Privacy Policy

of the Swiss Ornithological Institute Sempach for the website https://photo.vogelwarte.ch.

In this Privacy Policy, we inform you about how we, the Swiss Ornithological Institute Sempach (hereinafter also referred to as the “Swiss Ornithological Institute”, “we” and “us”) collect and process your personal data (hereinafter also referred to as “data” or “personal data”).

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, address, date of birth, e-mail address and telephone number. Personal data may also include information about personal preferences such as leisure activities or memberships.

If you provide us with other people’s personal data (e. g. employee data), we assume that you are authorised to do so and that the data is correct. You confirm this by submitting data about other people. Please ensure that the other people are aware of this Privacy Policy.

We are committed to handling your personal data responsibly. This is important to us. Insofar as we (or third parties on our behalf) collect and process personal data, we comply with the requirements of the Swiss Data Protection Act. In addition, we also comply with the provisions of the EU GDPR and/or the UK GDPR, insofar as we are legally obliged to do so. However, whether and to what extent these laws are applicable depends on the individual case.

In this Privacy Policy, you will find information about the following in particular:

  • How to contact us if you have any questions (section 1).
  • Which personal data of yours we collect and process, and for what purposes (section 2).
  • What legal grounds we base our processing on (section 3).
  • Who we disclose your personal data to (section 4).
  • How we protect your data (section 5).
  • Which cookies/tracking and other technologies we use (section 6).
  • How long we process your personal data for (section 7).
  • What rights you have with regard to your personal data (section 8).
  • Which privacy policy applies (section 9).

1.           Our contact details

Under data protection law, the Swiss Ornithological Institute Sempach, with its headquarters in Sempach (Switzerland), is responsible for data processing in accordance with this Privacy Policy. If you have any questions about this Privacy Policy, our use of your data or your rights, please contact us at: photo@vogelwarte.ch.

2.           Which data we collect and for what purpose

2.1         2.1 Use of the website (creation of log files) and other electronic offerings

Every time you visit the website https://photo.vogelwarte.ch (hereinafter: “our website”), the web server automatically collects data and information from the computer system of the accessing computer. In particular, this includes information about the browser type and version used, the user’s operating system, the user’s internet service provider, the referrer URL (websites from which the user’s system accesses our website) and websites accessed by the user’s system via our website, as well as the user’s IP address, the date and time of access and the client’s file request (file name and URL). This data is stored in the log files of our system (or with third parties) together with other data and are only collected for the purpose of statistical evaluation. If you enter information on the website (e. g. when registering to enter the photo competition), this data is also recorded in the log files. This serves as a backup copy so that you can still proceed with your request in the event of a faulty process.

We use this data to ensure a smooth connection, the convenient use of our website and other electronic services, to evaluate system security and stability, and for other administrative purposes. With the exception of the information you enter, this data does not generally allow us to draw any conclusions about your identity. In the context of user accounts or registrations, however, they may be linked to other categories of data – and thus possibly to your person.

2.2         Registration for the Swiss Ornithological Institute photo competition

Our website offers you the opportunity to register for entry in the photo competition (hereinafter: “registration form”). The data you enter in the form is transmitted to us in encrypted form and stored. We may use your data to correspond with you. By signing up/registering, you consent to us processing your data. You also confirm that you have read and understood our Privacy Policy.

2.3         Contact via e-mail and other communication channels

We offer you the option of contacting us via the e-mail address displayed on our website and via other digital communication channels. By sending your enquiry, you consent to us processing your data in order to answer it. In addition, you confirm that you have read and understood our Privacy Policy. Digital communication (e.g. e-mail) is unencrypted and unsecured to some extent. You are responsible for any risks involved.

Alternatively, you may contact us via analogue communication channels.

2.4         Business relationships

We may process your data that we receive in the course of our business relationship with you, our customers, other business partners and other persons involved. In particular, this includes contact details such as title, first name, surname, gender, date of birth, address, e-mail address, telephone number and other contact details, as well as communication data such as exchanged communication content from e-mails, other written correspondence, telephone conversations, video conferences, etc. and details of the type, time and place of communication.

Where permitted, we also collect data from publicly accessible sources (e. g. commercial register, media, the internet, social media, etc.). In addition to data that you provide to us directly, this includes data that we receive about you from third parties (authorities, credit reports, banks, address traders, other third parties), in particular information from public registers, in connection with official and judicial proceedings, in connection with your professional functions and activities, information about you in correspondence and meetings with third parties, information that persons associated with you (e. g. family, advisors, legal representatives, employers) provide to us so that we can conclude or process contracts with or involving you (e. g. references, powers of attorney), your address and, where relevant, your interests, and other socio-demographic data.

3.           Legal basis for data processing

3.1         In connection with our services and in order to fulfil contractual obligations

Data is processed for the purpose of providing our services to our clients, including pre-contractual measures and post-contractual support. The data collected in this way is used, for example, for the entire processing of our services, including any subsequent warranty claims, technical administration, etc. Further details on the purposes of data processing are to be found in the relevant contract documents and terms and conditions.

3.2         In connection with the balancing of interests

Where necessary and permissible, we process your data beyond the actual performance of the contract in order to protect our legitimate interests or those of third parties. This includes:

  • consultation and exchange of data with information centres and other third parties (e. g. debt enforcement registers);
  • review and optimisation of needs analysis procedures for the purpose of direct donor contact and collection of personal data from publicly accessible sources for the purpose of donor acquisition;
  • advertising or market and opinion research, unless you have objected to the use of your data;
  • assertion of legal claims and defence in legal disputes;
  • guaranteeing IT security and IT operations;
  • preventing and investigating criminal offences;
  • measures for business management and further development of services and products and the website;
  • purchase and sale of business units, companies or parts of companies and other corporate transactions and the associated transfer of data and business management measures.

3.3         Based on your consent

If you have given us your consent to processing data for specific purposes, the lawfulness of such processing is based on your consent. Consent granted may be revoked at any time. The withdrawal of consent does not affect the lawfulness of the data processed prior to its withdrawal.

3.4         Based on legal requirements or in the public interest

We are also subject to various legal obligations in connection with which we have to process your data.

4.           Data transfer and transfer abroad

We only disclose your data to third parties in connection with our activities and for the purposes described in this Privacy Policy when we are obliged to do so by law, court order or official regulations, if the disclosure is necessary for the establishment, exercise or defence of legal claims, or for the execution of contracts and business activities, or based on your consent. These third parties include in particular the following categories of recipients:

  • processors such as providers, service providers for evaluating the benefits of the website (marketing purposes), research service providers, service providers for IT services (data management, data storage, technical support, newsletter distribution, etc.);
  • external business partners (e. g. sponsors, traders, suppliers, shipping service providers, subcontractors, banks, debt collection agencies) and experts in connection with the contractual service;
  • competitors, industry organisations, associations, organisations and other bodies;
  • media;
  • domestic and foreign authorities, official bodies or courts;
  • other parties in possible and actual legal proceedings.

Third parties can process personal data not only in Switzerland. Your data may be processed in the European Union and the European Economic Area as well as in any country in the world (including the USA). If the level of data protection in the country where the processing third party is located is deemed inadequate by Swiss standards (including the USA), we provide suitable data protection by means of appropriate safeguards (e. g. standard contractual clauses), unless there is a legal exception (e. g. your consent), the recipient is already subject to a legally recognized set of data protection rules (e. g. Swiss-US Data Privacy Framework), or we are able to rely on an exception. Such contractual arrangements (guarantees) partly compensate for weaker legal protection or lack of it, but not all risks can be completely excluded (e. g. from government access abroad).

Please also note that data exchanged via the internet is often routed via third countries. Your data may therefore be sent abroad even if the sender and the recipient are in the same country.

5.           Data security

We use appropriate technical and organisational measures in the systems to keep your data stored by us securely and to protect it from loss, destruction, alteration and unauthorised access by third parties.

Technical security measures include the encrypted transmission (including login data) of data, logging, access restrictions and the storage of backup copies.

Our security measures are continuously adapted in line with technological developments. Absolute protection cannot be guaranteed, though.

6.           Cookies/tracking and other technologies

6.1         Use of cookies

We use cookies on our website to make it more user-friendly, secure and effective. In this connection, our interest in optimising our website is to be regarded as legitimate. Cookies are text files that are stored in the internet browser or by the internet browser on your computer system. The use of cookies serves to make the use of our website more convenient for you.

We primarily use session cookies to determine that you have already visited individual pages of our website. These are automatically deleted when you leave our site. In addition, we also use temporary cookies for the purpose of user-friendliness which are stored on your device for a specified period of time. If you visit our website again to use our services, it is automatically detected that you have already visited us and which entries and settings you previously made so that you do not have to enter this information again.

We also use cookies to statistically record the use of our website and evaluate it for the purpose of optimising our offerings for you, as well as to display information tailored specifically to you if necessary (online marketing). These cookies are automatically deleted after a defined period of time.

The data collected in this way is pseudonymised by means of technical precautions. As a result, it is no longer possible for us to associate the data with the accessing user. The data is not stored together with other data. When you first visit our website, an information banner informs you about the use of cookies for analysis purposes and refers you to this Privacy Policy. You can prevent cookies from being stored in your browser settings. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

The procedure for controlling and deleting cookies depends on the browser you use. You will find information on this in the help menu of your browser (usually under “Privacy”).

To the extent permitted, we may also incorporate visible and invisible image elements in our newsletter e-mails. By retrieving them from our servers, we can determine whether and when an e-mail was opened so that we can measure and better understand how our offerings are being used. You can block this in your e-mail programme.

By using our website and consenting to receive newsletter e-mails, you agree to the use of these technologies. If you do not wish this to happen, you must set your browser or e-mail programme accordingly.

6.2         Google Analytics

On our website, we use Google Analytics, a web analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA, USA) and Google Ireland Ltd. (Google Building Gordon House, Barrow St, Dublin 4, Ireland); both together “Google”, whereby Google Ireland Ltd. is our processor. Google Analytics uses cookies (text files) and similar technologies to collect certain information about the behaviour of individual users on or in the website in question and the device used for this purpose (tablet, PC, smartphone, etc.) in order to analyse the use of the website.

The information generated by these performance cookies about the use of the website (including your IP address) is transmitted to and stored by Google on servers in the USA. Depending on the version of Google Analytics used, the services are configured in such a way that no IP addresses are logged or stored, or the IP addresses of visitors to Google websites within Europe are truncated before being forwarded to the USA so that they cannot be traced. We have deactivated the “Data transfer” settings. Google provides us with reports and can therefore be regarded as our processor. Google also processes certain data for its own purposes. Google may be able to draw conclusions about the identity of visitors to the websites based on the data collected and therefore create personal profiles and link the data obtained to any existing user accounts of these persons. Google may also pass on this information to third parties if required to do so by law or if third parties process this data on behalf of Google. If you consent to the use of Google, you explicitly consent to such processing, which also includes the transfer of personal data to the USA and other countries. You can find further details on data privacy in connection with Google Analytics here.

6.3         Google Web Fonts

We use “Google Web Fonts” on our website. This enables the uniform display of fonts, known as web fonts, provided by Google. When you open a page, your browser loads the necessary web fonts into its cache to display text and fonts correctly. If your browser does not support web fonts, a standard font from your computer is used. Further information on Google Web Fonts is available here and in Google’s privacy policy.

6.4         Google Tag Manager

We use Google Tag Manager on our website. This allows us to manage what is called website tags via an interface, enabling us to integrate services such as Google Analytics and other Google marketing services into our online offering. The Tag Manager itself, which implements the tags, does not process any personal data pertaining to users. With regard to the processing of users’ personal data, we refer to the use policy of the Google services.

6.5         Google Site Kit

We use “Google Site Kit” on our website. This plugin, provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), serves to manage and analyse our website. Google Site Kit allows us to centrally manage various Google services, such as Google Analytics, Google Search Console, Google AdSense and others, and integrate them directly in our WordPress website.

Using Google Site Kit involves the transmission of various data to Google, including your IP address, information about the browser you use, the subpages of our website you visit, and other interactions during your website visit. This data is stored on Google’s servers, which may be located in the USA or other countries.

Google uses this information to provide us with detailed reports and analyses on website traffic, our website performance, user interactions and other relevant metrics. More information can be found in their use policy.

6.6         CDNJS

We use CDNJS (Content Delivery Network JavaScript) on our website, a public content delivery network (CDN) for JavaScript libraries. It is used on websites to improve page load times by hosting commonly used JavaScript libraries on an external server and distributing them through a global network. This allows content to be loaded faster and more efficiently from the server closest to the user, rather than from the website’s origin server. As a result, users anywhere in the world can access the website quickly and reliably, without waiting for a slow connection to the origin server. Using CDNJS also helps reduce server load on the website and improves overall performance. See here for details.

6.7         Cloudflare

We use Cloudflare on our website, which is a content delivery network (CDN) and web security platform designed to accelerate websites, improve website performance and provide protection against various types of attack. It also offers various functions and tools for privacy protection and optimisation of website performance. Using Cloudflare allows website content in particular to be stored on servers located at different geographical locations, enabling faster content delivery for users in different regions. This helps reduce page load times and improves overall website performance.

Cloudflare employs various security measures such as IP whitelisting and distributing traffic across multiple servers in order to protect websites against distributed denial-of-service (DDoS) attacks. See here for details.

6.8         Complianz

We use the Privacy Suite for WordPress by Complianz on our website to collect consent data. For this functionality, your IP address is anonymised and stored in our database. See the Complianz privacy policy for details.

7.           Duration of processing of your personal data

We only process your data for as long as it is necessary for the respective purpose and for the fulfilment of our contractual and legal obligations, including statutory retention obligations (usually 10 years), or if you have given us your consent to do so. We continue to process your data for as long as we have a legitimate interest in storing it. This may be the case in particular if we require personal data to assert or defend against claims, for archiving purposes, and to ensure IT security.

8.           Your rights

You have several choices when using our website. You may choose not to provide any information at all by not filling out any relevant forms or data fields on our website, by blocking cookies and by not using any of the available personalised services.

If you choose to provide personal data or provide it to us in connection with our business relationship, you have, under certain circumstances and to the extent permitted by applicable law, the right to access, rectify and erase your data, the right to restrict data processing and withdraw your consent to data processing and, where applicable, the right to data portability and the right to object. Your rights are not absolute. We reserve the right to enforce the restrictions provided for by law. We will inform you accordingly.

If you would like to assert your rights with us, please contact us in writing (by post or e-mail) using the contact details in section 1 and enclose proof of your identity.

Furthermore, every data subject has the right to assert their claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner.

9.           Subject to alteration

The Privacy Policy does not form part of any contract with you. We reserve the right to amend this Privacy Policy at any time, in particular if we change the way in which we process data or if new legislation becomes applicable. The version published on this website is the current version; previous versions are replaced by the new version.

The German version of the privacy policy is the legally valid version in any case.

Last updated: 15 April 2025