Central privacy policy

2 Specific (offline) processing

Below you will find information about specific (offline) processing we have carried out. This is not an exhaustive list. Other data protection notices, general terms and conditions or other declarations may regulate specific circumstances or describe certain processes in more detail.

2.1 Provision of contractual services

We process personal data to the extent necessary in each case in order to provide you with our contractual or pre-contractual services and for the performance of other services requested by you, in particular transport and logistics services and customs clearance. The data processed in this context, the type, scope, purpose and necessity of its processing are determined by the underlying contractual relationship.

The processed data includes, in particular, contact and identification data, contract data and financial data.

The data is deleted when it is no longer required for the fulfilment of contractual or legal obligations. Otherwise, the statutory retention obligations apply.

2.2 Job applications

2.2.1 Registering an applicant account 

To be able to apply for an open position with us, you need to register an applicant account. To open such an account, you must enter various data such as e-mail address, desired password, first name and surname in the input mask. We need this information to provide you with password-protected access to your stored applicant data and to process your application. 

Our applicant portal is provided by Abacus Umantis AG (“Umantis”), based in Switzerland, a group company of the Abacus Group in Switzerland.  

Accordingly, the information you provide and your application documents are stored on the Abacus servers. In order to guarantee the protection of your personal data, we have concluded an order data processing agreement (ADV) with Umantis.  

If personal data is disclosed in countries which, according to the Federal Council, do not have an adequate level of data protection, Abacus provides suitable guarantees, such as the conclusion of standard data protection clauses, in accordance with its privacy policy.  

You can delete your account and the applicant data stored in it at any time using the corresponding button within your account. Please note that your account will be permanently deleted and all your information will be removed and you will be withdrawn from all jobs for which you have applied. 

Further information on data protection and data security at Umantis and Abacus can be found in their privacy policy. 

2.2.2 Processing your applicant data 

When you apply for a job with us, we process the personal data that we receive from you as part of the application process or that you upload to the application portal. In addition to your personal details, education, work experience and skills, this includes the usual correspondence data such as postal address, e-mail address and telephone number. In addition, all documents submitted by you in connection with your application, such as your letter of motivation, CV and references, will be processed. 

We may also process information from third parties, such as information from official registers (e.g. credit or criminal record information), references from previous employers or other information and information from professional networks. If you provide us with data of other persons (e.g. reference persons), you only provide us with their data if you are authorised to do so and if this data is correct. 

This data will only be stored, analysed, processed or forwarded within The Salvation Army to the responsible departments (in particular HR employees and managers) as part of your application. It may also be processed for statistical purposes (e.g. reporting). In this case, it is not possible to draw conclusions about individual persons. 

Your applicant data is stored separately from the other user data and is not merged with it. 

Your applicant data is processed to fulfil our (pre-)contractual obligations as part of the application process. 

You can object to this data processing at any time and withdraw your application. To do so, please use the corresponding functions of our applicant portal or send your objection to the person named as the contact person in the job advertisement or to the (e-mail) address specified in section 1.1. 

If we conclude an employment contract with you, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. 

If the application process ends without employment, your personal data will be stored for a further 6 months for documentation purposes and then deleted or returned to you, unless you have given us your consent to use your details for further application processes with us. You have the option of revoking this consent at any time by using the corresponding functions of the applicant portal.  

Your applicant profile and your correspondence are excluded from the automatic deletion described above. These remain in the system beyond the application for statistical purposes. Of course, you can also delete your data yourself at any time within the applicant portal.

2.3 Real estate

We own various properties in Switzerland, most of which we rent out (for a limited or unlimited period). The rental properties are mainly flats and houses.

If you are an existing tenant or if you are interested in one of our rental properties and would like to apply for it, we process the personal data that you provide to us, that we collect about you or that we have received from third parties. This includes in particular

• Contact and identification data, such as date of birth, gender, marital status, AHV number, nationality;
• Financial data, such as information on income and professional situation, debt collection or debt collection;
• Contract data, in particular information on security deposits, household contents and personal liability insurance (incl. policy numbers), rental property, rent and ancillary cost invoice, takeover/transfer protocol, number of persons in the household or condition and furnishings of the rental property.

We primarily use the personal data collected

• to receive and check contact enquiries and applications from prospective tenants;
• to record the condition and equipment of the rental property;
• for the handling of the tenancy, in particular for the settlement of rent and ancillary costs;
• to fulfil repair and maintenance obligations for the rental properties;
• on tenant behaviour when using the rented property, where necessary, e.g. breaches of contract and behaviour that may lead to damage;
• in legal disputes;
• for statistical purposes (e.g. reporting).

If you are interested in a rental property, we will process your applicant data to fulfil our (pre-)contractual obligations as part of the application process.

You can object to this data processing at any time and withdraw your application. Please send your objection to the person named as the contact person in the rental advertisement or to the address given in section 1.1 (e-mail) address.

If we conclude a rental agreement with you, your data will be stored for the purpose of processing the rental relationship in compliance with the statutory provisions, otherwise it will be destroyed, deleted or returned to you.

We also disclose personal data to third parties within the scope of our business activities and for the purposes mentioned above, insofar as this is permitted and appropriate, in particular

• craftsmen and experts or the respective building insurer and liability insurer of the property;
• Energy supply companies;
• other tenants at their request to fulfil legal claims (e.g. by granting them access to all original receipts and consumption records on which the respective annual statements are based).

We generally delete our tenants’ data after termination of the tenancy, subject to the statutory limitation period for claims arising from the tenancy.

2.4 Shelters / emergency accommodation

The Salvation Army runs shelters / emergency accommodation at various locations. Our (temporary) accommodation services are generally open to all people aged 18 and over who are homeless or in need of shelter. People who require medical care cannot be looked after by us and can only be accommodated on a short-term basis.

If you would like to take advantage of our accommodation offer, our local staff will conduct a preliminary discussion with you. Quick and unbureaucratic admission is important to us. However, the following must be clarified and taken into account:

• Information about your person and situation
• Other organisations involved
• Recognition of the house rules
• Clarification of residence financing
• Our resources in terms of beds, care, group constellation

We process various personal data (in particular your first name and surname, nationality, date of birth, entries/exits and, if applicable, telephone number) so that we can issue you with a residence card, provide you with a personal means of access (usually a badge), which you can use to enter your room and lock up your personal belongings or contact you if necessary. We can also process personal data, for example on marital problems or addictions. We need this data in order to be able to offer you support if required or for room allocation.

If you have been registered with us by a third party (e.g. social services), we will process the data that the third party in question has made available to us.

The data collected from you or information about your whereabouts will not be passed on without your consent. This does not apply to anonymised data or statistical evaluations (e.g. number of entries and exits, the age of residents and their gender), which we must disclose to the respective commissioning municipality (e.g. City of Bern). It is not possible to draw conclusions about you or individual persons.

Insofar as our accommodation offers are video-monitored, we refer you in this regard to our explanations in section 2.6.

If you would like to benefit from our counselling and/or mediation services, for example in the search for viable follow-up solutions (e.g. housing search) or mediation with medical and official specialist agencies as well as further social support institutions, we refer you to the following point regarding data processing in section 2.6.

In principle, we store the data we process about you for as long as we need it to provide our services to you. Thereafter, subject to statutory retention periods, it will be destroyed or deleted.

2.5 Royal Rangers

Our various Royal Rangers departments collect and process various personal data of their members and legal representatives. This includes, in particular, first and last name, (e-mail) address and telephone number. We need this information for the administration of our members, to organise our events (e.g. summer camps) and other activities and to contact our members, in particular to send them information.

We may also process particularly sensitive personal data, e.g. on allergies. We process such data to ensure the safety and health of individuals.

We may also make video and audio recordings of certain events. In this regard, please note our comments below (sections 0 and 4.25).

All data that we process in connection with the Royal Rangers will be treated confidentially and will only be used within the Royal Rangers organisation. Data will only be passed on to third parties (e.g. other Royal Rangers departments) if we have the necessary consent, if there is a legal obligation to do so or if we have a legitimate interest in doing so and your interests to the contrary do not prevail.

In connection with the organisation of camps, the attendance of training courses or events, we may be obliged to pass on your data to the Federal Office of Sport or the Federal Social Insurance Office. Further information on this can be found on the website of Youth+Sport (Federal Office of Sport). In addition to your personal details, this also includes your AHV number. For safety reasons and to ensure rescue in an emergency, the data may also be transmitted to Rega.

For applications for subsidies from state institutions such as lottery funds, cantons or municipalities, membership data can be forwarded to the relevant authorities.

In principle, we store the data processed about you for as long as we need it for the individual purposes for which the data was collected. Thereafter, subject to statutory retention periods, it will be destroyed or deleted. This may be the case, for example, in the case of data relating to course and camp participants in connection with the requirements of Youth+Sport or the Federal Office of Sport.

2.6 Video surveillance

In order to safeguard our domiciliary rights and to ensure the protection of our employees and other persons as well as assets, data and secrets belonging to or entrusted to us, we may use video surveillance systems and other measures for IT, building and system security at our locations, such as access controls, visitor lists, network and mail scanners and telephone recordings.

If our locations are under video surveillance, we will inform you of this with appropriate signs. The recordings are destroyed or transferred again after a predefined period has expired. The recordings will only be kept for longer if a criminal offence or an act relevant to liability law is detected and the recordings are required for criminal prosecution, or if we need the recordings to enforce justified claims, in particular claims under civil law.

If proceedings are initiated by a criminal prosecution authority, the recordings will also be retained until the proceedings have been finalised.

Outside of the procedures mentioned, no copies of the recordings made will be made and they will not be made accessible to unauthorised third parties.

4 Specific edits on individual websites

Below you will find information on specific processing on some of our websites, which you may not be able to recognise immediately. By clicking on the respective button (“Expand”), you can find out on which of our websites the processing described in each case takes place.

4.1 Church Tools

4.2 Google Services

On our websites, we use various services of Google LLC, based in the USA, or if you have your habitual residence in the European Economic Area (EEA) or Switzerland, Google Ireland Ltd, based in Ireland (“Google”). Google LLC is always responsible for the processing of personal data when using “YouTube” and “Google Maps”. We use the following Google services on our websites:

• Google Tag Manager
• Google Analytics
• Google Ads
• Google Maps
• YouTube
• Google reCAPTCHA
• Google Workspace
• Google Translate
• Google Photos
• Google Hosted Libraries

Further information on the individual services and on which of our websites they are specifically used can be found below.

Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable your use of our website to be analysed. The information thus generated about your use of our website may be transmitted to a Google server in the USA or other countries and stored there. Information about the locations of Google’s data centres can be found here.

We use tools provided by Google which, according to Google, can process personal data in countries in which Google or its subcontractors maintain facilities. In its “Data Processing Addendum for Products where Google is a Data Processor” and, in connection with Google Workspace, in its “Cloud Data Processing Addendum“, Google promises to ensure an adequate level of data protection by relying on the EU standard contractual clauses.

Google is also certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework.

For more information on processing by Google and privacy settings, please refer to Google’s privacy policy or privacy settings.

4.2.1 Google Tag Manager

Our websites use the Google Tag Manager. Google Tag Manager allows website tags to be managed efficiently. Website tags are placeholders that are stored in the source code of the respective website, e.g. to record the integration of frequently used website elements, such as code for web analysis services. Google Tag Manager works without cookies and triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

Further information can be found in the Google Tag Manager terms of use.

4.2.2 Google Analytics

We use the web analysis service Google Analytics 4 for the purpose of analysing our websites and their visitors as well as for marketing and advertising purposes.

Google Analytics uses cookies that are stored on your end device (laptop, tablet, smartphone, etc.) and enable your use of our website to be analysed. This allows us to evaluate usage behaviour on our website and use the statistics/reports obtained to make our offer more interesting.

In Google Analytics 4, the anonymisation of IP addresses is activated by default. This means that your IP address is truncated by Google within Switzerland or the EU/EEA before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there.

Google uses this information to analyse your [pseudonymous] use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. When you visit our website, your user behaviour is recorded in the form of events (such as page views, interaction with the website or your “click path”) as well as other data such as your approximate location (country and city), technical information about your browser and the end devices you use or the referrer URL, i.e. the website/advertising media from which you came to our website.

You can prevent the collection and transmission of the data generated by the cookie and related to your use of our website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on to deactivate Google Analytics. If you wish to object to interest-based advertising by Google, you can use the setting and opt-out options provided by Google.

An overview of the use of data in Google Analytics and the measures taken by Google to protect your data can be found in the Google Analytics help centre.

Further information on the terms of use of Google Analytics and on data protection at Google can be found in the respective documents.

4.2.3 Google Ads

Our website uses the online advertising programme Google Ads, which is part of Google Marketing Services, to draw attention to our attractive offers with the help of advertising material on external websites. We can determine how successful the individual advertising measures are in relation to the advertising campaign data.

Google Ads places a cookie on your computer (“conversion cookie”) if you have reached our website via a Google advert. These cookies generally lose their validity after 30 days and are not intended to identify you personally.

These cookies enable Google to recognise your internet browser. If you visit certain of our websites and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to our website. A different cookie is assigned to each Google Ads customer. Cookies can therefore not be tracked via the websites of Google Ads customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical analyses from Google. These analyses enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify you on the basis of this information.

Based on the information collected, categories relevant to your interests are assigned to your browser. These categories are used to display interest-based advertising.

By using Google Ads, we reach users who have already visited our website. This allows us to present our adverts to target groups who are already interested in our products or services.

You can prevent participation in this tracking process in various ways, including

• by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any adverts from third-party providers;
• by deactivating cookies for conversion tracking by making the appropriate settings for personalised advertising from Google;
• by deactivating the interest-based adverts of providers that are part of the self-regulation campaign “YourAdChoices” campaign;

You can find more information on how it works and on data protection in the Google Ads privacy policy and terms of use.

4.2.4 Google Maps

We use the online map service Google Maps to integrate interactive maps on our website.

When you access a website on which Google Maps maps are embedded, Google Maps will set a cookie. As a rule, this cookie is not deleted when the browser is closed, but only expires after a certain period of time, unless you delete it manually beforehand.

By using Google Maps, information about your use of our website (including your IP address) may be transmitted to a Google server in the USA and stored there. Google may store this data as usage profiles for the purposes of customising its services, advertising and market research. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish this to happen, you must log out beforehand.

If you do not agree with this processing of your information, you have the option of deactivating the Google Maps service. To do this, you must deactivate the Java Script function in your browser. However, this may also affect other functions of our website.

Further information can be found in the terms of use for Google Maps and Google’s privacy policy.

4.2.5 YouTube

On our website, we use the services of the provider YouTube LLC, based in the USA (“YouTube”), a subsidiary of Google LLC. (“Google”).

When you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. This information (including your IP address) may be transmitted to a Google server in the USA and stored there. If you are logged into your YouTube account at the same time, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account before visiting our website.

Further information can be found in YouTube’s terms of use and Google’s privacy policy.

4.2.6 Google reCAPTCHA

The reCAPTCHA function helps us to differentiate whether an entry (e.g. in a contact form) is made by a human or automatically by a computer programme (so-called bots). In this way, we want to ensure the security of our website and, in particular, protect it from automated entries (or attacks) and spam.

For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. These analyses run completely in the background and start automatically as soon as you access our website. To differentiate between humans and bots, Google analyses various information, such as the IP address of the end device used, the time spent on the website, the browser and operating system used or mouse movements made by the website visitor.

Further information on the use of the data collected by Google in this way can be found in Google’s privacy policy and terms of use.

4.2.7 Google Workspace

We use various Google Workspace products, in particular Google Forms and Google Calender.

Google Forms

Some of our online forms, such as “Submit a prayer”, were created using Google Forms, a Google Workspace product (“Forms”). The data you enter in the respective form is stored in our “Google Drive”, a cloud storage provided for us by Google, in Europe. If you contact us via a Google Forms form, please read the information on contacting us (section 3.2) should also be observed.

Forms enables us to provide you with online forms and to analyse your input. According to Google’s Privacy Resource Centre, your personal data will not be used to create advertising profiles or to improve Google Ads products and will not be sold to third parties.

Further information about Google Workspace and Google Forms in particular can be found on the Google Workspace website or the Google Forms product page.

Google Calendar

We use the calendar service “Google Calendar” on our website. With Google Calendar, we want to offer all interested parties an appealing presentation of our website and make it easy to find the dates and events we offer.

As soon as you visit one of our websites on which Google Calendar is integrated, your browser automatically establishes a connection with Google. Your IP address and other similar data, such as URLs visited, may be transmitted to a Google server and stored there. We have no influence on this data transfer.

You can prevent this processing by Google by deactivating JavaScript in your browser. Please note that if you do this, you may not be able to use all the functions of our website.

Further information on how Google Calendar works can be found on the corresponding Google Workspace product website.

4.2.8 Google Translate

We offer our website visitors the option of using our website in another language. For this purpose, we have integrated Google Translate on our website.

When you visit one of our websites on which we have integrated Google Translate, Google processes various data, in particular the URL of the page visited and your IP address and, if applicable, the language you use. This processing is necessary in order to display our website to you in the language you have selected. We have no influence on the data transfer and other processing operations by Google. We are also not aware of the scope of the data collection, the purposes or the storage periods. Google uses the data it processes, usually to optimise its services.

We would like to point out that the translations generated do not necessarily correspond to the original text on our website and may even be incorrect or offensive.

You can prevent this processing by Google by deactivating JavaScript in your browser. Please note that if you do this, you may not be able to use all the functions of our website.

For more information about Google Translate and Google’s privacy policy and terms of use in general, please visit the Google Translate website, Google Translate Help, or Google’s Privacy Policy & Terms of Use.

4.2.9 Google Photos

We use “Google Photos”, a Google service, to document our events and functions and to store photos and video recordings (“recordings”) (see section 4.2). Google Photos enables us to make recordings of events and functions available to the respective participants in a simple manner. All recordings that we upload to Google Photos are stored on a Google server.

Before we make any recordings of you, we ensure that we have the necessary consent from you or your legal representative. Without such consent, no recordings will be made of you or you will be made unrecognisable in the recordings.

You can revoke your consent at any time with effect for the future. Please send your objection to the address given in section 1.1 (e-mail) address.

Access to recordings in which individual persons are recognisable is only possible via a link that cannot be guessed, which is only shared with the participants of the event.

According to Google’s security centre for its Google Photos product, images are not sold and are not used for advertising purposes.

Further information about Google Photos can be found in the Google Photos Help.

4.2.10 Google Hosted Libraries

We use Google Hosted Libraries (domain name: ajax.googleapis.com) to integrate various JavaScript libraries on our website. The corresponding libraries are provided by Google via a Content Delivery Network (CDN). Using this CDN, we can deliver the content of our website faster with the help of globally distributed servers connected via the Internet. For this to work, the browser you are using must connect to the CDN servers. In the process, various information may be disclosed to Google, such as your IP address, browser used, location-related data and other similar data.

You can prevent this processing by Google by deactivating JavaScript in your browser. Please note that if you do this, you may not be able to use all the functions of our website.

Further information can be found in the “Terms of use for libraries hosted by Google” and here.

4.3 Webfonts

4.3.1 Google Fonts

In order to display our content correctly and graphically appealing across browsers, we may use script and font libraries on our website to display fonts. Google Fonts are transferred to the cache of your browser to avoid multiple loading. If your browser does not support Google Fonts or prevents access, our website content will be displayed in a standard font.

Calling up script or script libraries automatically triggers a connection to the operator of the library. It is theoretically possible – although it is currently unclear whether and for what purposes – that the operator, in this case Google, collects data.

We do not collect any personal data through the integration of Google Fonts.

You can object to data processing by Google Fonts by deactivating the execution of JavaScript in your browser or by installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.

Further information on Google Fonts can be found in the Google Fonts FAQ and in Google’s privacy policy.

4.3.2 Fast Fonts/MyFonts

We may use so-called web fonts from Monotype Imaging Holdings Inc., based in the USA (Fast Fonts, or MyFonts; “Web Fonts”) on our websites for the standardised display of fonts.

When you call up one of our pages on which we use web fonts, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, your browser establishes a connection to the Fast Fonts or MyFonts servers. As a result, Fast Fonts and MyFonts become aware that the respective website has been accessed via your IP address and may receive further information, such as browser version, screen resolution or language settings.

As Monotype operates globally, your personal data may be stored and/or processed in any country in which it has an office or in which it engages service providers, including in the United States or other countries. In accordance with Monotype’s Privacy Policy, third parties with whom Monotype works and who process your personal data outside the EEA are contractually obliged to comply with standards that ensure a level of data protection equivalent to that of the European Union.

We do not collect any personal data through the integration of Fast Fonts or MyFonts. We also have no influence on the scope and further use of the data that is collected and processed by Fast Fonts or MyFonts through the use of web fonts.

If web fonts are not supported by your browser, a standard font from your end device will be used.

Further information on these web fonts can be found in the legal notices of fonts.com or MyFonts and in Monotype’s privacy policy.

4.3.3 Font Awesome

In order to display our content correctly and graphically appealing across browsers, we use web fonts (in particular icons) from Fonticons Inc. based in the USA (“Font Awesome”) on our website.

The icons are loaded via the Font Awesome Content Delivery Network (CDN). CDNs are server networks that are distributed worldwide and therefore make it possible to load files quickly from the nearest server. In order for the icons to be loaded, the browser you are using automatically establishes a connection to Font Awesome’s servers. In particular, Font Awesome receives information about your IP address and which icon you have loaded and when. This information is stored on the respective CDN server, including in the USA.

According to Font Awesome’s privacy policy, Font Awesome processes this data about the use of your CDN, among other things, to optimise your CDN, diagnose and correct technical errors, protect the CDN from misuse and attacks and to compile statistics.

We ourselves do not collect any personal data through the integration of Font Awesome.

Further information about Font Awesome can be found in the privacy policy and the Font Awesome support + FAQ page.

4.3.4 Jimdo-Fonts (Jimstatic / Jimdo)

To create our website, we use Jimdo, an online website construction kit from Jimdo GmbH, based in Germany (“Jimdo”).

We use fonts from Jimdo for the standardised display of fonts. Jimdo uses the web resource “fonts.jimstatic.com” to host and provide these fonts. When you visit one of our websites on which we use Jimdo fonts, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, your browser establishes a connection to Jimdo’s servers. As a result, Jimdo becomes aware that our website has been accessed via your IP address and may receive further information, such as browser version, screen resolution or time required by the web browser to download the fonts.

We do not collect any personal data through the integration of these fonts. We also have no influence on the scope and further use of the data collected and processed by Jimdo through the use of web fonts.

If web fonts are not supported by your browser, a standard font from your end device will be used.

Further information on data protection and security at Jimdo can be found in the “Jimdo Legal Centre“.

4.4 Meta services

If you have your habitual residence in the European Economic Area (EEA) or Switzerland, we use various Meta services from Meta Platforms Ireland Ltd, based in Ireland, on our website. The parent company is Meta Platforms Inc. based in the USA (“Meta”). We use the following Meta services on our websites:

• Meta Pixel
• Facebook Connect
• WhatsApp

Further information on the individual services and on which of our websites they are specifically used can be found below.

The information generated by these services may be transferred to a Meta server in the USA and may also be processed in countries where Meta or its subcontractors maintain facilities. According to Meta’s “Data Processing Terms“, the “Meta European Data Transfer Addendum” applies in this case. Meta promises to ensure an adequate level of data protection by relying on EU standard contractual clauses.

Meta is also certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework.

For general information about Meta’s use of data, your rights in this regard and ways to protect your privacy, please refer to Meta’s Data Policy.

4.4.1 Meta Pixel

With the help of the meta pixel, Meta is able to determine the visitors of our online offers as a target group for the display of adverts (so-called “Facebook” or “Instagram Ads”). Accordingly, we use the Meta Pixel to display the Facebook and Instagram ads placed by us only to those Facebook and Instagram users who have also shown an interest in our online offers or who have certain characteristics (e.g. interests in certain products determined on the basis of the websites visited) that we transmit to Meta (so-called “custom audiences”). With the help of the Meta Pixel, we also want to ensure that our Facebook and Instagram ads correspond to the potential interest of users and are not annoying. With the help of the meta pixel, we can also track the effectiveness of Facebook and Instagram adverts for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook or Instagram advert (so-called “conversions”).

Furthermore, we use the additional function “Automatic Advanced Matching” when using the Meta Pixel. Data such as telephone numbers, email addresses, dates of birth or postcodes are sent to Meta in encrypted form as additional information if you have provided us with this data. This enables us to increase the number of assigned “conversions” and expand our “custom audiences”. Further information on “automatic extended synchronisation” can be found in the corresponding Meta help section.

We also use the “Custom Audiences from File” process. This enables us to upload various customer information such as email addresses, telephone numbers, first names and surnames to Meta in encrypted form. With the help of this information, Meta can determine whether someone on Facebook or Instagram should be added to our advertising target group. We want to ensure that the adverts are only shown to users who are interested in our information and services. Further information on customer file custom audiences can be found in the corresponding Meta help section.

Data processing by Meta is carried out in accordance with Meta’s data policy. You can find general information on the display of Facebook and Instagram Ads in this policy.

By using cookies, Meta can subsequently recognise you in the member area of Facebook or Instagram and optimise the efficiency of advertisements, e.g. by offering target group-oriented advertisements. The prerequisite for this is that you have a Facebook and/or Instagram account and are logged into the Facebook or Instagram member area. If you are not a member of Facebook or Instagram, you are not affected by this data processing.

Information and details about the Meta Pixel and how it works can be found in the Meta help section. If you generally wish to object to the collection by Meta Pixel and the use of your data to display Facebook or Instagram ads, you can do so in Facebook’s advertising settings or Instagram’s privacy settings. To do this, you must be logged in to Facebook or Instagram.

If you do not have a Facebook or Instagram account, you can also object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative and additionally on the US website YourAdChoices or the European website Your Online Choices.

4.4.2 Facebook Connect

We use “Facebook Connect” on our websites, a service of Meta Platforms Inc, based in the USA, or if you have your habitual residence in the European Economic Area (EEA) or Switzerland, Meta Platforms Ireland Ltd, based in Ireland (“Meta”).

We use Facebook Connect to simplify and shorten the registration and login process by allowing you to register or log in directly with your Facebook login details. When you use Facebook Connect to register or log in, your browser automatically establishes a direct connection with the Facebook server and you are redirected to the Facebook website to log in. By logging in, your Facebook user account will be linked to our service. We have no influence on the scope and further use of data collected by Facebook through the use of Facebook Connect. To the best of our knowledge, Facebook receives the information that you have accessed the relevant part of our website or clicked on one of our adverts. If you have a Facebook user account and are registered, Facebook can assign the visit to your user account. Even if you are not registered with Facebook or have not logged in, it is possible that Facebook will find out and store your IP address and any other identifying features.

Further information on Facebook Connect and privacy settings can be found in Meta’s “Privacy Policy” and “Terms of Use“.

4.4.3 WhatsApp

On our website, we offer you the opportunity to communicate with us via the WhatsApp chat service (“WhatsApp”). WhatsApp is a service of WhatsApp LLC, based in the USA, or if you have your habitual residence in the European Economic Area (EEA) or Switzerland, WhatsApp Ireland Ltd, based in Ireland. WhatsApp is a subsidiary of Meta Platforms Inc. based in the USA.

When you send us a message via WhatsApp, you are sending us your mobile phone number and the name you have stored in your WhatsApp account. We will only use this information for WhatsApp communication with you and will not pass it on to unauthorised third parties. We process the chat content for the purpose of processing your enquiry and handling it.

WhatsApp Ireland may transfer European data to WhatsApp LLC and Meta Platforms Inc. and other WhatsApp sub-processors for the provision of your Business Services. To ensure the protection of your privacy, WhatsApp relies on Module 3 of the EU Standard Contractual Clauses for such onward transfers, in accordance with the “WhatsApp Business Data Transfers Addendum” to the “WhatsApp Business Data Processing Terms“.

If you do not want your data to be processed in the manner described above, we recommend that you refrain from contacting us via WhatsApp and contact us by other means.

Further information on data protection and data security at WhatsApp can be found in WhatsApp’s legal documentation and help section.

4.5 LinkedIn Conversion Tracking

On our website, we use conversion tracking technology from LinkedIn Corporation, based in the USA, or if you have your habitual residence in the European Economic Area (EEA) or Switzerland, LinkedIn Ireland Unlimited Company, based in Ireland (“LinkedIn”).

We use LinkedIn technology for marketing and optimisation purposes, in particular to analyse the use of our website, to continuously improve individual functions and offers as well as the user experience and to place ads that are relevant and interesting for you. We also receive aggregated and anonymous reports from LinkedIn about advertising activities and information about how you interact with our website. To do this, LinkedIn uses a JavaScript code (Insight tag), which in turn places a cookie in your web browser or uses a pixel.

According to LinkedIn, the LinkedIn Insight tag is used to collect data about the use of our website, including information such as referrer URL, IP address, device and browser characteristics or timestamps. The data collected via the LinkedIn Insight tag is encrypted, the IP addresses are shortened and the members’ direct IDs are removed within seven days in order to pseudonymise the data. This remaining pseudonymised data is deleted within 90 days. LinkedIn does not share any personal data with the website operator, but only provides summarised reports on the website target group and display performance.

Due to LinkedIn’s structures, it cannot be ruled out that your data will also be transferred to LinkedIn in the USA. To protect your privacy, we have concluded a “Data Processing Agreement” with LinkedIn, including EU standard contractual clauses.

Further information on the type, purpose and scope of data processing can be found in LinkedIn’s privacy policy, cookie policy and data protection portal. You can also object to personalised (LinkedIn) advertising by installing an opt-out cookie, regardless of whether you are a LinkedIn member or not.

4.6 Microsoft Bookings

We use Microsoft Bookings, an appointment booking service provided by Microsoft Operations Ltd, based in Ireland, on our website.

Microsoft Bookings enables you to make an appointment with us online (e.g. for a uniform fitting). The data you enter when making an appointment (e.g. first/last name, telephone number) and the date and time you select are transmitted to a Microsoft server in Europe and stored there, i.e. within our Microsoft 365 account.

We need this information to confirm your appointment and, if necessary, to contact you, e.g. for queries. Your details are accessed and processed by authorised Salvation Army employees.

Microsoft Bookings is a service that is generally provided by Microsoft within the EU. However, we cannot rule out the possibility that data may be transferred to Microsoft Corporation, based in the USA, or to other countries in which Microsoft is active.

To protect your privacy, we have concluded the “Data Protection Addendum” with Microsoft. If your data is disclosed to a country without an adequate level of data protection, Microsoft relies on EU standard contractual clauses.

In addition, Microsoft is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework.

Further information about Microsoft Bookings and data protection at Microsoft can be found on the Microsoft website or in the Microsoft data protection regulations.

4.7 Microsoft Clarity

On our website, we use Microsoft Clarity, an analytics service of Microsoft Corporation, based in the USA, or if you have your habitual residence in the European Economic Area (EEA) or Switzerland, Microsoft Ireland Operations Limited, based in Ireland (“Clarity”).

Clarity enables us to better understand the needs of our website visitors and serves us in particular for optimisation and marketing purposes as well as the interest-based design of our website. With the help of Clarity, movements on our website can be tracked (so-called “heat maps”) as well as the possibility to track all these user interactions, including individual sessions, by displaying animations (so-called “session recordings”). Clarity uses cookies for this purpose.

The information collected using cookies includes, in particular, interaction data (e.g. clicks, scrolls and mouse-overs) and diagnostic data (e.g. script and image errors). You can find out which information is processed by Clarity in detail here.

Further information on how Clarity works can be found on the Clarity website, in the Clarity documentation and in the Clarity FAQ.

Further information on data protection and how Microsoft handles your data can be found in the Microsoft Privacy Policy.

4.8 Xandr

We use Xandr, an advertising technology from Xandr Inc. based in the USA (“Xandr”), a subsidiary of Microsoft Corporation. Xandr enables us to display adverts on websites, apps and other internet-connected devices to people who may be interested in our various services or products. Xandr also offers us other functions, such as measuring the effectiveness of our advertising or preventing malware and other harmful activities.

When you visit a website that uses Xandr and provided your browser allows this, a unique identifier is assigned to the browser you are using or your device, which enables Xandr and us to recognise your browser or device. Xandr uses cookies, beacons, pixels, tags and similar technologies for this purpose.

The information that Xandr processes includes, in particular, browser data such as browser type, browser language and cookie information, device data such as the operating system used, device identifiers and IP address, location information, information about your activities such as browser and ad history, website interactions, time spent on websites and other data. A complete overview of the data processed by Xandr can be found here. In principle, this data does not allow any direct conclusions to be drawn about your person, but such identification cannot be completely ruled out.

In addition, Xandr may also collect other information that it receives from partner companies and other companies (e.g. analytics providers, advertising and marketing companies), such as information generated or derived from your use of their services.

Xandr may also use the information it collects about you for its own purposes, based on legitimate business interests, such as analysing and reporting on campaign and advertising performance, compiling statistics and conducting research and development for internal business purposes or to detect and correct errors in systems.

The data and information collected via Xandr is usually aggregated or deleted after 3 to 60 days, but may be stored at Xandr for up to 18 months from the date of collection before being aggregated or deleted. Xandr is a global company with data centres in the USA, Europe and Asia. In addition, they cannot rule out the possibility that the data and information collected may also be disclosed in other countries, e.g. Singapore, Japan, Australia or Brazil, where some of their partner companies are located.

Insofar as Xandr transfers personal data of persons located in the European Economic Area, the United Kingdom or Switzerland to countries outside Europe, it ensures adequate data protection where necessary, including by concluding EU standard contractual clauses (see “Privacy Policy” of Xandr).

You can object to the processing by Xandr. To do so, follow the instructions in Xandr’s “Privacy Policy” regarding opting out of interest-based advertising. You can find the opt-out for web browsers in Xandr’s “Privacy Centre“.

Further information on data protection at and data processing by Xandr and the rights to which you are entitled can be found in their “Privacy Policy“, “Cookie Policy” and the “Xandr documentation“.

4.9 AddToAny

We use AddToAny, a plugin from AddToAny LLC, based in the USA, (“AddToAny”) on our website. AddToAny allows you to share content (e.g. articles) from us on social networks.

Processing will only take place if you use the share function and log in to the respective social network accordingly. In this case, please note the privacy policy of the respective social network regarding data processing.

AddToAny states in its “Privacy Policy” that it does not process any personal data unless such data is made available to it, for example if you contact AddToAny directly. We also do not receive any data from AddToAny or data that is generated when using the share function.

Further information on how AddToAny works and data protection can be found in their FAQ, “Privacy Policy” and “Terms of Service“.

4.10 Matomo

We use Matomo, a web analysis service provided by InnoCraft Ltd. from New Zealand (“Matomo”), on our website.

Matomo is an open source software that allows us to analyse the behaviour of our users. For this purpose, Matomo sets a cookie which is used to record your IP address, the website accessed and the time spent on the respective website, among other things. Your IP address is shortened and thus anonymised immediately after it is collected and before it is saved.

This data processing is used exclusively to statistically analyse the use of our website. It helps us to optimise our offering and to avoid processing personal data wherever possible.

As Matomo runs on the servers of our website, your personal data is also only stored there and is not passed on to third parties.

Further information on the terms of use and data protection regulations can be found in Matomo’s privacy policy.

4.11 TikTok Analytics

We use TikTok Analytics from the Chinese company ByteDance. The controller is TikTok Pte Ltd. based in Singapore if you are habitually resident in the USA, TikTok Inc. based in the USA or if you are habitually resident in the European Economic Area (EEA), the United Kingdom or Switzerland, TikTok Technology Ltd. based in Ireland and TikTok Information Technologies UK Ltd (“TikTok”).

We and TikTok are so-called joint controllers in the context of the use of TikTok Analytics and have concluded a corresponding agreement with TikTok, “TikTok Analytics Joint Controller Addendum“, concluded with TikTok. According to this agreement, the joint responsibility between us and TikTok is limited to the creation and collection of information on the user behaviour of TikTok users (“Engagement Data”) and its consolidation into reports and analyses (“TikTok Analytics”).

When you use TikTok, TikTok collects so-called engagement data, including commenting and sharing content, the date and time of such activities and the country from which these activities are carried out, as well as information about the device you are using (e.g. browser, device type). TikTok analyses the behaviour and interactions on our TikTok profile and creates aggregated and/or anonymous compilations for us. We do not have access to the aforementioned personal data.

We use TikTok Analytics to track the performance of our posts and our TikTok channel on the basis of aggregated and/or anonymous compilations and to make our channel more attractive to users. For example, information about the type of devices used helps us to adapt the visual design of our posts to them, and the data on page views helps us to optimise the timing of our posts. The operation of our TikTok channel and the use of TikTok Analytics thus serve in particular to continuously improve and manage our digital offering.

If you are registered with TikTok and have subscribed to our TikTok channel, TikTok will also add your user account to the list of all subscribers to our channel. This list only shows the data that you have published yourself via your TikTok settings. Furthermore, we can see all your comments and likes made as a registered TikTok user as well as other activities associated with our TikTok channel and assign them to your user account (see also section 3.5).

Further information on TikTok Analytics and data protection at TikTok can be found on their website, in their privacy policy and in the aforementioned “Joint Controller Addendum“.

4.12 Flip catalogues

4.12.1 Issuu

We integrate Issuu, a service provided by Issuu Inc. based in the USA, on our website (“Issuu”).

With Issuu, we can display the content of e.g. pdf files as so-called flip catalogues/flipbooks directly on our website without you having to download the respective file. Issuu uses cookies that enable us to analyse the use of our website. In this way, Issuu collects and stores personal data such as your IP address and information about the time and duration of your visit. You can prevent this transmission by deactivating JavaScript in your browser. However, we would like to point out that in this case you will not be able to use all the functions of our website.

Further information about Issuu and data protection at Issuu can be found in Issuu’s terms of use and privacy policy.

4.12.2 Flipping Book

We use “Flipping Book”, a service provided by Flipping Book Ltd. based in Malta, on our website (“Flipping Book”).

With Flipping Book, we can display the content of e.g. pdf files as so-called flip catalogues/flipbooks directly on our websites without you having to download the respective file. Various information may be transmitted to Flipping Book, such as your IP address and other similar data. According to Flipping Book’s data protection declaration, it is not possible to draw any conclusions about you personally. Insofar as Flipping Book discloses personal data to countries without an adequate level of data protection, it bases this on EU standard contractual clauses, among other things.

Further information on how Flipping Book works and on data processing by Flipping Book can be found in their “Help Centre” and their privacy policy.

4.13 Outbrain Amplify

We use Outbrain Amplify, a service of Outbrain Inc. based in the USA, or if you have your habitual residence in the European Economic Area (EEA) or Switzerland, Outbrain UK Ltd. based in the United Kingdom (“Outbrain”), on our websites.

Outbrain enables us to refer you to further content on our or other websites that may also be of interest to you. Outbrain determines what content is displayed to you. Outbrain uses cookies for this purpose, which are stored in the browser of the end device you are using and assigns a unique user ID (UUID) to each user who interacts with an Outbrain widget. The UUID enables Outbrain to analyse and catalogue the content you have viewed/consumed and thus to recommend further content that may be of interest to you.

Which content is displayed to you is determined, among other things, by your browsing history or similar surfing behaviour of other users. This and similar data, such as the type of device/browser used or the time of the website visit, may be sent to Outbrain in the USA and stored there.

Information on data protection at Outrain can be found in their privacy policy, including how you can prevent the display of targeted content/creation of interest profiles. Further information can be found in Outrain’s Trust Centre.

4.14 Contact us

If you contact us using one of the forms described below, please read the information on contacting us (Section 3.2) should also be observed.

4.14.1 ConvertFlow

For marketing, market research and optimisation purposes, we use ConvertFlow, a service of ConvertFlow Inc. based in the USA, on our websites (“ConvertFlow”).

ConvertFlow offers us the opportunity to address users on a situational basis and to tailor our website to the needs of our users. We use this service to draw users’ attention to special offers via pop-ups and to give them the opportunity to get in touch with us on a contextual basis. To collect the data, ConvertFlow sets a cookie in your browser and reads technical information about your end device (screen size, device type, browser, country). IP addresses are only recorded and stored in anonymised form. This information is merged and stored by ConvertFlow in a pseudonymised user profile. The information is not used by ConvertFlow or the Salvation Army to identify individual users or merged with other data about individual users.

According to ConvertFlow’s privacy policy, its servers are located in the USA. Your data may therefore be processed and stored in the USA or in countries where ConvertFlow subcontractors are located. To protect your privacy, we have concluded an order processing contract with ConvertFlow.

Further information can be found in the terms of use and on the ConvertFlow help page.

4.14.2 Microsoft Forms

We use Microsoft Forms, an online form service of Microsoft Corporation, based in the USA, on our website. However, our contractual partner is Microsoft Ireland Operations Limited, based in Ireland (“Microsoft”).

If you use Microsoft Forms, Microsoft may set cookies on the browser you are using for web analysis purposes or to maintain user settings. If you do not want this, you can set your browser accordingly. However, we would like to point out that you may then not be able to use all the functions of our website.

In addition to the information you provide in the respective form, usage and metadata (including your IP address and the date and time of your visit) are also collected. Microsoft uses this information to ensure security and to optimise its own services. This data is generally processed in a European Microsoft data centre. However, we cannot rule out the possibility that data may be processed at the headquarters of Microsoft Corporation in the USA for the provision of the service and in the context of support.

To protect your privacy, we have concluded a “Data Protection Addendum” with Microsoft, in which Microsoft undertakes, among other things, to ensure appropriate data protection when disclosing personal data to countries that do not have an adequate level of data protection, in particular by concluding EU standard contractual clauses.

In addition, Microsoft is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework.

Further information on Microsoft Forms and data protection at Microsoft can be found on the corresponding Microsoft support website and their data protection declaration.

4.14.3 Gravity Forms

We use the WordPress plugin “Gravity Forms” from Rocketgenius Inc. based in the USA (“Gravity Forms”) on our website. Gravity Forms is used to create online forms (e.g. contact forms).

The information you provide in Gravity Forms is sent to us by e-mail and stored on our own mail server. Your data will not be transmitted to Gravity Forms and therefore not to the USA.

In addition, your details, including your IP address, are stored for a certain period of time in the backend of our web server in Switzerland.

Further information on Gravity Forms can be found in their “Privacy Policy” and their knowledge base, in particular in the “Privacy, Security and Compliance” section.

4.14.4 Contact Form 7

We use Contact Form 7, an open source WordPress plugin (“Contact Form”), on our website. Contact Form is used to create online forms (e.g. contact forms).

The information you provide in Contact Form is sent to us by e-mail and stored on our own mail server. The plugin is only used for forwarding. Your details are not stored in the backend of our web server.

Further information on Contact Form 7 can be found in the WordPress plugin directory and the plugin developer’s FAQ.

4.14.5 Jotform

We use Jotform, a service of JotForm Inc. based in the USA, or if you have your habitual residence in the European Economic Area (EEA) or the United Kingdom, Jotform Ltd. based in the United Kingdom (“Jotform”), on our website. Jotform is used by us to create online forms (e.g. contact forms).

The information you provide in Jotform, including your IP address, is transmitted to a Jotform server in Europe and stored there.

To protect your privacy, we have concluded an “order processing contract” with Jotform. This contract contains EU standard contractual clauses for the rare cases in which Jotform exceptionally transfers data to a country without an adequate level of data protection.

Further information on data protection and how Jotform works can be found in their “Terms of Use“, “Privacy Policy” and the security area.

4.15 PageSense

We may use PageSense, an analysis service of the provider Zoho Corp. based in the USA, on our websites. However, the contractual partner is Zoho Corp. B.V., based in the Netherlands, and accordingly its data centres are located in the EU (“Zoho”).

PageSense is used in particular to record heat maps and clicks, i.e. we can only analyse the general use of our websites, which enables us to optimise our web presence.

PageSense uses cookies for this purpose. However, these do not allow any conclusions to be drawn about you and your IP address is only used in anonymised form. Accordingly, only anonymised usage data is collected.

No usage data or personal data is collected or stored.

If you would like to find out more about Zoho’s data protection and data security, you can find detailed information in Zoho’s data protection FAQ.

4.16 If-So

We use If-So, a service for dynamic content personalisation from If-So Technologies Ltd, based in Israel (“If-So”), on our websites.

When you access one of our websites on which we use If-So, we can use your IP address to determine from which country and region you are accessing our website. Your IP address is transmitted to If-So for this purpose.

This enables us to insert and display dynamic content. This means that, depending on the country or region from which you access our website, you may be shown different content.

To protect your personal data, we have concluded a “Data Processing Addendum” with If-So, in which If-So relies on standard contractual clauses in the event of any data being disclosed to countries without an adequate level of data protection.

Further information on data protection at If-So can be found in their privacy policy.

4.17 Vimeo

Our website uses the services of the provider Vimeo Inc. based in the USA (“Vimeo”) to integrate videos.

When you access a page on our website that contains a Vimeo video, your browser establishes a direct connection to the Vimeo servers. This tells Vimeo which of our web pages you have visited. If you are logged into your Vimeo account at the same time, Vimeo can assign this information to your personal user account. If you click on the start button of a video, this information can also be assigned to an existing user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.

We have concluded an order agreement with Vimeo, including EU standard contractual clauses, to ensure the protection of your personal data and an appropriate level of data protection.

For more information on the purpose and scope of data collection and the further processing and use of the data by Vimeo, as well as your rights in this regard and setting options to protect your privacy, please refer to Vimeo’s privacy policy.

We would like to point out that Vimeo may use Google Analytics. For further information on data processing by Google and your opt-out options, please refer to Google’s privacy policy or the browser add-on for deactivating Google Analytics and Google’s settings for personalised advertising.

4.18 Reviews (Customer Alliance)

To display reviews, we have integrated a widget from CA Customer Alliance GmbH, based in Germany, on our website (“Customer Alliance”).

We use Customer Alliance to show you the reviews of our hotel/accommodation and to give you the opportunity to leave a review yourself.

In cases where Customer Alliance processes personal data on our behalf, we have concluded an order processing agreement with Customer Alliance to protect your privacy.

In order for the functions of the Customer Alliance Widgest to be used, certain of your data (in particular IP address, browser information, language settings and similar data) must be processed. If you rate us via Customer Alliance or are asked by Customer Alliance on our behalf to rate your stay with us, all the information you provide will be transferred to a Customer Alliance server and stored there. We have no influence on this data processing.

Further information on Customer Alliance and data protection can be found in the terms of use and privacy policy.

4.19 Cubilis

We use Cubilis, a hotel software from Stardekk NV / PLC, based in Belgium, on our website (“Cubilis”). Cubilis is used in particular to manage and process reservation enquiries at our hotel.

If you wish to reserve a room with us, your details from the form, such as date of arrival/departure, name, telephone number and (e-mail) address, will be transmitted to Cubilis and stored on their servers for the purpose of processing your reservation enquiry and handling it. We may also use your contact details to send you service messages that are directly related to your reservation. This includes, in particular, confirmations, changes or cancellations of your reservation.

The data collected from you will be stored for as long as it is required to process your reservation request or to manage your stay with us and will then be deleted or anonymised, subject to statutory retention periods.

You can object to this data processing at any time. To do so, please contact the address given in section 1.1 (e-mail) address. However, we would like to point out that if the deletion takes place before the date of your reservation, we will cancel your reservation accordingly. Cancellation may also entail costs.

If Cubilis discloses your personal data to suppliers or service providers based outside the European Economic Area, it will ensure appropriate data protection in accordance with its data protection policy, for example by concluding EU standard contractual clauses.

Further information on data protection at Cubilis can be found in their General Terms and Conditions and Privacy Policy.

4.20 TeamViewer

For remote support, we use the software of TeamViewer GmbH in Germany (“TeamViewer”). For this purpose, we offer you the download of TeamViewer software suitable for this purpose.

Using this software, our support staff can simultaneously connect to your PC during a call with you in order to provide the support you have requested. The connection runs via TeamViewer servers.

By using remote support and TeamViewer, you consent to any associated personal data processing.

By downloading the TeamViewer software, TeamViewer receives the information that you have accessed the corresponding website. We have no knowledge of whether TeamViewer uses this information and, if so, for what purposes.

TeamViewer is used in accordance with the TeamViewer privacy policy. Information on the security and functionality of TeamViewer can be found on the TeamViewer Community website.

4.21 Amazon CloudFront

To increase the security and delivery speed of our website content, our website uses Amazon CloudFront, a content delivery network (CDN) from Amazon Web Services EMEA SARL (“AWS”), based in Luxembourg (“CloudFront”). A CDN is a network of servers that is able to deliver optimised content to the website user. Various data, in particular your IP address, browser and operating system used and other similar data can be transmitted to an AWS server and processed there.

To protect your privacy, we have concluded a “Data Processing Addendum” with AWS.

AWS operates worldwide and we therefore cannot rule out the possibility that your personal data may be transferred to an AWS server or to any subcontracted processors of AWS outside Switzerland or the EEA (e.g. USA). If the recipient country does not have an adequate level of data protection, AWS will ensure in accordance with its data protection notice that the disclosure is transmitted in compliance with the relevant data protection laws.

For more information on how CloudFront works and data protection, please refer to the Amazon CloudFront developer manual and the AWS data protection notice.

4.22 Concertmaster

We have integrated Konzertmeister, a rehearsal and performance planning tool from KM Konzertmeister GmbH, based in Austria, on our website using an iFrame (“Konzertmeister”).

As far as can be seen, no personal data is processed through the integration of Konzertmeister on our website.

Various data is processed in relation to the use of the app by our musicians and in the context of member administration in Konzertmeister. In particular, this includes user data (e.g. name, email address, telephone number), appointments (e.g. description, date, confirmation deadline, attendance statistics) as well as appointment invitations and related information, such as acceptances/cancellations, including reasons and time of confirmation, if applicable. In addition, various technical data is processed by Konzertmeister when using the web application and/or the app, such as the date and time of access, IP address of the end device used, referrer URL and other similar data.

To protect the privacy of our musicians, we have concluded an order processing agreement with Konzertmeister (see Appendix B of the Terms of Use for Konzertmeister). If Konzertmeister discloses personal data to a country without an adequate level of data protection, it ensures adequate data protection in accordance with its privacy policy, for example by concluding EU standard contractual clauses.

Further information on how Konzertmeister works and on data protection at Konzertmeister can be found on the help page and in the terms of use and privacy policy of Konzertmeister.

4.23 Prezi

We use Prezi, a presentation service from Prezi Inc. based in the USA (“Prezi”). Prezi allows us to create dynamic presentations and embed them on our website, among other things.

When you open one of our websites on which a Prezi presentation is embedded, various data, such as your IP address, the browser you are using, the operating system you are using and other similar data may be disclosed to Prezi in the USA or in countries in which companies affiliated with Prezi or subcontractors of Prezi are active. To protect your privacy, we have concluded a “Data Processing Agreement” with Prezi, including EU standard contractual clauses, to ensure appropriate protection of your data when it is transferred to the USA and countries that do not have an adequate level of data protection.

In addition, Prezi is certified under the EU-U.S. (and the UK Extension) and the Swiss-U.S. Data Privacy Framework.

Prezi uses cookies that allow us to analyse the use of our presentation, e.g. which areas attract the most attention. This enables us to continuously optimise our offer and better respond to the needs of our website visitors.

If you do not agree with this processing of your information, you have the option of deactivating Prezi. To do this, you must deactivate the Java Script function in your browser. However, this may also affect other functions of our website.

Further information on data protection and data security at Prezi can be found in their “Privacy Policy“, “Terms of Service” and the “Data Processing Agreement“.

4.24 Zoom

We use Zoom, a video conferencing solution from Zoom Video Communications Inc. based in the USA, on our website (“Zoom”).

You can use Zoom to participate online in certain events organised by us, e.g. the prayer meeting (“online meeting”). To take part in an online meeting, open the relevant Zoom link and enter the meeting ID and identification code published by us. Alternatively, you can also enter the required information directly in your Zoom app.

When using Zoom, various data is processed depending on the information you provide before or during participation in the online meeting. This includes, in particular, user data (such as first/last name or pseudonym chosen by you, e-mail address), metadata (topic of the meeting, your IP address, device/hardware information) as well as text, audio and video data if you make a statement during the meeting, e.g. via the chat or verbally, or if you have switched on your camera. Of course, you can switch off or mute your camera or microphone yourself at any time.

If we wish to record an online meeting, this will always be done on the basis of your consent. We will inform you in good time if an online meeting is being recorded. This gives you the opportunity to switch off your camera and microphone or leave the online meeting. We would also like to point out that your name may be visible in the recordings even if the camera/microphone is switched off.

Any data collected will only be stored for as long as is necessary for the provision of the service, i.e. generally until the end of the online meeting. In the case of any recordings, the duration is generally determined by the purpose pursued with the recording.

If you are registered with Zoom as a user, reports on online meetings, in particular meeting metadata and telephone dialling data, can be stored at Zoom for up to 12 months.

To protect your privacy, we have concluded an order processing contract with Zoom, including standard contractual clauses. In addition, Zoom is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework.

Further information on data protection and how Zoom works can be found in the Terms of Use, Privacy Policy and in particular in Zoom’s “Legal & Compliance Resources“.

4.25 myCloud (Swisscom)

We use “myCloud”, a cloud storage service provided by Swisscom Schweiz AG, to document our events and functions and to store photos and video recordings (“recordings”). MyCloud enables us to make recordings of events and functions easily available to the people attending them.

Before we make recordings of you, we ensure that we have the necessary consent from you or your legal representative. Without such consent, no recordings will be made of you or you will be made unrecognisable in the recordings.

You can revoke your consent at any time with effect for the future. Please send your objection to the address given in section 1.1 (e-mail) address.

Access to recordings in which individual persons are recognisable is protected with a password that is only shared with the participants of the event. By accessing the link, your IP address will be disclosed to Swisscom and your user behaviour will be recorded.

According to the “Swisscom myCloud Terms of Use“, all files that we upload to the “myCloud” are stored in Switzerland.

Further information on data protection at Swisscom and information on “myCloud” can be found in Swisscom’s privacy policy and the FAQ on myCloud.

4.26 WordPress Pixel (WordPress Statistics)

We use the analysis tool WP Statistics, a service of VeronaLabs based in Estonia (“WP Stats”), on our website. WP Stats helps us to statistically evaluate visitor access and analyse the use of our website.

Among other things, WP Stats collects log data and technical data such as your IP address, the browser you are using, the search engine you are using and actions that you and other website visitors have taken on our website, such as clicks and views. The data collected with WP Stats is stored exclusively on our own server. We use the anonymised analyses of user behaviour in particular to optimise our website and our advertising.

Further information on how WP Stats works and data protection at VeronaLabs can be found on their WPStats website and “Privacy Policy“.

4.27 WordPress Multilingual Plugin

We use the WordPress Multilingual (WPML) plugin from OnTheGoSystems Ltd, based in China, on our website.

This plugin enables us to display our website in different languages. When you visit our website, WPML stores a cookie on your end device to save the language setting you have selected. These cookies lose their validity after a certain period (usually 1 day). Personal data may also be stored and analysed. This mainly involves the activities of website visitors, e.g. which pages have been visited and which elements have been clicked on, as well as device and browser information, such as IP address and operating system used.

Further information on the collection and storage of data by WPML, as well as on objection and removal options vis-à-vis WPML, can be found in WPML’s privacy policy.

4.28 Cloudflare CDN

We use Cloudflare CDN on our website, a service provided by Cloudflare Inc. based in the USA (“Cloudflare”).

Cloudflare provides a globally distributed content delivery network with DNS. Technically, Cloudflare redirects the exchange of information between your web browser and our website. This allows Cloudflare to monitor the data exchange and act as a layer of protection between our servers and potentially malicious data. During this process, Cloudflare may use technologies such as cookies to identify Internet users, although these technologies are used exclusively for the tasks described here.

To protect your privacy, we have concluded a “data processing agreement” with Cloudflare, including EU standard contractual clauses. Cloudflare is also certified under the EU-U.S. (including the UK extension) and the Swiss-U.S. Data Privacy Framework.

More details regarding security and data protection at Cloudflare can be found in their “Privacy Policy“.

4.29 jsDelivr-CDN

We use jsDeliver-CDN on our website, a service provided by Voentio JSD Limited, based in England and Wales (“jsDelivr”).

With the help of the Content Delivery Network (CDN) from jsDelivr, we can deliver the content of our website faster with the help of regionally distributed servers connected via the Internet. For this to work, the browser you are using must connect to the CDN servers. In the process, various information is disclosed to jsdelivr, such as your IP address, browser used and other similar data.

This information is processed solely for the stated purpose and to maintain the security and functionality of the CDN.

To protect your privacy, we have concluded a “Data Processing Agreement” with jsDelivr, including EU standard contractual clauses.

You can prevent this processing by jsDelivr by deactivating JavaScript in your browser. Please note that if you do this, you may not be able to use all the functions of our website.

Further information on data protection at jsDelivr can be found in their “Terms of Use” and “Privacy Policy“.

4.30 Soybean

We use Sojern, an advertising service of Sojern Inc. based in the USA, (“Sojern”) on our website. Sojern enables us to show you interest-based and usage-based advertising from us and other advertisers. We can also use Sojern to measure the efficiency of our advertising measures and thus optimise our online offering on an ongoing basis.

Sojern uses pixel tags, cookies and other tracking technologies to track, collect and store your activities on our website. These technologies allow Sojern to recognise your browser and also to collect information about your travel activities and preferences from other websites.

The personal data processed via Sojern includes in particular pseudonymous IDs (e.g. cookie ID, mobile advertising ID), technical data (e.g. IP address, device type, date and time stamps of clicks and web visits as well as other information in aggregated or pseudonymised form about your travel preferences (e.g. preferences for facilities and/or amenities).

Sojern operates worldwide and processes data in the USA and other countries that may not have an adequate level of data protection.

To protect your privacy, we have concluded a “Data Processing Addendum” with Sojern, including EU standard contractual clauses, which guarantees appropriate data protection for international data disclosures.

In addition, Sojern is certified under the EU-U.S. (including the UK Extension) and the Swiss-U.S. Data Privacy Framework.

You can opt out of Sojern’s cookie-based targeted advertising at any time by following the opt-out instructions on the Sojern website. Further information on data processing and data protection at Sojern can be found in the Sojern Privacy Centre.

4.31 Yoast SEO

Our website uses the Yoast Search Engine Optimisation (SEO) plugin from Yoast BV, based in the Netherlands (“Yoast”).

The plugin is used for the technical optimisation of our website for search engines, which increases our visibility in them. No personal data is processed, collected or stored in any way by Yoast, neither by Yoast itself nor on our servers.

We use Yoast on the basis of our legitimate interest in the technical optimisation of our website.

Further information can be found in Yoast BV’s privacy policy and in Yoast’s help centre.

4.32 SeriesEngine