The Ikea Foundation Switzerland respects your privacy.
Personal data are information that relates to specific or identifiable people, i.e. data that enable conclusions to be drawn about someone’s identity based either solely on these data or in conjunction with other relevant data. “Processing” refers to any handling of personal data, e.g. the collection, storage, use, modification, publication or deletion of such information.
We only collect, process and store personal data (including IP addresses) in accordance with the legal regulations, namely the Swiss Federal Act on Data Protection (“FADP”). Other legislation may also apply on a case-by-case basis.
What personal data do we collect?
Firstly, we collect personal data via the application form that you complete in conjunction with your application to us and therefore our relationship with you. The data collected in this way primarily include information such as your contact details, for instance, your name, phone number, postal and e-mail address, especially in relation to funding applications (e.g. your age, qualifications, bank details, etc.). We also process personal data if we are in contact with you aside from processing your application. And finally, we process personal data if we commission surveys in which you participate, if we organise events to which we invite you (e.g. your name, gender and age) or in connection with newsletters that we send out.
What happens when someone uses our web pages?
In general, you can use our web pages without providing any information about yourself. Our servers temporarily record all access to our web pages in a log file. The following technical data are recorded as part of this and then stored until they are automatically deleted after no more than six months:
- The IP address of the requesting computer
- The date and time of the access
- The web page from which the page was accessed or the search term used
- The name and URL of the file accessed
- The searches conducted
- Your computer’s operating system (provided by the user agent)
- The browser you are using (provided by the user agent)
- The device type if you are accessing the page on a mobile phone
- The transfer protocol used
This data are collected and processed for the purpose of ensuring system security and stability, for fault and performance analysis and for internal statistical purposes. They enable us to optimise our online content. The IP address is also used to preconfigure the language of the web page.
When you visit our web pages, you are notified that our site sets these cookies and that you consent to this if you use the site.
We require statistical information about the use of our online content (especially the website and newsletters) in order to make them more user friendly and measure our reach. We use web analysis tools for this, in particular Google Analytics. The user profiles created with the aid of analysis cookies are not combined with personal data. The tools either shorten user IP addresses immediately after collection or do not use them at all.
We also receive the following information in addition to the aforementioned data (see “What data are processed when using our web pages?”):
- The path that a visitor used to navigate to our web page
- The time spent on the web page or sub-page
- The sub-page visited after leaving the web page
- The country, region or town/city from which the page is accessed
- The device (type, version, colour depth, resolution, width and height of the browser window)
- Whether this is a first-time or repeat visit
No personal information is transferred to the provider before the link or plug-in is accessed. Loading the linked page also forms the basis for data processing by the relevant provider. We neither have any influence over the data processing procedures there, nor are we aware of the full scope of data collection, the purpose of data processing or how long data are stored. In addition, we do not have any information about the deletion of data by plug-in providers.
You can subscribe to a newsletter within the framework of our online content. If, at a later date, you decide that you no longer wish to receive the newsletter, you may cancel your subscription at any time by withdrawing your consent with effect in the future. In the case of e-mail newsletters, consent is withdrawn using a link printed in the newsletter. Alternatively, you can contact us using the details in the Contact section.
For what purpose do we process your personal data?
We need the information in the applications that you send us so that we can process your application. This also applies to the personal data that you subsequently provide us with or which are included in any communication between us (including for managing the contact). The information that you give us within the framework of surveys or in the run-up to events is required to enable us to conduct surveys or run events, process them or improve our offers.
Do we pass on your personal data?
Such third-party recipients may be located in Switzerland or abroad. For example, this may apply to the providers of certain IT tools in the United States who simplify the sending of newsletters, invitations or surveys. If the relevant country does not offer appropriate data protection by law, we ensure a suitable level of protection, as legally required, through the use of applicable contracts (namely on the basis of what are known as the standard contractual clauses of the European Commission) or so-called binding corporate rules, or we employ an exemption clause. Specifically, an exemption may apply as part of legal proceedings abroad, but also in the case of overriding public interest or if conclusion of a contract requires such disclosure, if you have given your consent (for instance, when sending newsletters or within the context of submitting applications) or in the case of publicly available information about you, the processing of which you have not objected to.
For how long do we process your personal data?
We process your data for as long as required for the purpose of processing, for the legal retention periods and for our legitimate interests in processing for documentation or proof or as required on technical grounds (e.g. if, due to statutory retention periods, we are obliged to store certain documents, such as contracts, application forms, requests, project documentation, minutes of meetings and invoices, for a period of ten years). Unless we are prevented from doing so due to legal or contractual obligations, we delete or anonymise your data within the framework of our regular procedures at the end of the storage or processing period.
How do we protect your personal data?
We take appropriate technical and organisational security measures to preserve the confidentiality, integrity and availability of your data, protect them against unauthorised or unlawful processing, and to counter the risk of loss, unintentional modification, unwanted disclosure and unauthorised access.
What rights do you have in relation to your personal data?
Within the context of the applicable data protection legislation and where envisaged therein, you have the right to information, rectification and deletion, the right to restrict data processing, and object to data processing by us and to the release of certain data for the purpose of transmission to another body (known as “data portability”). You also have the right to withdraw consent if our processing is based on your consent.
When exercising your rights, please note that we reserve the right to assert the legally envisaged restrictions ourselves, for instance if we are obliged to store or process certain data, have an overriding interest in this (insofar as we are permitted to do so) or require it to assert our rights. Should you incur any charges, we will notify you of this in advance. Please note that exercising these rights may conflict with contractual agreements and may have consequences, e.g. premature termination of contract or costs. In this case, we will notify you thereof in advance if this has not already been agreed contractually.
Exercising such rights generally requires you to provide clear proof of identity (e.g. a copy of your ID card if your identity is not clear or cannot otherwise be verified). If you wish to assert your rights, you can also contact us via the address shown in section 2.
All data subjects also have the right to enforce their rights judicially or complain to the responsible data protection authority. In Switzerland, the responsible data protection authority is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
We use suitable technical and organisational security measures to protect personal data stored by us against tampering, partial or complete loss and unauthorised access by third parties. Our security measures are constantly improved in line with technological advances.
Should you have any questions about your rights in relation to your personal data or any other related questions, please contact us at the following address:
Ikea Foundation Switzerland
Obere Zäune 12
+41 78 665 9922