This information summarizes how Goutte d’eau – a child support network gathers and processes your personal data (information from which you can be personally identified).
Who is responsible for data processing, and who is my point of contact?
The following is the address and contact information for the data controller, responsible for data processing:
Goutte d´eau – a child support network
15, Avenue de Budé
Which data do we process, and where do they come from?
Goutte d´eau – a child support network (GEcsn) processes personal data from the following sources:
- Data you supply to us yourself when you make a donation to the foundation or get in contact with the foundation to get information, volunteer or apply for a job. This includes the data generated when you contact us by email.
- Data which government departments and authorities – in Switzerland and in Cambodia – supply to us from their own activities, e.g. personal data, social services, child and adult protection authorities and public prosecutors’ offices.
- Data which we have obtained from publicly accessible sources, directly or through specialist providers, e.g. from the media, public registers such as the commercial register, or public suppliers of addresses.
For what purpose and on what basis is your data used?
Our main reason for processing personal data is to provide our services in Switzerland and in Cambodia. In this context, we fulfil our obligations.
GEcsn is also bound to process the following personal data under various laws and regulations: donations, human resources, project management for our partner in Cambodia, as well as occupational, pension and insurance data, and to trade creditors and debtors.
Finally, GEcsn processes personal data to protect its own legitimate interests, and those of third parties, especially for the following purposes: assurance of IT security; prevention of criminal offences; marketing and communication; as well as donation and HR activities.
Who gets your data?
Access is allowed to GEcsn’s staff who need your data to administrate your donations, to manage HR activities, and to those you are in contact with by phone, email etc.
The following are our main categories of recipient:
- service providers involved in processing your donations or HR related documents: partner organizations.
- With your consent, the following and other categories of person may be recipients of your data: authorities, social security providers, health organizations, hospitals, welfare institutions, foundations.
- Releases of personal data to state institutions or authorities occur very rarely at GEcsn. These might include government authorities, courts and tribunals, public prosecutors, child and adult protection authorities, tax authorities and auditing companies.
Is your data sent abroad or forwarded to an international organization?
GEcsn processes your personal data primarily in Switzerland. For backup reasons we use services in the EEA as well. We only send your data abroad if necessary, or if required by law, to fulfil our duties and for HR related issues if need be.
Cross-border disclosure to third states which lack proper levels of data protection
We do not send personal data outside Switzerland to third parties in non-EEA countries which do not have appropriate data protection without your consent.
How long do we store your data?
We process and store your personal data for as long as we need to fulfil our contractual and statutory obligations.
As a rule, the statutory obligations of safekeeping remain in force for ten years after the end of our business relations. If we no longer need your personal data, or our service has come to an end, your data are regularly deleted, as far as technically possible, except when we need to continue processing them for the following purposes:
- to comply with the periods of accounting and safekeeping in accordance with commercial and fiscal laws and regulations;
- to preserve evidence during the periods of prescription (e.g. health data or in the event of legal dispute);
- to deactivate rather than erase donor data, to ensure that your data do not re-enter our donor database via other channels.
We will delete your personal data irrevocably at your express wish. If we do delete your data from our files of donors and patrons, we cannot guarantee that your data will not find their way back into our donation database via external means.
Data recording at our website
As a website operator, we take the protection of your personal data very seriously. If you use our website, various personal data are gathered. Personal data means information from which you can be personally identified. Below we explain what data we collect, for what purposes, and with which tools.
Please note that there may be gaps in security during data transfer via the Internet (e.g. in email communications). Seamless protection of data from access by third parties is not possible.
Recording your data
We record your data if you disclose them to us. You may supply such data on a contact form, when making an online donation or by contacting us by email.
Other data are automatically recorded by our IT systems when you visit our website. This mainly involves technical data (e.g. your internet browser, operating system or time of retrieval of page). Such data are recorded automatically on landing at our website. More information on how we evaluate website usage and on web analysis services is available in the following texts.
Most of the cookies we use are session cookies, automatically erased at the end of your visit. (e.g. needed for WordPress, the underlying IT system for this website).
Cookies are stored if needed to execute the electronic communication process or prepare certain functions you want, such as clicking to close a window you opened. We have a legitimate interest in the storage of cookies for the smooth technical operation and optimum provision of our services.
Data via the contact form
If you contact us by contact form, we store the data from your form, including the contact details you have supplied there, in order to process your inquiry and respond to any further questions. The processing of the data entered on the contact form takes place on the basis of your content. We do not pass the data to third parties without your express consent.
The details you enter on the contact form remain at GEcsn until you ask us to delete them, revoke your consent to storage or until the reason for storing the data has lapsed. We are bound to comply with provisions of the law, especially safekeeping periods. Revoking your consent does not affect the legality of data processing carried out before revocation.
Staff and volunteers’ personal information
When you contact us for work or volunteering, your personal information, including your contact details, are stored for the sole purpose of processing your request and follow-up questions.
The information you provide by contact form or email are therefore processed with your consent. To enable us to organize your employment or voluntary mission in the best possible way, your personal information will be forwarded with your consent to partner organizations in Cambodia.
We store your data until you ask us to delete it, until you revoke your permission to store it, or the purpose for which it was supplied no longer applies. However, we must also comply with mandatory legal provisions, such as data storage periods.
For your donation, we use the following payment providers. GEcsn does not process or store your payment data, such as account number, etc.
PostFinance is one of Switzerland’s leading financial institutions. With regard to data protection during the settlement of online payments, please see the data protection policy of PostFinance AG with headquarters in Bern.
Social Media platforms
We use several social media platforms. From our website you can follow the link to the following platforms (You will not be tracked by cookies or plugins by the social platform on our website):
My rights in relation to my data
Revocation of your data processing consent
You may revoke consent that you have granted. To do so, just email firstname.lastname@example.org. This does not affect the legality of data processing which took place before your revocation.
Rectification, erasure and your right to have data blocked
You are at all times entitled to require rectification of incorrect personal data stored by us. You can require erasure or blocking of your personal data stored by GEcsn unless we need to process them for the fulfilment of a legal obligation or to assert, exercise or defend legal entitlements.
If you have any further questions, please contact us by email at email@example.com
Right of data portability
You are entitled to obtain the release of data which we process based on your consent or by contract.
Right of appeal to the competent supervisory authority
In the event of breach of data protection law, you have a right of appeal to the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner.
Validity and amendment of this data protection policy
We may amend or adapt this data protection policy at any time.