Data privacy statement
Version dated 1 September 2023.
The following information is intended to show you which data we process on our website and your rights in this matter. We take the protection of your personal data seriously, and we only process your data in accordance with the legal requirements. Personal data are understood to be any information related to an identified or identifiable natural person.
In principle, the legal provisions governing the use of the websites of the Swiss Federal Administration apply to offers on our website (www.jodtabletten.ch). The relevant legal provisions can be found here: https://www.admin.ch/gov/en/start/terms-and-conditions.html. In particular, the offers are subject to Swiss data protection law as well as any applicable foreign data protection legislation, such as that of the European Union (EU GDPR).
1. Legal basis
This data privacy statement is in line with the requirements of the Swiss Data Protection Act (DPA) as well as any applicable foreign data protection legislation, such as that of the European Union (EU GDPR).
2. Responsibility for data processing
The Swiss Iodine Tablets Office, ATAG Wirtschaftsorganisationen AG, is responsible for processing the data on our website on behalf of the Armed Forces Pharmacy, Armed Forces Staff / Medical Service.
If you have any concerns or comments about data protection, you can send them to us at the following address or via the e-mail address provided below:
Swiss Iodine Tablets Office
ATAG Wirtschaftsorganisationen AG
P.O. Box 1023
3000 Bern 14
Tel.: 031 380 79 77
E-mail: info@jodtabletten.ch
www.awo.ch
Data processing for the purpose of contacting us is based on your voluntarily given consent. The personal data are automatically erased after your query has been handled.
3. Website hosting
Hostpoint AG
Neue Jonastrasse 60
8640 Rapperswil-Jona
Switzerland
You can find information about data privacy measures employed by the hosting provider here: https://www.hostpoint.ch/en/hostpoint/contact-gtc.html#datenschutz
4. Recording and processing of personal data
Where permitted and in our view appropriate, we process the personal data that we collect during the operation of our website from its users. We collect, process and store your personal data within the framework of the execution of legal tasks and in order to meet any contractual obligations. We use these data to ensure the error-free use of the website and to analyse and refine the website.
The following connection data are saved automatically in log files by the hosting provider when our website is accessed:
- IP address (i.e. a unique address that identifies your computer on the internet
- Date, time, browser request
- Browser type and version
- Operating system used
- Referrer URL (origin of the user’s website)
- Host name of the accessing computer
These data cannot be assigned to specific individuals. These data are not combined with other data sources. We use IP addresses – which are anonymised beforehand – to ensure the functioning of the website, to assist in managing the website and to collect general demographic information for overall use. These usage data form the basis of statistical, impersonal evaluations for the purpose of tracking trends so that we can improve the information on offer.
You can find more information about the collected data at our hosting provider: https://support.hostpoint.ch/en/administrative/gdpr/frequently-asked-questions-about-gdpr/which-data-relating-to-my-visitors-does-hostpoint-always-process
5. Cookies, tracking and third-party services
We use so-called session cookies on our website; these are needed to ensure that the basic functions of the website operate correctly (e.g. secure login or language settings). These cookies are small text files that are stored temporarily on your computer and deleted from your hard drive at the end of the browser session. No personal data are stored when these cookies are used.
You can delete cookies entirely or deactivate or restrict their transmission by changing the settings in your internet browser. If cookies for our website are deactivated, it may not be possible to use all the functions of the website in full.
Interactive map of the distribution area
The interactive map on this website draws on services provided by the Environmental Systems Research Institute, Inc (Esri) headquartered in the USA. The purpose of this map is to offer visitors to our website an illustration of the area in which the iodine tablets are distributed that is as accurate and user-friendly as possible.
Use of the interactive map requires your IP address to be saved for technical reasons. Depending on the map, Esri may also store cookies and other information on users’ computers and access them. This information is transmitted to servers in the EU and the USA on behalf of Esri and saved there. As the operator of this website we have no influence on this transmission of data. While we can assume that information shared through the interactive map is not personal data from the point of view of Esri and its contractual partners, it is possible that they may use these data to identify visitors for their own purposes. In this case your personal data are processed by Esri on the service provider’s responsibility and in accordance with their data privacy provisions.
You can find obtain information about Esri’s data privacy provisions by following this link: https://www.esri.com/en-us/privacy/privacy-statements/privacy-statement
Google Web Fonts
We use the Google Web Fonts library of fonts on our website to ensure that it is visualised correctly across all browsers. Google Web Fonts is supplied by Google Ireland Ltd (headquartered in Ireland). Here Google Ireland uses Google LLC (headquartered in the USA) as the order processor (referred to in the following as “Google”). The web fonts are stored in the cache of your browser to that they do not have to be loaded repeatedly when you access the website. A connection to Google is established automatically when Google Web Fonts is accessed. As the operator of this website we have no influence on this transmission of data. It is theoretically possible the Google may collect data when this connection is established and may use them to identify visitors for its own purposes, to set up personal profiles and to link these data with the Google accounts of these individuals. If you have registered with Google, Google knows who you are. In this case your personal data are processed by Google on the service provider’s responsibility and in accordance with their data privacy provisions.
You can obtain information about the way Google processes data in their data privacy provisions at the following link: https://policies.google.com/privacy?hl=en
Browsers that do not support Google Web Fonts display content in a standard font.
Google Invisible reCAPTCHA
We use Google Invisible reCAPTCHA to optimise the functionality of our website and to protect it against cyberattacks. Google Invisible reCAPTCHA is supplied by Google Ireland Ltd (headquartered in Ireland). Here Google Ireland uses Google LLC (headquartered in the USA) as the order processor (referred to in the following as “Google”). The tool helps us to verify whether our website is being accessed by a human or by a robot or spam software. Here Google Invisible reCAPTCHA analyses mouse and keyboard behaviour, for example, and accesses data including the connection data mentioned in point 4. The tool uses the use profile created in this way to decide whether the site is being accessed by a human or a bot. A connection to Google is established automatically during this process. As the operator of this website we have no influence on this transmission of data. It is theoretically possible the Google may collect data when this connection is established and may use them to identify visitors for its own purposes, to set up personal profiles and to link these data with the Google accounts of these individuals. If you have registered with Google, Google knows who you are. In this case your personal data are processed by Google on the service provider’s responsibility and in accordance with their data privacy provisions.
You can obtain information about the way Google processes data in their data privacy provisions at the following link: https://policies.google.com/privacy?hl=en
Cloudflare
Our hosting provider uses DNS and web security services and a content delivery network (CDN) provided by Cloudflare. Cloudflare is a company headquartered in the USA. The hosting provider uses these services to improve the loading times of our website and to protect us against so-called DDoS attacks. Cloudflare has access to the data transmission between our website and its visitors for this purpose. This also includes the connection data mentioned in point 4. While Cloudflare states that this is not the case, it is theoretically possible the Cloudflare may collect data while accessing data transmission and may use them to identify visitors for its own purposes or pass these data on to third parties. Cloudflare moreover uses various cookies to maximise network resources, to manage data transmission and to protect websites against malicious data transmission. The cookies are stored locally on the devices of visitors to a website. The information obtained by these cookies is usually communicated to a server operated by Cloudflare in the USA and stored there. As the operator of this website we have no influence on this transmission of data.
You can obtain more detailed information about the cookies used by Cloudflare by following this link: https://developers.cloudflare.com/fundamentals/get-started/reference/cloudflare-cookies/
You can obtain general information about the way Cloudflare processes data in their data privacy provisions at the following link: https://www.cloudflare.com/privacypolicy/
Logaholic Basic
As part of our continual efforts to enhance its user-friendliness, and also to respond as effectively as possible to its visitors’ needs, we collect statistical data on our website’s use. To do so we utilise the Logaholic Basic analysis tool, which is supplied by our hosting provider (3).
Logaholic is a Dutch-based company. We have adjusted the tool’s settings to ensure that all IP addresses are anonymised in the analysis process. So none of the data collected and evaluated can be attributed to any specific individual.
Further information on Logaholic’s data protection provisions will be found at: https://www.logaholic.com/privacy/
General information on Logaholic and on how its analysis tool is used on our website is available from our hosting provider: https://support.hostpoint.ch/en/products/logaholic
6. Sharing of data and transfer of data abroad
Use of your personal data in ways other than those mentioned in points 4 – 5, and in particular the selling, sharing or transmission of these data to third parties (in this country and abroad), is expressly excluded.
7. Period for which personal data are stored
As soon as your personal data are no longer required for the above purposes, they will be deleted wherever possible or anonymised. In accordance with the Federal Act on the Surveillance of Post and Telecommunications (SPTA), our hosting partner (see point 3) has a legal obligation to store data on connections (see point 4) made in the past six months. Connection data are shared exclusively on request and in the context of potential crimes with authorised authorities and services of the federal government and the cantons. In all other cases connection data are deleted once the storage period has expired.
8. Data security
We adopt appropriate technical and organisational security measures to protect your personal data against unauthorised access and misuse.
9. Rights of the data subjects
The right to information described in Article 25 and 26 DPA (https://www.fedlex.admin.ch/eli/oc/2022/491/de) grants every person, irrespective of place of residence and nationality, the possibility to ask the operator of this website whether personal data about them are being processed. The right to information is the way in which affected persons can review the processing of their data and request any necessary rectification. They can also request the rectification, erasure or blocking of their personal data at any time. Data that we require to complete outstanding tasks or to enforce existing rights and claims, as well as data that we are obligated to retain under applicable legal provisions, are not erased.
Issuing and transmission of data
In principle, upon written request, you have the right to receive the personal data concerning you that are stored when you visit our website. These data must be provided in a structured, common and machine-readable format (e.g. as a PDF file). You also have the right to request that we return the data that you provided to us upon visiting our website.
Right of revocation
If you have issued your consent, for example, to us collecting, storing and using personal data in the context of you using our website or utilising our services, you can revoke this consent at any time. You can do so via e-mail or by issuing the revocation in writing to the office named under point 2. The effects of the revocation are limited to the storage and use of personal data that may not already be stored and used without your consent on the basis of legal permissions. The revocation also has no effect on any previous processing carried out on the basis of your consent.
Assertion of these rights
The ability to exert these rights usually requires you to prove your identity unequivocally (e.g. by providing a copy of your identity document if your identity is otherwise not clear or cannot be verified). You can contact us by written request at the office whose details are given in point 2 in order to claim your rights.
All data subjects are additionally entitled to enforce their claims in court or to submit a complaint to the competent data privacy authority. The competent data privacy authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
10. Liability for links
We have no influence on the current and future design or the contents of the linked pages. This statement applies to all links and references used within our own Internet offering. Liability for any illegal, incorrect or incomplete contents and, in particular, for any damage arising from the use or non-use of such information lies solely with the provider of the page to which reference is made and not to the party who merely makes reference to the publication in question via links. We exclude all liability to the extent permitted by law.
11. Amendments
We may modify this Data Privacy Statement at any time without notice. The valid version is always the version currently published on our website.