Book an appointment

Privacy Policy of the Interregional Blood Transfusion Service SRC

The following information explains how we – Interregional Blood Transfusion Service SRC AG (Interregionale Blutspende SRK AG), Murtenstrasse 133, 3008 Bern, Switzerland – process your personal data (name, email address, etc.) in connection with the use of our website.

  1. Controller

    Interregional Blood Transfusion Service SRC AG (Interregionale Blutspende SRK AG, Murtenstrasse 133, 3008 Bern, Switzerland) is responsible for the data processing described below.

    If you have any data protection concerns, you can send them to the following contact address.

    privacy@ichspendeblut.ch

    Interregionale Blutspende SRK AG
    Data protection advisor
    Murtenstrasse 133
    3008 Berne

    The legal right to information can be asserted using the form «Request for information / request for cancellation». The information will be provided no later than 30 days after receipt of the complete request.

  2. Purposes of data processing and legal basis

    Personal data is always processed in compliance with the cantonal Data Protection Act (KDSG) that applies to the Interregional Blood Transfusion Service SRC and, where applicable, the Swiss Federal Act on Data Protection (FADP).

    If you have given us consent to process your personal data for specific purposes (e.g. receipt of a newsletter), we process your personal data within the scope of this consent. Consent granted may be withdrawn at any time, but this does not affect data processing that has already taken place.

    In addition, we process your personal data to the extent permitted and deemed appropriate by us for the following purposes in which we have a legitimate interest:

    • To ensure the functionality of the content or services offered on our website
    • To offer and further develop our offerings, services, websites and apps on which we have a presence
    • To ensure an appealing presentation of our online offerings and make it easy to find us on the website
    • To communicate with third parties and process their enquiries (e.g. applications, media enquiries)
    • To assert legal claims and mount a defence in connection with legal disputes and official proceedings
    • To prevent and investigate criminal offences and other misconduct (e.g. to conduct internal investigations or analyse data in order to combat fraud)
    • To safeguard our operations, in particular our IT systems, websites and apps
    • For marketing
  3. General data and information when visiting the website

    General data (log files)

    As long as you do not actively enter data on our website, we only collect data that your internet browser transmits to us automatically. This includes the following data: date and time of access to one of our websites, your browser type, browser settings, the operating system used, the last page you visited, the amount of data transferred and the access status (file transferred, file not found, etc.) as well as your IP address. The website cannot be displayed to you without temporary storage of your IP address. We use this data exclusively for the purpose of enabling the use of the pages you have accessed, for statistical purposes and to improve our online offering. We do not establish a link to any individual with this data. This data is not stored together with other personal data of the user.

    Booking appointments

    In the appointment booking system, you have the option of logging in using your donor number and surname in order to book an appointment. This data would have been originally collected directly from you at a time when you previously donated blood.

    You also have the option of logging in as a new donor. The following personal data is required for this: title, first name, surname, date of birth and phone number.

    Your master data (e.g. name, date of birth, address, blood group) and data essential for determining the next donation date (e.g. date of your last donation, donation type, preferred donation type) are transmitted to a secure server in Switzerland for the purpose of booking an appointment (there is an agreement in place with the service provider to safeguard data protection). Your data is only used for the purpose of booking an appointment.

    If you do not wish your data to be stored here in the appointment booking system, simply email us in confidence at info@ichspendeblut.ch or call our tollfree number 0800 148 148.

    Information on email transmission
    The following information explains the content of our emails as well as the login, transmission and statistical evaluation procedures. By booking an appointment, you consent to receive emails and to the procedures described below.

    Transmission
    We only send emails and other electronic notifications with the consent of the recipients as part of the appointment booking and appointment invitation processes.

    Statistical collection and analysis
    When emails are opened, technical information (e.g. information about the time at which the email is opened) is first collected. This information is used to enable technical improvements to the service and to verify its general availability. Data collected for statistical purposes includes information about whether emails are opened, when they are opened and which links are clicked. This data is not used to identify individuals.

    Marketing

    As far as personal data (e.g. name, address or email addresses) is collected on our pages, this is done as far as possible on a voluntary basis. As far as possible, the offerings and services may always be used without providing personal data. If you decide to provide us with personal data, we reserve the right to use this information for our own marketing purposes, unless you object. An objection may be made at any time; please submit this to us by email or in writing.

  4. Cookies

    We use cookies on our website to make it more user-friendly. Cookies are data that the visited website or its server stores on your computer via the browser in order to recognise it again in the future. Cookies are used, for example, to display complex and dynamic content, to recognise you the next time you visit our website and to improve user- friendliness. The cookies are either deleted immediately after you close your browser or are automatically removed from your computer’s hard drive after a certain period of time.

    By configuring your browser accordingly, you can prevent the installation of cookies at any time or have a warning displayed before cookies are placed in order to decide for yourself whether you wish to accept them. Cookies that have already been saved can be deleted at any time. The following pages provide guidance on managing cookies depending on your browser:

    In principle, our website can also be used without accepting cookies, however individual offerings on our website can then only be used to a limited extent or not at all. We use cookies that are absolutely necessary to make the website available on the basis of our legitimate interest.

  1. Data protection with regard to applications and the application process

    We collect and process the personal data of applicants (e.g. contact details, CV, qualifications, cover letter) for the purpose of administering the application process. If you are hired by our company, your personal data is recorded in a personnel file. If your application is unsuccessful, your data and documents are deleted or returned to you three months after the application process has ended.

  2. Initiating contact via form or email

    If you contact us via email or a form, the data is transmitted to the recipient designated internally for further processing and is stored. We only use the information you provide voluntarily (e.g. name, email address, telephone number, query) to process your enquiry and involve the internal departments and persons responsible for this.

    We would like to point out that communication via email and sometimes also via contact form does not take place via a secure or encrypted data connection. This means that your data may be lost or viewed by unauthorised persons during transmission. You therefore contact us via form or email at your own risk; we assume no responsibility in this context and reject any liability claims asserted in this regard.

    When emails are opened, technical information (e.g. information about the time at which the email is opened) is first collected. This information is used to enable technical improvements to the service and to verify its general availability. Data collected for statistical purposes includes information about whether emails are opened, when they are opened and which links are clicked. This data is not used to identify individuals.

  3. Third-party tools and plugins

    YouTube

    On our website, you can consent to the corresponding cookies in order to establish a connection to YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA; subsidiary of Google LLC). When you click on the thumbnail, the provider is notified that you have accessed our website and receives usage data that is required for technical reasons. If you use a YouTube account at the same time, YouTube can associate this information directly with your personal account.

    We have no influence over how the provider processes your data. For further information on how user data is handled, please refer to the YouTube Privacy Policy: https://www.google.de/intl/de/policies/privacy.

    Google Maps

    Our website occasionally uses the Google Maps map service from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) via an API to display an interactive map and provide directions. When using Google Maps, information about your use (e.g. IP address) may be stored and transmitted to a Google server in the USA. You have the option of deactivating the Google Maps service and thus preventing data from being transferred to Google Maps. However, please note that in this case you will not be able to view maps on our website. For further information on how user data is handled, please refer to the Google Privacy Policy.

    Matomo Analytics

    Our website uses Matomo web analytics software (matomo.org), a service provided by InnoCraft Ltd., 150 Willis Street, 6011 Wellington, New Zealand (‘Matomo’). Matomo can be used to create and evaluate pseudonymised user profiles. Cookies may be placed for this purpose (see above for information on cookies). Amongst other things, the cookies enable the internet browser to be recognised. The data collected using Matomo technology (including your pseudonymised IP address) is processed on our servers.

    The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not combined with personal data about the bearer of the pseudonym.

    Matomo is used to statistically analyse user behaviour for optimisation and marketing purposes. This also represents a legitimate interest of ours.

    You can prevent the storage of cookies and thus the analysis by Matomo via settings in your browser.

    Integration of other sites of the Interregional Blood Transfusion Service SRC and sites of external service providers via iFrame

    We use iFrame to integrate services from external sites into our website. This is so that these services and information can be provided centrally and in a user-friendly manner on our website. By calling an external site integrated into our website using iFrame, data may be transmitted to it (e.g. IP address, etc.) and cookies can be set and read by it. For further information on how user data is handled, please consult the external website or its operator.

    Social media plugins

    We also use Facebook Social Plugins on our website, which are operated by Facebook Ireland Ltd., Dublin, Ireland for users from Europe. In addition, we use Twitter plugins on this website. For users from Europe, the responsible entity for the operation of the platform is Twitter International Company, Dublin, Ireland.

    Functions from the Instagram service are integrated into our website. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

    The social media plugins have been set up using a two-click solution, meaning that they are only activated when you click on the provider’s icon. Therefore, data is not automatically transmitted to social media services when you visit our website. Only when you click on an icon does your browser establish a connection to the servers of the operator of the respective social media service. In this case, the social media service provider learns about your visit to our website and your IP address, regardless of whether you have an account with the respective service. If you do have such an account and are logged in, the data may be assigned to your social media profile.

    We have no influence over how the social media service providers process your data; you can find more information on this in the corresponding privacy policies. The Facebook Privacy Policy can be accessed at www.facebook.com/policy. Some of your data is transmitted to the USA for this. If you would like to opt out of advertising in this regard, you can do so here: www.facebook.com/settings?tab=ads.

    The Twitter Privacy Policy can be found www.twitter.com/de/privacy.

    For more information about Instagram, please refer to the Instagram Privacy Policy: instagram.com/about/legal/privacy/.

    If you do not want your data to be processed accordingly by the activated plugins, please ensure that you do not click on the corresponding icons.

    For more information about this, please refer to the Instagram Privacy Policy: instagram.com/about/legal/privacy/.

  4. Retention period

    We process and store your personal data for as long as it is necessary for the fulfilment of our contractual and legal obligations or for the purposes pursued by the processing, and also in accordance with statutory obligations regarding retention and documentation. Personal data may be retained for the period in which claims can be asserted against our company and insofar as we are otherwise legally obliged to do so or legitimate interests require it (e.g. for evidentiary and documentation purposes). As soon as your personal data is no longer required for the aforementioned purposes, it is deleted or anonymised to the extent possible.

  5. Data maintenance

    We rectify and complete stored data as soon as we become aware of a change. If necessary, we also notify data recipients of this. We delete stored data using an automated procedure if the legal or contractual retention period has expired or if the data is no longer needed.

  6. Disclosure of data and transfer of data abroad

    We only disclose your personal data to third parties in order to use technical or organisational services that we require for the fulfilment of the stated purposes or for our other business activities.

    Your personal data is only disclosed further if you have given your express consent or if the data is anonymised in such a way that it is no longer possible to identify you personally.

    If data is transferred to a country without an adequate level of data protection, we ensure an adequate level of data protection as required by law through the use of corresponding contracts (in particular on the basis of what are known as standard contractual clauses) or binding corporate rules, or rely on the statutory derogations based on consent, the performance of a contract, the establishment, exercise or enforcement of legal claims or overriding public interest.

  7. Data security

    When you visit this website, your data is transported over an open network accessible to everyone. This means that the data may be transferred across borders, even if you and the Interregional Blood Transfusion Service SRC are located in Switzerland. This involves the following risks in particular: the data may be intercepted and viewed by third parties, which would allow those third parties to infer an existing or future relationship between you and the Interregional Blood Transfusion Service SRC. You should also take note of the fact that the information that you transmit to the Interregional Blood Transfusion Service SRC via an electronic medium, in particular by email, SMS, etc., and that the Interregional Blood Transfusion Service SRC transmits to you is generally unencrypted. Even if a transmission is encrypted, the sender and recipient remain unencrypted. It may therefore be possible for third parties to infer an existing or future relationship with the Interregional Blood Transfusion Service SRC. In addition, the Interregional Blood Transfusion Service SRC wishes to expressly draw your attention to the risk of viruses and the possibility of targeted hacking attacks. In order to combat viruses, we recommend that you use the latest browser versions and install continuously updated anti-virus software. As a general rule, you should avoid opening emails of unknown origin and unexpected attachments to emails.

    If you access pages and files within this offering and are asked to enter data about yourself, please note that this transmission over the internet is secured using SSL encryption. This Privacy Policy does not apply to the content of other websites which you can access via links. We do not accept any responsibility for these.

  8. Rights of website users

    You have the right to request information about the processing of your personal data at any time, free of charge, by contacting the entity specified in Section 1. Other rights, such as the right to erasure of data, the right to rectification of data, the right to restriction of data processing, the right to data portability, the right to revoke any consent you have given and the right to object to the processing of your personal data, apply to the extent prescribed by law. Please note, however, that we reserve the right to enforce the restrictions provided for by law, for example if we are obliged to retain or process certain data, have an overriding interest in it or require it to assert claims.

    To exercise such rights, you will generally need to provide unambiguous proof of your identity (e.g. by means of a copy of your ID).

    The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of our website. Users of our website therefore have no right to object to this.

  9. Amendments

    We may amend this Privacy Policy at any time and without prior notice. The latest version published on our website applies.

    August 2023