Data privacy notice:
The Vontobel Foundation attaches great value to compliance with the provisions of data protection law, and thus to the protection and confidentiality of personal data, and we apply the utmost care in this regard.
In this data privacy statement, we would therefore like to provide you with comprehensive and transparent information on how we handle your personal data. We process your data in accordance with the applicable provisions of data protection law.
This data privacy statement applies to anyone whose personal data we process, including but not limited to applicants, beneficiaries of the Vontobel Foundation and their associates, as well as recipients of Vontobel’s series of publications and the newsletter. The present data privacy statement also applies to the use of our website.
The present data privacy statement tells you how and why we process personal data, and what your rights are in accordance with the applicable provisions of data protection law.
I. Who is the controller responsible for the processing of personal data, and who can you contact in this regard?
The controller responsible for the processing of personal data as described in the present document is the Vontobel Foundation (also referred to hereinafter as “we” or “us”):
Vontobel Stiftung
Tödistrasse 36
CH 8002 Zurich
Switzerland
email: info@vontobel-stiftung.ch
II. General provisions concerning the processing of data
1. Legal basis for the processing of your data
The processing steps stated below are based on the applicable legal foundations.
2. Deletion of data and duration of storage
Your data will always be deactivated, deleted or blocked as soon as the purpose for which they are being stored no longer applies and there is no longer any obligation or right to store them. The data may be used to fulfill any obligations to provide information.
3. Storage and security of your data
The Vontobel Foundation treats the data it collects and stores as confidential unless they are considered public information. We take suitable technical and organizational precautionary measures to protect the data against loss, manipulation, and unauthorized access by third parties. They are only stored for as long as they are required for the purpose of the processing.
4. Automated individual decision-making, including profiling
When your data are being processed, no automated individual decision-making is carried out (including profiling).
5. Links
This data privacy statement does not apply to external websites that you access via a link on the Vontobel Foundation’s website. The Vontobel Foundation does not monitor external websites, and accepts no responsibility for the placement of cookies or processing of personal data by external websites. You should find out on each website about the data privacy statement and framework conditions that apply to that website.
III. Disclosure of third parties’ personal data
Please note that if you disclose third parties’ data to us, you are obliged to make them aware of the present data privacy statement and the rights and obligations it sets out, and to obtain their consent to the processing of their data. The application can only be considered once the corresponding consent has been received. You can find this in our AlphaFoundation tool.
IV. Does the Vontobel Foundation gather sensitive personal data or special categories of data?
As part of the review and processing of applications for contributions from the Vontobel Foundation and the distribution of such contributions, it may be necessary for us to also process personal data that are classed as sensitive, including but not limited to information regarding a person’s religious beliefs or health. If such data are processed, the Vontobel Foundation will obtain explicit consent to the processing of data beforehand.
We do not process any sensitive personal data or special categories of data in connection with the distribution of the Vontobel series of publications or the newsletter.
1. Processing of applications
a) Description and scope of data processing
As part of the review and processing of applications for contributions from the Vontobel Foundation and the distribution of such contributions, we process personal data relating to you and potentially also to other people associated with you (including but not limited to people who you could represent or could represent you, such as partners, family members, legal counsel, employees, employers, or other people of relevance in connection with the application and the distribution of the contribution). The personal data we process may include a person’s name, company name, email and postal address, telephone number, date of birth, marital status, place of origin, nationality, residence status under the law on foreign nationals and bank account details, as well as information on their education and profession, familial relationships, business and/or financial situation, health (including medical certificates), measures under child and adult protection law, and support services rendered by social security providers and other institutions. We can receive these types of personal data from you yourself, from people associated with you or from a third-party institution that is submitting an application, such as a professional information center, a careers center or a social security office. We need the data provided to review your application and potentially distribute the contributions.
If you or a person associated with you has applied to the Vontobel Foundation for contributions or is in receipt of such contributions, we will process the personal data exclusively for the purpose of processing said application, and potentially distributing our contributions.
b) Legal basis for and purpose of data processing
When you submit an application, you send us your data. By sending us your data, you agree that your personal data may be processed for the purpose stated when they were collected. Specifically, the data are processed in order to process your application, assess your entitlement and reach a decision on whether or not to distribute contributions. This means that the data are processed in order to pursue the foundation’s mission and fulfill any contracts.
c) Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected and there is no longer any obligation or right to store them. The data may be used to fulfill any obligations to provide information.
d) Option to object and request deletion
The application can be withdrawn at any time. Please contact us at the address given in Section I in order to do this. Once it has been withdrawn, your application can no longer be taken into consideration. Your data will be deleted at your request.
2. Vontobel series of publications
a) Description and scope of data processing
The personal data we process for the purpose of sending out the Vontobel series of publications include, but are not limited to, a person’s name, any academic or other title, postal address, language and, in cases of delivery to business addresses, information regarding their professional situation. We obtain these data from you.
b) Legal basis for and purpose of data processing
When you order the Vontobel series of publications, you send us your data. By sending us your data, you agree that your personal data may be stored and processed for the purpose stated when they were collected. The processing of data is necessary in order to provide the agreed services.
c) Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected and there is no longer any obligation or right to store them. The data may be used to fulfill any obligations to provide information.
d) Option to object and request deletion
The order can be canceled at any time. Please contact us at the address given in Section I in order to do this. Such cancellation will only apply with effect for the future.
3. Newsletter
a) Description and scope of data processing
You can subscribe to a free newsletter. When you sign up for the newsletter, the data entered into the form are transmitted to us (including but not limited to your name, address and other contact details [email address, user name and password, collectively referred to hereinafter as "content data"]). No other data will be stored.
We use what is known as a “double opt-in” process, according to which we will only send you a newsletter by email after you have explicitly confirmed the activation of the newsletter service by clicking on a link in a notification. If you subsequently decide that you want to stop receiving newsletters, you can terminate your subscription at any time with effect for the future. You can cancel your subscription to email newsletters using the link provided in the newsletter. Alternatively, you can contact us using the details provided in the “Contact” section (cf. Sec. I. above).
b) Legal basis for and purpose of data processing
When you subscribe to the newsletter, you send us your content data. By sending us your data, you agree that your personal data may be stored and processed for the purpose stated when they were collected. We collect your email address in order to be able to send you the newsletter. Other personal data are collected during the sign-up process in order to prevent the misuse of the services or the email address that is being used.
c) Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected and there is no longer any obligation or right to store them. The data may be used to fulfill any obligations to provide information.
d) Option to object and request deletion
You can cancel your subscription to the newsletter at any time. Each newsletter contains a link for this purpose. When you cancel your subscription, you can also revoke your consent to the storage of the personal data collected during the sign-up process. You can do this at any time with effect for the future.
V. For what purpose and on what legal basis do we process your data?
The Vontobel Foundation processes personal data in accordance with the provisions of the Swiss Federal Data Protection Act (DPA) and, if applicable, the EU’s General Data Protection Regulation (GDPR).
If you are registered with us as a recipient of the Vontobel series of publications or our newsletter, we will only use the personal data referred to in Secs. IV.2. and IV.3. To send you our series of publications or newsletter. We will do this on the basis of your consent, the need to process data in order to fulfill contractual obligations toward you, and/or our legitimate interest in communicating with you as a recipient of the Vontobel series of publications and/or the newsletter.
As part of the reporting to our supervisory authority, we also process personal data in order to fulfill our legal obligations, which can also constitute a legitimate interest on the part of the Vontobel Foundation.
Personal data are not used for any marketing purposes and are not passed on to third parties, subject to the exceptions set out in Sec. IX.
VI. Who receives your data?
Within the Vontobel Foundation, access to personal data is only granted to those employees or trustees who need to access your data in order to review and process an application, to distribute contributions or to send out the Vontobel series of publications and/or the newsletter. We also forward personal data to third parties, however (known as “processors”). In such cases, the data are forwarded in accordance with Sec. IX below.
VII. Provision of the website and creation of log files
1. Description and scope of data processing
Every time you access our web page, our system automatically records data and information from your computer’s operating system, and collects the following data:
- Information about the browser you are using
- Your internet service provider and the devices you are using
- Your IP address
- The date, time and duration of your visit to our website
- The websites from which you navigated to our web page
- The websites you access via our website
The data are also stored in our system in the form of log files. These data are not stored together with any of your other personal data.
2. Legal basis for and purpose of data processing
The data collected do not allow any conclusions to be drawn regarding your identity. They allow the Vontobel Foundation to improve the quality of the service it offers by identifying trends and usage patterns. The storage of said data in log files also ensures the functioning of the website. The data are used to optimize our website and ensure the security of our IT systems. The data are not analyzed for marketing purposes in this context. These purposes also fall under our legitimate interest in the processing of data.
3. Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. If your data are required in order to provide the website, then this is the case as soon as each session is ended.
4. Option to object and request deletion
The data must be collected in order to provide the web site and stored in log files in order to operate the web page. There is therefore no option to object.
VIII. Use of cookies
1. Description and scope of data processing
We use “cookies” in certain cases. Cookies are small text files that are permanently or temporarily stored on your computer when you visit a website. Cookies can be used to anonymously analyze the general use of the website by visitors in order to continuously improve it. The use of cookies can simplify certain login processes. Browsers can be configured to display a warning on your screen before cookies are saved. If you wish to dispense completely with the benefits of cookies, it will no longer be possible for you to use and/or for us to provide certain services.
We use cookies to make our website more user-friendly. Some parts of our web page require that the accessing browser can be identified even after navigating to a different page. The cookies store and transmit the following data:
- Language settings
- Articles in a basket
- Login information and contact details from the input form
2. Legal basis for and purpose of data processing
Some cookies are necessary to simplify and improve the use of our website, as well as to ensure the smooth establishment of a connection and the user-friendly operation of the website. Some of the functions of our website cannot be offered without the use of cookies. For these, it is essential that the browser is recognized even after navigating to a different page (e.g. for the language settings and the storage of contact details from the input form and the basket). We do not use these data to compile a user profile, however.
3. Duration of storage, option to object and request deletion
Cookies are stored on your computer. As the user, this means that you also have full control over the use of cookies. You can use the settings in your browser to restrict or deactivate the transmission of cookies. Cookies that have already been stored can be deleted at any time. Please note, however, that deactivating cookies may mean that you are no longer able to use all of the website’s functions.
IX. Forwarding of data to third parties
We forward personal data to service providers that we engage, in fields including but not limited to banking, accounting, auditing and IT, as well as the supervisory authorities. They need the data to provide their services to us or to fulfill their statutory or regulatory duties. The service providers we engage (“processors”) are required to follow the same or comparable regulations to us relating to the protection of personal data, and may be subject to further statutory confidentiality obligations, such as bank-client or professional confidentiality.
We currently work with the following processors:
1. AlphaFoundation/Krauthammer Solutions
a) Description and scope of data processing
The possibility cannot be ruled out that personal data will be accessed as part of the provision of services by AlphaFoundation/Krauthammer Solutions as central IT service providers in the fields of hosting, support and the administration of the Vontobel Foundation’s server systems. However, the data are only used to fulfill the contractually agreed IT service. They may not be used for any other purpose or transmitted, for the processor’s own purposes or those of third parties (including marketing).
b) Legal basis for and purpose of data processing
AlphaFoundation has to process data in order to fulfill its contract as an IT service provider. The Vontobel Foundation also relies on this service in order to fulfill its mission as a foundation (processing applications etc.) as well as any contracts.
c) Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected and there is no longer any obligation or right to store them. The data may be used to fulfill any obligations to provide information.
2. Megura AG and MailChimp
The possibility cannot be ruled out that personal data will be accessed as part of the provision of services by Megura AG as a central IT service provider in the field of processing the newsletter and the electronic version of the publication series. Megura AG uses the online tool provided by MailChimp to process the newsletter. However, the data are only used to fulfill the contractually agreed IT service. They may not be used for any other purpose or transmitted, for the processor’s own purposes or those of third parties (including marketing).
a) Legal basis for and purpose of data processing
Megura AG/MailChimp has to process data in order to fulfill its contract as an IT service provider. The Vontobel Foundation also relies on this service in order to fulfill its mission as a foundation (distributing the newsletter and providing the electronic version of the publication series).
b) Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected and there is no longer any obligation or right to store them. The data may be used to fulfill any obligations to provide information.
3. Schellenberg Druck AG
The possibility cannot be ruled out that personal data will be accessed as part of the provision of services by Schellenberg Druck AG as a central service provider for the distribution of Vontobel’s series of publications. However, the data are only used to fulfill the contractually agreed service. They may not be used for any other purpose or transmitted, for the processor’s own purposes or those of third parties (including marketing).
a) Legal basis for and purpose of data processing
Schellenberg Druck AG has to process data in order to fulfill its contract as a provider of printing and distribution services for Vontobel’s series of publications. The Vontobel Foundation also relies on this service in order to fulfill its mission as a foundation (distributing the printed version of the publication series).
b) Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected and there is no longer any obligation or right to store them. The data may be used to fulfill any obligations to provide information.
4. CVA Management & Consulting AG
The possibility cannot be ruled out that personal data will be accessed as part of the provision of services by CVA Management & Consulting AG as a central service provider for the distribution of Vontobel’s series of publications. However, the data are only used to fulfill the contractually agreed service. They may not be used for any other purpose or transmitted, for the processor’s own purposes or those of third parties (including marketing).
a) Legal basis for and purpose of data processing
CVA Management & Consulting AG has to process data in order to fulfill its contract as a delivery company for the distribution of Vontobel’s series of publications. The Vontobel Foundation also relies on this service in order to fulfill its mission as a foundation (distributing the printed version of the publication series).
b) Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected and there is no longer any obligation or right to store them. The data may be used to fulfill any obligations to provide information.
5. AAS Freight AG
The possibility cannot be ruled out that personal data will be accessed as part of the provision of services by AAS Freight AG as a central service provider for the distribution of Vontobel’s series of publications. However, the data are only used to fulfill the contractually agreed service. They may not be used for any other purpose or transmitted, for the processor’s own purposes or those of third parties (including marketing).
a) Legal basis for and purpose of data processing
AAS Freight AG has to process data in order to fulfill its contract as a delivery company for the distribution of Vontobel’s series of publications. The Vontobel Foundation also relies on this service in order to fulfill its mission as a foundation (distributing the printed version of the publication series).
b) Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected and there is no longer any obligation or right to store them. The data may be used to fulfill any obligations to provide information.
6. Option to object and request deletion
You may withdraw your consent to the processing of your data by AlphaFoundation, Megura AG, MailChimp, Schellenberg Druck AG, CVA Management & Consulting AG and/or AAS Freight AG. You can do this at any time with effect for the future. Please contact us at the address given in Section I in order to do this. However, this will make it impossible for the Vontobel Foundation to fulfill its mission as well as any contracts with regard to you. That is why, in such case, the data collected during the sign-up process will be deemed to have been revoked, applications to have been withdrawn, orders of Vontobel’s series of publications to have been canceled, and subscriptions to the newsletter to have been terminated.
X. Rights of the data subject
The Vontobel Foundation is considered the controller with regard to the processing of data. If your personal data are processed, you are a data subject for the purposes of the relevant provisions of data protection law, and as such you have the following rights:
You have the right to demand information on the personal data relating to you that we process. Specifically, you may request information on the purposes for which we process the data, the categories of personal data we process, the categories of recipients who we have disclosed or will disclose your data to, the planned duration of storage, the existence of a right to have the data corrected or deleted, as well as to restrict or object to the processing of the data, the transmission of the data, the source of your data (if we did not collect it from you), and the existence of an automated decision-making process (including profiling). You also have the right to withdraw any consent you may have given to the use of your personal data at any time.
If you believe that we are processing your personal data in violation of the applicable provisions of data protection law, you may file a complaint with the supervisory authority without prejudice to any further recourse under administrative law or before the courts.
XI. Data security
We use suitable technical and organizational security measures to protect your personal data that we have stored against manipulation, against partial or complete loss, and against unauthorized access by third parties. We continuously improve our security measures in line with the development of technology.
XII. Amendments to the present data privacy statement
We reserve the right to amend or add to this statement at our own discretion, in compliance with data protection legislation. Please consult this statement regularly.
Zurich, September 9, 2024