Privacy Policy & Impressum

Last updated on: 22.06.2024

We place great importance on transparency in handling personal data. This privacy policy provides information about the personal data we collect, for what purposes, and to whom we disclose it. To ensure high transparency, this privacy policy is regularly reviewed and updated.

1. Which services we use

Google Ads
Google Ads Conversion Tracking
MailChimp
MailChimp for WordPress
Meta Ads
Dropbox
Google Cloud CDN
Google Fonts API
jQuery CDN
Google Charts
Google Maps
Vimeo
YouTube
Google Site Kit
WordPress

2. Contact information

If you have any questions or concerns about our data protection practices, you can contact us anytime via email at info@sgcm-sscm.ch. The entity responsible for data processing carried out through this website is: Swiss Society for Cannabis in Medicine – SGCM SSCM Lorrainestr. 13 3013 Bern Switzerland Data Protection Officer: Ben Arn info@sgcm-sscm.ch

3. General principles

3.1 What data do we collect from you and from whom do we receive this data

We primarily process personal data that you provide to us or that we collect while operating our website. We may also receive personal data about you from third parties. These may include the following categories:

Personal data (name, address, date of birth, etc.);
Contact data (mobile number, email address, etc.);
Financial data (e.g., account information);
Online identifiers (e.g., cookie IDs, IP addresses);
Location and traffic data;
Audio and video recordings;
Particularly sensitive data (e.g., biometric data or health information).

3.2 Under what conditions do we process your data?

We treat your data confidentially and in accordance with the purposes set out in this privacy policy. We ensure transparent and proportionate processing. If we are exceptionally unable to follow these principles, data processing may still be lawful because there is a justification. Justifications include:

Your consent;
The performance of a contract or pre-contractual measures;
Our legitimate interests, provided your interests do not override them.

3.3 How can you revoke your consent?

If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent, provided we have no other justification. You can revoke your consent at any time by sending an email to the address provided in the imprint. Previous data processing is not affected.

3.4 In which cases can we transfer your data to third parties?

a. Principle

We may need to use the services of third parties or affiliated companies and commission them to process your data (so-called processors). Categories of recipients include:

Accounting, fiduciary, and auditing firms;
Consulting firms (legal, tax, etc.);
IT service providers (web hosting, support, cloud services, web design, etc.);
Payment service providers;
Providers of tracking, conversion, and advertising services.

We ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially. We may also be required to disclose your personal data to authorities.

b. Visiting our social media channels

We may have integrated links to our social media channels on our website. This is clearly visible (typically via appropriate symbols). Clicking on the symbols will redirect you to our social media channels. The social media providers will know in this case that you are accessing their platforms from our website. Social media providers can use the collected data for their own purposes. We inform you that we do not receive any information about the content of the transmitted data or their use by the providers.

c. Transfer abroad

It may be necessary to transfer your personal data to companies abroad as part of order processing. These companies are obliged to adhere to the same level of data protection as we are. The transfer can take place worldwide. If the level of data protection does not correspond to that of Switzerland, we conduct a prior risk assessment and contractually ensure that the same level of protection as in Switzerland is guaranteed (e.g., using the new standard contractual clauses of the European Commission or other legally prescribed measures). If our risk assessment is negative, we take additional technical measures to protect your data. You can access the European Commission’s standard contractual clauses at the following link: https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de

3.5 How long do we retain your data?

We retain personal data only as long as necessary to fulfill the purposes for which the data was collected. Data collected during your visit to our website is retained for twelve months. An exception applies to analysis and tracking data, which may be retained longer. We retain contract data longer as we are legally required to do so. We must retain business communications, concluded contracts, and booking receipts for up to 10 years. If we no longer need such data to provide services, the data will be blocked and only used for accounting and tax purposes.

3.6 How do we protect your data?

We will store your data securely and take all reasonable measures to protect your data from loss, unauthorized access, misuse, or alteration. Our contractors and employees who have access to your data are required to comply with data protection regulations. In some cases, it may be necessary to forward your requests to affiliated companies. In such cases, your data will also be treated confidentially. Within our website, we use the SSL (Secure Socket Layer) protocol in conjunction with the highest encryption level supported by your browser.

3.7 What rights do you have?

a. Right of access

You can request information about the data we hold about you at any time. Please send your request for access along with proof of identity to info@sgcm-sscm.ch. You also have the right to receive your data in a common file format if we process your data automatically and if:

You have given your consent for the processing of these data; or
You have disclosed data in connection with the conclusion or execution of a contract.

We may restrict or refuse access or data delivery if this is contrary to our legal obligations, legitimate interests, or the interests of third parties. Processing your request is subject to the statutory processing period of 30 days. We may extend this period due to a high volume of requests, legal or technical reasons, or because we need further details from you. You will be informed of the extension of the period in good time, at least in writing.

b. Deletion and rectification

You can request the deletion or correction of your data at any time. We may refuse the request if legal provisions require us to retain the data longer or unchanged, or if a legal basis opposes your request. Please note that exercising your rights may conflict with contractual agreements and have corresponding impacts on contract execution (e.g., premature contract termination or cost consequences).

c. Legal recourse

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch

3.8 Changes to the privacy policy

We may change this privacy policy at any time. Changes will be published on https://www.sgcm-sscm.ch, and you will not be informed separately.

4. Individual data processing operations

4.1 Providing the website and creating log files

What information do we receive and how do we use it?

When you visit https://www.sgcm-sscm.ch, certain data is automatically stored on our servers or on servers of services and products that we use and/or have installed, for system administration, statistical purposes, security purposes, or tracking purposes. These data include:

The name of your internet service provider;
Your IP address (possibly);
The version of your browser software;
The operating system of the computer used to access the URL;
The date and time of access;
The website from which you visit the URL;
The search terms you used to find the URL.

Why are we allowed to process these data? These data cannot be assigned to specific individuals, and there is no combination of these data with other data sources. The storage of log files is to ensure the functionality of the website and the security of our information technology systems. This constitutes our legitimate interest.

How can you prevent data collection?

The data is only stored as long as necessary to achieve the purpose of their collection. Accordingly, the data will be deleted after each session. The storage of log files is essential for the operation of the website, so you have no possibility to object.

4.2 Google Ads

We use Google Ads, an online advertising service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). Google Ads allows us to place ads in Google search results and in the Google advertising network.

4.3 Google Ads Conversion Tracking

We use the online advertising program “Google Ads” and, in this context, conversion tracking (visitor action analysis). Google Ads Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an ad placed by Google, a cookie for conversion tracking is placed on your device. These cookies have a limited validity, do not contain personal data, and are not used for personal identification. If you visit certain pages of our website and the cookie has not expired, Google and we can recognize that you clicked on the ad and were redirected to that page. The information collected through the conversion cookie is used to create conversion statistics. We learn the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can personally identify users. You can prevent the storage of cookies by selecting the appropriate technical settings in your browser. However, we inform you that in this case, you may not be able to use all the functions of this website fully. You will not be included in the conversion tracking statistics. Furthermore, you can disable personalized advertising in the advertising settings on Google. Instructions can be found at https://support.google.com/My-Ad-Center-Help/answer/12155764.

4.4 MailChimp

We use the service MailChimp, provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, for sending newsletters and email notifications. If you subscribe to our newsletter, the data you provide, including your email address, will be transferred to MailChimp, stored, and processed. This enables us to send you regular updates, offers, and information. When you sign up for the newsletter, your IP address and the date of registration are stored. This storage serves only as proof in case a third party abuses an email address and subscribes to the newsletter without the knowledge of the rightful owner. MailChimp offers extensive analysis options on how sent newsletters are opened and used. These analyses are group-based and are not used for individual evaluations. The data stored with MailChimp is deleted as soon as you unsubscribe from our newsletter. This does not affect data stored for other purposes. MailChimp has its own privacy policies and practices that may differ from those of our website. More information about MailChimp’s privacy practices can be found at: https://mailchimp.com/legal/privacy/. If you have questions about the data collected by MailChimp or wish to exercise your rights regarding these data, you should contact The Rocket Science Group, LLC directly.

4.5 MailChimp for WordPress

We use the “MailChimp for WordPress” plugin on our website to integrate subscription functionalities for our newsletter and other email communications via MailChimp, a service provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. When you subscribe to our newsletter via the form provided on our website, the data you enter, such as your email address and other information, will be transferred to MailChimp and stored there. This enables us to send you regular updates, offers, and other information. The “MailChimp for WordPress” plugin also supports the integration of certain WordPress functionalities with MailChimp, such as collecting statistics on subscription activity or customizing subscription forms.

4.6 Meta Ads

Our website uses Meta Ads, an online advertising service provided by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA (formerly known as Facebook, Inc.). With Meta Ads, we can place targeted ads to draw users’ attention to our products or services. When you visit our website, a cookie may be placed on your device via Meta Ads, allowing for an analysis of your website usage. Additionally, Meta can track your usage behavior across various websites and devices and use this information to place personalized ads. The data collected via the cookie is transferred to Meta and stored there. This data may be linked to your Meta account (formerly Facebook account) and used for Meta’s own advertising purposes. You can object to the use of cookies on your computer by configuring your internet browser to prevent the future placement of cookies on your computer or by deleting cookies already stored. However, disabling cookies may result in some website functionalities not working correctly. More information on how Meta Ads handles user data can be found in Meta’s privacy policy: https://www.facebook.com/privacy/policy/. If you do not want Meta to use data for advertising purposes, you can adjust the settings in your Meta account.

4.7 Dropbox

We use Dropbox, a service provided by Dropbox, Inc., 333 Brannan Street, San Francisco, CA 94107, USA, for storing and sharing documents and files on our website. Dropbox enables us to store files online, share them with others, and access them from various devices. When you access files stored on Dropbox via our website or upload files through a Dropbox plugin or interface, various personal data, such as your name, email address, and technical information about the access, are collected and transferred to Dropbox. These data are used by Dropbox to provide the storage and sharing service, ensure data security, and analyze usage. More information about how Dropbox handles user data can be found in Dropbox’s privacy policy: https://www.dropbox.com/privacy.

4.8 Google Cloud CDN

We use Google Cloud CDN (Content Delivery Network) by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) to optimize the delivery of our web content and accelerate access for our users. Google Cloud CDN uses globally distributed servers to deliver our web content more quickly to end users by serving content from the server closest to the user geographically. During the use of Google Cloud CDN, usage data, including your IP address, is transferred to Google and may be stored on Google’s servers. These servers may be located in the USA or other countries. More information about Google’s data collection and privacy practices regarding Google Cloud CDN can be found in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/ and in the specific information about Google Cloud CDN at https://cloud.google.com/cdn/docs.

4.9 Google Fonts API

We use the Google Fonts API by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) on our website to integrate fonts. When you visit our website, your browser establishes a connection to Google’s servers to download and display the fonts. During this connection, data, including your IP address and information about the browser you are using, is transferred to Google and may be stored on Google’s servers. These servers may be located in the USA or other countries. If you want to prevent the transmission of data in the context of using the Google Fonts API, you can block access to the domain fonts.googleapis.com in your browser settings. However, please note that our website may not be displayed correctly in this case.

4.10 jQuery CDN

We use the “jQuery CDN” (Content Delivery Network) provided by the jQuery Foundation on our website. The jQuery Foundation is a non-profit organization dedicated to developing and supporting open-source software, particularly the jQuery library. jQuery is a widely used JavaScript library that enables us to make our website functions more efficient and user-friendly. By using the jQuery CDN, we can ensure that this library loads quickly and reliably on our website, improving load times and the overall user experience. The jQuery CDN uses cookies and similar technologies to process user requests and optimize the delivery of the library. During this process, IP addresses and browser information of users may be collected to ensure the best possible performance and compatibility. If you do not want your data to be collected through the jQuery CDN, you can configure your browser to block the loading of content from external sources. However, please note that this may affect the functionality and user experience of our website.

4.11 Google Charts

We use Google Charts, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), on our website to integrate interactive charts and graphs. When using Google Charts, information about the use of the web graphics (including your IP address) may be transferred to Google’s servers and stored there. These servers may be located in the USA or other countries. Google will use the information collected through Charts to track and evaluate your use of the web graphics in connection with other Google services. If you want to prevent data transmission in the context of using Google Charts, you can disable JavaScript in your browser. However, please note that in this case, you may not be able to use all the functions of our website fully.

4.12 Google Maps

We use Google Maps, a mapping service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), on our website. Google Maps allows us to integrate interactive maps directly into the website, providing you with a convenient map function, for example, for location search or route planning. When you visit a page of our website that contains a Google Map, your browser establishes a direct connection to Google’s servers. This transfers data, including your IP address, to Google, and these data may be stored on Google’s servers. These servers may be located in the USA or other countries. This occurs regardless of whether Google provides a user account that you are logged into or whether there is no user account. Google stores your data as usage profiles and uses them for advertising, market research, and/or demand-driven design of its website. Such an evaluation is carried out even for users who are not logged in to provide demand-driven advertising. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.

4.13 Vimeo

Vimeo is a service provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. Vimeo is a platform that allows users to upload, share, and view videos. It also offers various tools for video producers to monetize their content and interact with their audience. We use Vimeo to integrate high-quality videos on our website and provide visual content to our visitors. This can include product presentations, tutorials, or other content relevant to our users. By embedding Vimeo videos, our visitors can view them directly on our website without being redirected to the Vimeo platform. When you visit a page of our website that contains a Vimeo video, your browser establishes a direct connection to Vimeo’s servers. During this connection, certain information is transferred to Vimeo, including your IP address. Vimeo also uses cookies and similar technologies to collect information about the use of the service and improve the user experience.

4.14 YouTube

Our website integrates videos from YouTube, a platform provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you view the videos or click on the play button, data, including your IP address and information about the browser you are using, is transferred to Google’s servers and stored there. These data are used to provide the video, monitor performance, and improve the user experience. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

4.15 Google Site Kit

We use the “Google Site Kit” plugin provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) for managing and analyzing our website. Google Site Kit allows us to integrate and manage various Google services, such as Google Analytics, Google Search Console, Google AdSense, and others, directly on our WordPress website. During the use of Google Site Kit, various data, including your IP address, information about the browser you are using, the subpages of our website you visit, and other interactions during your visit, are transferred to Google and stored on Google’s servers. These servers may be located in the USA or other countries. Google uses this information to provide us with detailed reports and analyses about website traffic, website performance, visitor interactions, and other relevant metrics.

4.16 WordPress

Our website is based on the WordPress platform, a content management system developed by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. WordPress allows us to create, manage, and publish content. During the use of our website, which is based on WordPress, various data, including your IP address, date and time of access, and information about the browser you are using, are collected and stored. These data are mainly used for administrative purposes and to ensure the smooth operation of the website. Some WordPress features, such as comments or contact forms, may collect additional personal data when you use them.

BrainBox Generators

BrainBox Generators is a service provided by BrainBox Solutions GmbH to identify all data protection-relevant services on a website and assist, among other things, in creating the privacy policy. No personal data is collected or processed.

SGCM-SSCM