-6312 Steinhausen
The data protection officer can be contacted at:
Swiss Paraplegic Group
Information security and data protection officer
Guido A. Zäch Strasse 1
CH-6207 Nottwil
E-mail: datenschutz@paraplegie.ch
2. What sources do we use?
We process all of your personal data which we receive from you in the context of the customer relationship or which we receive from the Paraplegic Centre about you with your consent.
We also receive data from you via our online shop and when you subscribe to our newsletter.
We also receive information from you via the form. Your first name, surname and e-mail address are mandatory. You also have the option of specifying your institution, location and telephone number.
As part of an application procedure for a position, you make your personal data available to the company via your application for the purpose of job searching. Your data is processed by us or the HR department of the Swiss Paraplegic Centre and stored and processed on the systems of our software partner Haufe-umantis AG.
3. Interation of third-party services and content
3.1 Use of YouTube
We use YouTube services within our online offering to embed videos. This always requires YouTube to perceive the user's IP address, as they cannot transmit content to their browser without the IP address. The IP address is thus required to display this content.
YouTube is provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy/ Opt-out: https://www.google.com/settings/ads/
3.2 Use of Google Analytics
We use Google Analytics to analyze website usage. The resulting data is used to optimize our website and advertising measures.
Google Analytics is a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google processes the data on our behalf and contractually commits to measures ensuring the confidentiality of the processed data.
The following data is collected during your website visit:
Pages viewed
Orders including sales and ordered products
Achievement of "website goals" (e.g., contact requests, newsletter sign-ups)
Behavior on pages (e.g., clicks, scroll behavior, dwell time)
Approximate location (country and city)
Your IP address (in truncated form, so it cannot be clearly assigned)
Technical information such as browser, internet provider, device, and screen resolution
Referring source (e.g., which website or advertisement brought you to us)
These data are transferred to a Google server in the USA. Google adheres to the CH-US and EU-US Privacy Shield frameworks.
Cookies set by Google Analytics remain in your browser for two years since your last visit and contain a randomly generated user ID.
Collected data are stored together with the user ID, allowing pseudonymous user profiles. These user-specific data are automatically deleted after 14 months. Other data are stored in aggregate form indefinitely.
If you disagree with the data collection, you can prevent it with a one-time installation of the browser add-on: https://tools.google.com/dlpage/gaoptout
3.3 Use of Google Tag Manager
We use Google Tag Manager from Google Ireland Limited (Ireland/EU) to manage website tags via an interface. Google Tag Manager itself does not process personal data, but triggers other tags that may do so.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient tag management)
Note: Data may be transferred to the USA. See: https://support.google.com/tagmanager/answer/7157428
3.4 Use of Google APIs
We use Google APIs from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to load additional Google services on our website. This may result in international data transfers.
Legal basis: Consent under Art. 6 para. 1 lit. a GDPR
Google APIs allow communication between different Google services. The service or we collect your IP address. Your consent can be withdrawn at any time.
Privacy policy: https://policies.google.com/privacy
3.5 Use of Microsoft Advertising
We use Microsoft Advertising (formerly Bing Ads) from Microsoft Corporation (USA) and its Universal Event Tracking (UET) to analyze usage of our website.
A cookie is set when a user reaches our website via a Microsoft ad. Microsoft and we can recognize that someone clicked on an ad and reached a predetermined target page.
Legal basis: Art. 6 para. 1 lit. f GDPR
No IP addresses or other personal identities are stored.
You can disable the cookie by configuring your browser to refuse cookies.
More info: https://privacy.microsoft.com/de-de/privacystatement
3.6 Use of Newsletter Tool "Elaine"
We use "Elaine," a tool from Mayoris AG, Suurstoffi 16, 6343 Rotkreuz, to send newsletters.
To subscribe, we need your email address, title, first name, and last name. You will receive an email asking for confirmation of the subscription (double opt-in). Your subscription becomes active only after confirming the link.
Your consent is voluntary and can be revoked at any time via email to newsletter@activecommunication.ch or via the link at the end of each newsletter.
We store your opt-in data: email address, IP address, date, time, and received communication info.
3.7 Use of Pinterest Conversion Tracking
We use Pinterest Conversion Tracking (Pinterest Europe Ltd., Dublin 2, Ireland) to display relevant advertising to Pinterest users who have shown interest in our site.
A conversion tracking pixel informs Pinterest when a user has visited our website and what they viewed.
Legal basis: Art. 6 para. 1 lit. f GDPR
You can opt out in your Pinterest settings: https://www.pinterest.de/settings or https://help.pinterest.com/de/article/personalization-and-data
3.8 Use of Heroku
Heroku (Salesforce Inc., 50 Fremont St, Suite 300, San Francisco, CA 94105, USA) is used as an interface server. No personal data is stored.
More info: https://devcenter.heroku.com/articles/gdpr
3.9 Use of Bootstrap CDN
We use Bootstrap CDN by StackPath LLC, 2012 McKinney Ave. Suite 1100, Dallas, TX 75201, USA to improve performance and display content optimally on all devices.
Legal basis: Art. 6 para. 1 lit. f GDPR
This may transfer your IP address and browser details to Bootstrap CDN.
Privacy policy: https://www.bootstrapcdn.com/privacy-policy/
3.10 Use of Cookie Script
We use Cookie Script by Objectis Ltd., Laisves st. 60, 05120 Vilnius, Lithuania to obtain cookie consent from users and ensure legal compliance.
Privacy policy: https://cookie-script.com/legal-information/
4. Why do we process your data (purpose of processing)?
We process your personal data in accordance with data protection law. We use the data exclusively to process current or future transactions with you.
The data collected for an application is stored in the above applicant database and is only stored, evaluated, processed or passed on within the company within the context of your application. It can only be accessed by employees of SPC’s HR department and the people at AC responsible for the selection process. Your data will never be passed on to another person or company or used for other purposes.
5. Who receives my data?
Within the AC, those bodies that need your data to fulfil our contractual and legal obligations will have access to it. Service providers and vicarious agents can receive data for these purposes if they observe professional secrecy.
The company obliges AC employees to keep confidential all facts and evaluations they have gained knowledge of as part of their work. We do not pass on information about you without your consent.
The HR department at the SPC may assume responsibility for personnel management at AC. Applicant data is processed by the SPC HR department and stored and processed on the systems of our software partner Haufe-umantis AG. Secure transfer is ensured with 128-bit encryption.
6. Is data transferred to a third country?
Data is never transferred to places outside of Switzerland (so-called third countries) without your consent.
7. How long is my data stored for?
We process and store your personal data for as long as it is required for the fulfilment of our contractual and legal obligations. It is worth noting in this respect that our relationships to you as a customer are a continuing obligation which are intended to last for years.
In the field of patient treatment, we are also legally obliged to store your documents for 20 years.
If the data is no longer necessary for the fulfilment of contractual or legal obligations, it will be erased on a regular basis.
If you are employed at AC, your applicant data will be included in your employee file.
If you applied but were turned down, your information will be erased shortly after the application procedure has come to an end. You are not informed of the data’s erasure. If you would like to keep your file, we will discuss it with you.
Video recordings of the campus will be automatically deleted after 60 days at the latest. It is only possible to store the videos for longer if this is done so in connection with an assertion of claims.
8. What are my data protection rights?
As a data subject, you have the right to information, inspection, rectification and erasure (not applicable to patient data which must also be retained in the public interest) as well as to the restriction of processing. You may revoke consent you have given for data processing at any time. Please note that the withdrawal of consent is only effective for the future. Processing executed before the withdrawal is not affected thereby.
The rights of the data subject can be asserted in an informal manner. A request is to be addressed to:
Swiss Paraplegic Group
Information security and data protection officer
Guido A. Zäch Strasse 1
CH-6207 Nottwil
E-mail: datenschutz@paraplegie.ch
9. Erasure of data
The data we store will be erased as soon as it is no longer required for its purpose and the erasure is not in conflict with any legal retention obligations. If the user’s data is not erased because it is necessary for other purposes permitted by law, its processing will be restricted. This means that the data is blocked and not used for other purposes. The applies, for example, to user data which must be stored for reasons under trade or tax law.
10. To what extent is automated decision-making carried out?
The SPG does not carry out any fully automated decision-making based on the information we have.
11. Is profiling carried out?
No profiling is carried out with the data collected via this website.
12. Security measures
We take organisational, contractual and technical security measures according to the state of the art to ensure compliance with the provisions of data protection laws and thus protect any data we process from accidental or intentional manipulation, loss, destruction or access by third parties.
13. Changes to the Privacy Policy
Changes to this Privacy Policy may be necessary as part of the further development of our websites and the implementation of new technologies. We therefore recommend that you reread this Privacy Policy from time to time.
AC, January 2019