USZ FoundationPrivacy Policy - USZ Foundation

Privacy Policy of the USZ Foundation
Version of August 29, 2023
1. Data Protection Notice
Protecting your data is important to us. Therefore, we provide you with comprehensive information on the handling of your personal data in the following privacy policy. We observe applicable data protection regulations.
This privacy policy applies to all individuals whose personal data is processed. Furthermore, this privacy policy applies to the use of our website and newsletter, as well as event invitations.
This privacy policy outlines how and for what purposes we process personal data, and it explains your rights under applicable data protection regulations.
2. Contact Details of the Data Processor
The USZ Foundation (hereinafter “we” or “us”) is responsible for processing personal data as described herein:
USZ Foundation
Pestalozzistrasse 3
8032 Zurich
+41 43 254 55 00
info@usz-foundation.com
3. General Data Processing
Unless otherwise stated below, the following provisions apply to all data processing.
3.1. Legal Basis for Processing Your Data
The processing operations described below are based on applicable legal provisions.
3.2. Data Deletion and Storage Period
Your data will generally be deactivated, deleted, or blocked as soon as the purpose of storage no longer applies. You have the option to request the deletion of your data by email (info@usz-foundation.com). Blocking or deletion will occur after the specified legal and/or regulatory retention periods. However, legal or regulatory retention periods as well as legitimate interests may prevent blocking or deletion.
3.3. Storage and Security of Your Data
Your data is treated confidentially. With appropriate technical and organizational precautions, we protect the data against loss, manipulation, unauthorized access, and third-party access.
3.4. Automated Individual Decision-Making Including Profiling
No automated individual decision-making, including profiling, takes place when processing your data.
3.5. Links
This privacy policy does not apply to external websites that you access through a link on our website. We do not assume liability for third-party websites. Please refer to the relevant website for the applicable privacy policy.
3.6. Cookies
Cookies ensure the basic and advanced functions of a website. They enable evaluations to continuously optimize our website. Specifically, cookies are small text files that are permanently or temporarily stored on your computer or smartphone when you visit websites. Browsers can be configured to display a warning on the screen before storing a cookie. Browsers can also be programmed to block certain cookies. More information can be found on your browser’s help pages (usually under “Privacy”) or in Section 6.3.
The following cookies are used on our website:
Essential Cookies: These cookies are necessary for the functioning of the website. They ensure, for example, that you can switch between pages, your information in a form is not lost (e.g. cookie banner), or the donation form can be used.
Information on managing your cookies depending on your browser can be found on the following pages:
Please note that this list is not exhaustive. If you use a different browser, please check your browser’s settings for managing and deleting cookies.
Statistical Cookies: To continuously optimize our website and better tailor it to the needs of visitors, we use statistical cookies that analyze the use of our website. Google Analytics is used for this purpose. These external cookies are deactivated by default when visiting our website. This data is collected in anonymized form. Refer to Section 6.3 for Google’s privacy policy.
External Cookies: Our website includes offerings from third parties. By activating these external cookies, you can use all functions of the website without restrictions. Once activated, the relevant providers can determine that you are on our website. These providers process the data in their own responsibility.
You can adjust your individual preferences in the cookie settings at any time.
4. Data Processing
Personal data is processed, in particular, for the processing of donations and the maintenance of ongoing relationships. The data is stored in a way that is inaccessible to third parties.
We need your data, specifically to personally identify you (e.g. contact or donation information) and to ensure the processing of your potential and actual donations.
4.1. Online Donations
Donations to the USZ Foundation make extraordinary things possible. Your donation shapes the future of medicine. Patients of the University Hospital Zurich and beyond will directly benefit from it.
Donations can be made digitally on our website.
In order to allocate and acknowledge your online donations, personal data is required. When submitting the completed donation form, the data from the input mask is transmitted to us. The processing of donations via our website uses the services of Stripe (see also Section 6.2). No further data is stored.
If you contact us via the donation and/or contact form, your data will be added to our database. The USZ Foundation works with Salesforce as the provider of the database, but manages all data itself.
We collect and process your data for the processing of donations requested by you, for the maintenance of ongoing relationships, and to provide you with all necessary information (e.g. donation confirmations).
4.2. Sending of Invitations and Publications
As a patron, you will be invited to various events, lectures, and visits unless you have unsubscribed from these. Your data will be used for this purpose. By making a donation, you consent to the processing of your data.
If registration is required to attend an event, as part of the same process, personal data will also be collected, including the name of your companion and their contact details, if applicable. By registering, you confirm that the third party agrees to the aforementioned data processing. This information is necessary for creating the list of participants and for sending invitations, any invoices, and further information.
By registering for events, you consent to the processing of your data. Additionally, capturing the mentioned data ensures that the USZ Foundation can professionally organize the events.
The USZ Foundation also regularly informs about new supported projects and updates patrons through the annual report about project funding and resource allocation.
As a patron, you will automatically receive this information unless you have unsubscribed (using the contact address under Section 2). Your data will be used for this purpose. To provide this service, the USZ Foundation may share the necessary data with third parties (including USZ project leaders and printers).
The data will be exclusively used for providing the aforementioned services. Your data will not be used for any other purposes.
You can unsubscribe from receiving invitations and publications from the USZ Foundation at any time. To do so, use the contact address under Section 2.
4.3. Publication on the Website
As a patron, you will be acknowledged on our website as a sign of appreciation. This can be found in the “We Thank” section. This does not involve mentioning private individuals; specifically, we mention institutions (foundations, companies, and family offices). If you do not wish this to occur, please inform us using the contact address under Section 2.
5. Data Processing when Visiting the Website
5.1. SSL / TLS Encryption
For reasons of security and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator, this website uses SSL / TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the padlock symbol in your browser line.
When SSL / TLS encryption is activated, the data you transmit to us cannot be read by third parties.
5.2. Creation of Logfiles
Logfiles refer to the “raw,” unprocessed log data of a web server that is generated automatically with each visit to a website. The following data is collected:
- IP address of the accessing device
- Browser type and browser version
- Operating system used
- URL accessed
- If available, the referer (referring page)
- Hostname of the accessing computer
- Date and time of the server request
This data cannot be attributed to specific individuals. These data sources will not be merged. We reserve the right to subsequently check these data if we become aware of specific indications of illegal use.
The data allows us to improve the quality of service by recognizing trends and usage behavior. Furthermore, the storage of this data in log files ensures the functionality of our website. The data is used to optimize our website and ensure the security of our information technology systems.
5.3. Hosting
Our website is hosted externally. Our hosting provider is Metanet AG, Josefstrasse 218, 8005 Zurich. All data is stored in a Swiss data center and is not shared with third parties at any time.
Metanet Privacy Policy
6. Third-Party Services
In order to focus on our core mission, we engage the services of third parties in certain areas where they are industry leaders.
6.1. RaiseNow
Donations via TWINT QR code (Twint as a touchpoint solution) are processed through RaiseNow. This ensures secure and professional donation processing. Please also refer to RaiseNow’s data security declaration: raisenow.com/ch-de/datenschutz
6.2. Stripe
Donations through the donation form on our website are processed by Stripe. Stripe ensures the payment infrastructure. Please refer to Stripe’s data security declaration: stripe.com/en-gb-ch/privacy
6.3. Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website – including your IP address, which is anonymized before storage using the _anonymizeIp() method so that it cannot be attributed to a connection – is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, compile reports on website activity for website operators, and provide other services related to website and internet usage. Google may also transfer this information to third parties where required by law or where third parties process this data on Google’s behalf. Google will not associate your IP address with other data from Google. You can prevent the installation of cookies by adjusting your browser software settings; however, please note that in this case, you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can object to the collection of data by Google Analytics with effect for the future by installing a deactivation add-on for your browser.
6.4. Salesforce – CRM Database
We use Salesforce for managing donor data and donation data. This is a reputable tool in the non-profit sector. salesforce.com/eu/company/privacy/
7. Data Disclosure to Third Parties
7.1. Data Disclosure to the University Hospital Zurich (USZ)
The purpose of the USZ Foundation is education, research, and provision of care at USZ. To fulfill this purpose and the earmarked use of funds, according to donors’ instructions, exchange of donation details with USZ researchers can take place.
Data may also be shared with USZ researchers for the organization and execution of events, as necessary for event purposes. Furthermore, data may be shared with USZ to inform you about ongoing projects you’ve supported. See also Section 4.2.
7.2. Mention in Memorial Donations to Bereaved Family
In the case of memorial donations, we, as the USZ Foundation, inform the bereaved family about the donations made. If you do not wish this, please notify us during the donation process. Alternatively, you can also contact us using the contact information in Section 2.
7.3. Data Disclosure to the USA
Our website includes tools from companies based in the USA, among others.
When these tools are active, your personal data may be transferred to the US servers of the respective companies. Please note that the USA is not considered a secure third country under Swiss and EU data protection laws. US companies are obligated to disclose personal data to security authorities without the possibility for you as an affected person to legally contest this. Therefore, it cannot be ruled out that US authorities may process, analyze, and permanently store data located on US servers for surveillance purposes. We have no influence over these processing activities.
8. Rights of Affected Individuals
You have the right to request information about the personal data processed by us. In particular, you can request information about the processing purposes, categories of personal data, categories of recipients to whom your data has been or will be disclosed, planned storage duration, the right to rectification, erasure, restriction of processing, or objection, data portability, the origin of your data, provided it was not collected by us, and the existence of automated decision-making, including profiling. You also have the right to withdraw any consent granted for the use of your personal data at any time.
Please note that for data protection reasons, data disclosure is only possible after clear identification. This is carried out following your request for information through digital or postal submission of an identity card or passport.
9. General Disclaimer
All the above information has been carefully reviewed. We strive to provide up-to-date, accurate, and complete information in our informational offerings. However, the occurrence of errors cannot be completely ruled out, and we cannot guarantee the completeness, accuracy, and currency of information, including journalistic-editorial content. Claims for damages of a material or immaterial nature caused by the use of the offered information are excluded to the extent permitted.
The publisher may change or delete texts at its own discretion and without notice and is not obligated to update the content of this website. The publisher, its clients, or partners are not responsible for damages, whether direct, indirect, accidental, foreseeable, or consequential, allegedly resulting from visiting this website, and thus assume no liability for it.
The publisher also assumes no responsibility or liability for the content and availability of third-party websites accessible via external links on this website. The operators of linked sites are solely responsible for their content. The publisher expressly distances itself from all third-party content that may be criminally or legally relevant or that violates good manners.
10. Reservation of the Right to Change
We reserve the right to amend and supplement this statement at any time at our discretion and in accordance with data protection legislation. Please consult this statement regularly.

Translated from German version with ChatGPT.