1 Who is responsible for your personal data

The controller within the meaning of data protection legislation is Circle of Young Humanitarians, Dietzingerstrasse 12, 8003 Zurich, e-mail: info@young-humanitarians.ch. CYH determines the purposes and means of the processing of your personal data and is therefore responsible for the processing and use of your personal data in accordance with this privacy policy. If you have any questions or concerns regarding this Privacy Policy or the processing of your Personal Data, please contact us at any time by sending an e-mail to info@young-humanitarians.ch.

2 How we process personal data

All personal data collected via the website is processed in accordance with the Swiss Data Protection Act. We collect and process personal data carefully and for the purposes described in this Privacy Policy. In accordance with applicable law, we may also use your personal data in ways other than those described in this Privacy Policy. In this case, we will provide you with specific privacy statements or notices at the time of collection and, if necessary, obtain your consent. We will always make reasonable efforts to collect information in anonymised or pseudonymised form so that we cannot identify you.

3 Which personal data do we collect for which processing purposes

3.1 Personal data automatically transmitted via the use of the portal

CYH collects and stores information that your browser automatically transmits to us in "server log files" when you visit our website. Data is collected on the basis of your intention and interest in visiting our website and our legitimate interests in operating the website. This may include the following data

• Browser type and browser version;

• Operating systems used;

• Referrer URL (the previously visited website);

• Host name of the accessing computer;

• Date and time of the server enquiry;

• Internet Protocol address (IP address);

• Amount of data transferred;

• Other similar data and information used for security purposes in the event of attacks on our IT systems.

This personal data is not merged with other personal data and is stored separately from any other personal data transmitted by the user. It will be deleted after three months at the latest.

CYH uses the automatically collected personal data to fulfil the following purposes:

• to enable the display, operation and functionality of the portal

• to ensure the stability and security of the system

• to improve and protect our services

• for statistical purposes in the event of attacks on the network infrastructure on which the website is made available

3.2 Personal data that the user transmits to us

CYH collects and processes personal data that the user voluntarily transmits to CYH by means of an online form directly on the portal, via our contact e-mail address, via any other applications connected to the portal, by telephone or in any other way. This information includes, for example, the following personal data

• Surname, first names, postal addresses, e-mail address, telephone number, date of birth, gender

• Your message or enquiry.

The provision of this personal data is expressly on a voluntary basis. Without this personal data, however, we will not be able to provide the services requested by the user in the desired quality or at all.

CYH uses the personal data provided by the user to fulfil the following purposes:

• to provide, maintain, protect and optimise the services and information offered

• communicate with you and provide you with the best possible and personalised information that you require from us (e.g. about our products and services)

• to offer you new services and information and, based on your profile, to suggest personalised services and information that may be of interest to you

• to comply with legal or other regulatory requirements and internal regulations

• for the establishment, exercise and/or defence of actual or potential legal claims, investigations or similar proceedings

• for other lawful purposes where such processing is apparent from the circumstances or was indicated at the time of collection

4 On what legal basis do we process personal data about you

The processing of this personal data is based on the following legal bases:

• Your consent, only if it can be withdrawn at any time (e.g. when you sign up for our newsletter and other marketing communications)

• for the fulfilment of a contract with you or for the intention of concluding a contract with you (e.g. when purchasing a product)

• to comply with a legal obligation (e.g. for tax reasons or for the purpose of legal investigations or proceedings) or

• to protect our legitimate interests (e.g. protection and security of our services, systems, assets; compliance with legal, regulatory and contractual obligations; establishment, exercise or defence of legal claims; maintenance and efficient organisation of business operations; improvement and development of our services and sale and marketing of our services)

If the processing is based on your consent or our legitimate interests, you can withdraw your consent or object to this processing at any time by contacting us directly at info@young-humanitarians.ch. Please note, however, that the withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal.

5 Who we share your personal data with

CYH takes the necessary measures to ensure that only our authorised personnel and our auxiliary persons who have the necessary knowledge have access to your personal data in order to fulfil the purposes for which your personal data was collected.

We may disclose your personal data to the following possible categories of recipients in accordance with the purposes and legal bases of processing described above, insofar as this is necessary for the intended data processing:

• Other companies in the Group;

• Service providers who process the personal data on behalf of and on the instructions of CYH (so-called contract processors, such as in the areas of IT, hosting and support)

• Customers, partners, suppliers, insurance companies and other business partners

• Media agencies, the public, including visitors to the Group's websites and social media

• Industry organisations, associations and other bodies;

• Acquirers or parties interested in acquiring business units, companies or other parts of the Group;

• Courts, arbitration bodies, law enforcement agencies, regulators, lawyers and other parties to potential or actual legal proceedings where necessary to comply with the law or for the establishment, exercise or defence of legal rights or claims.

We select our partners and processors carefully and only if we have sufficient guarantees that they have appropriate technical and organisational measures in place in accordance with legal requirements. Our processors can only process personal data on our documented instructions. They are all subject to confidentiality requirements and may only use your personal data to the extent necessary to fulfil the purpose for which your personal data was collected, unless otherwise required by law.

6 Transfer of personal data to countries outside the EEA

The personal data collected via our website is stored in Switzerland. In addition, we may transfer, store and process your personal data at data locations around the world, e.g. where our third-party providers or partners are located. Therefore, we may transfer your personal data outside the European Economic Area (EEA) if this is necessary for the data processing described in this Privacy Policy in accordance with applicable law.

Where data is transferred to countries that do not ensure an adequate level of protection, we ensure an adequate level of data protection by putting in place appropriate safeguards, such as contractual safeguards (e.g. based on EU standard clauses), on the basis of binding corporate rules, the transfer of data in accordance with your explicit consent, for the conclusion or fulfilment of a contract with you, or in connection with the establishment, exercise or enforcement of legal claims. For more information about our appropriate safeguards, please contact us by email at info@young-humanitarians.ch

7 How long we keep information about you

In principle, personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected, unless longer retention is necessary to fulfil legal obligations (e.g. retention and documentation obligations), contractual or pre-contractual obligations or our legitimate business interests (e.g. for the assertion, exercise or defence of legal claims).

On this basis, we generally process personal data in compliance with the following rules and obligations:

- The personal data automatically transmitted by you through the use of our portal (see point 3.1.) for the purpose of displaying, operating and ensuring the functionality of the portal will be deleted within three to six months.

- The personal data you transmit to us in connection with the use of our services and products offered on our portal or which you otherwise transmit to us via the e-mail contact address (see section 3.2.) will generally be stored by us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed).

8 Cookies, services of Google

When you access or use the Website, we may place so-called cookies - small text files - or similar tools on your computer. We use these cookies to recognize you as a user of the Website, to customize content, to improve the performance of the Website and to enhance its usability.

8.1 Categories of cookies that we use:

Depending on their function and purpose, the cookies we use can be divided into the following categories: functional cookies, performance cookies and advertising cookies.

• Functional cookies: These cookies serve a variety of purposes for the presentation, functionality and performance of a website and in particular to improve the experience and enjoyment of visitors to the website. They allow a website to remember information already provided (e.g. user name, location or language selection) and offer visitors improved, more personalized features. Functional cookies are used, for example, to remember things like your login details. These cookies cannot track your movement on other websites.

• Performance cookies: These cookies are used to collect information about how a website is used - for example, how visitors arrived at our website, which pages a visitor opens most frequently, how you navigated our website during your visit and whether you receive error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, such as how many visitors have come to our website. These cookies are used to monitor the level of activity on the website and to improve the performance of the website.

• Advertising cookies allow us or a third party provider to serve ads on our website or on third party websites with products that the user likes, so that the ads the user sees may be more relevant to the user's preferences or interests (sometimes referred to as "targeting cookies"). They can also be used to evaluate the effectiveness of advertising and promotions.

8.2 Google Analytics

On its website, CYH uses the website analysis service of Google Analytics, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The cookies used by Google Analytics are stored on your computer and enable your use of the website to be analyzed.

We use Google Analytics on the basis of our legitimate interests to analyze and regularly improve our website and to use the statistics obtained to regularly improve our offer and make it more interesting for you. Furthermore, the use of Google Analytics is based on your consent to the tracking of your surfing behavior on our websites and their analytical evaluation.

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. These cookies may contain the following information, for example IP address, number, date and time of the visit, duration of the visit, your access page from which you use the website (reference URL), the pages visited on our website, browser type/version and operating system used. Google will use this information on our behalf because we have a legitimate interest in the analysis of user behavior so that we can optimize the offer on our website as well as our advertising. Google uses this information to evaluate the use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Pseudonymized user profiles can also be created from the processed personal data.

We have activated the IP anonymization function on this website (so-called IP masking). This means that your IP address will be shortened by Google within member states of the European Union, in other signatory states to the Agreement on the European Economic Area and in Switzerland before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.You can also prevent the collection of personal data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this personal data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, or within browsers on mobile devices, you can prevent the collection of your personal data by Google Analytics by clicking on the following link: Deactivate the collection of personal data by Google Analytics for this website. In this case, a special opt-out cookie will be placed on your device that prevents the future collection of your user data when you visit this website. If you delete your stored cookies, you must click this link again. For more information on how Google Analytics handles user data, please refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

It is also possible that Google may check the use of the website by the user and possibly combine the personal data collected with other information about the user that Google has independently collected from other websites visited by the user and use this for its own purposes (e.g. to control advertising) on its own responsibility on the basis of its own privacy policy. Further information on this and how Google processes personal data can be found in Google's privacy policy: https://policies.google.com/?hl=de ;https://policies.google.com/technologies/partner-sites.

8.3 Google Maps

This website uses Google Maps API, a map service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

The legal basis for the processing results from your consent based on your voluntary information for the creation of a map and our legitimate interests in the presentation of our location and the ease of finding the location specified by us on the website.

By using Google Maps, information about the use of our website, including your IP address, may be transmitted to a Google server in the USA and stored there. Google may transfer the information obtained through Google Maps to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

Under no circumstances will Google associate your IP address with other Google data. Nevertheless, it would be technically possible for Google to identify at least individual users on the basis of the data received. It is possible that personal data and personality profiles of users of the website could be processed by Google for other purposes over which we have and can have no influence.

It is possible to deactivate Google Maps and prevent data transmission to Google by deactivating JavaScript in your browser. However, we would like to point out that you will not be able to use the map display in this case.

For more information on the purpose and scope of data collection and its processing by Google, as well as further information on your rights in this regard and settings options to protect your privacy, please visit: www.google.de/intl/de/policies/privacy.

8.4 List of cookies

Below you will find a complete list of the cookies that we use or will use on this website, including information about their use and expiry.

• Cookie: PHPSESSID

  • Category: Necessary

  • Purpose: The so-called session ID is a randomly selected key that uniquely identifies the session data on the server. This key can be transferred to a follow-up script, e.g. via cookies or as part of the URL, so that it can find the session data on the server again.

• Cookie: _GRECAPTCHA

  • Category: Necessary

  • Purpose: The Google Recaptcha service sets this cookie to identify bots and protect the website from malicious spam attacks.

• Cookie: Google Analytics

  • Category: Statistics

  • Purpose: Used to obtain the session status

9 Social media plug-ins

We use the social plug-ins listed below on our website to make our company better known. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Responsibility for data protection-compliant operation must be guaranteed by the respective provider. Data processing in connection with these plug-ins is carried out with your consent when you use these plug-ins.

If you use the services of these social networks independently of or in connection with our website, the social networks will evaluate your use of the plug-in. In this case, information about the plug-in is forwarded to the social networks.

Our website uses the plug-in of the social network Instagram, which is offered by Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA.

The data is only sent to the social media provider when the user activates the social media plug-ins by clicking on the selected plug-in. The user can therefore choose when to activate them. In this case, Facebook can establish a direct connection to the user during their visit to the website, which enables Facebook to know the user's visit and to analyze the corresponding information. The further processing of personal data is the responsibility of Facebook in accordance with the data protection laws and the data protection guidelines published on its website (https://help.instagram.com/519522125107875/helpref=hc_fnav&bc[0]=Instagram help section&bc[1]=Guidelines%20and%20 notifications). Please read the privacy policies of your social networks carefully for detailed information about the collection and transfer of personal data, your rights, and how you can achieve satisfactory privacy settings.

10 No automated decisions including profiling with legal effect

We do not make any decisions about you that are based solely on automated processing - including profiling - and which produce legal effects concerning you or similarly significantly affect you.

11. Security

CYH has implemented organizational and technical measures to maintain the security of personal data and to protect it against unauthorized or unlawful processing, accidental loss, alteration, disclosure or access.

CYH may use third parties as data processors to collect and process your personal data. The data processors we engage will only process your personal data in accordance with our instructions and are required by law to take strict security precautions when handling personal data.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. For this reason, you are always free to transmit your personal data to us by other means, e.g. by telephone. Once we have received your data, we apply strict procedures and stringent security measures to prevent unauthorized access.

12 Privacy policies of third party providers

Please note that if you click on the link to a third-party website (e.g. Google or social media or other websites), you will be redirected to a website that we do not control and our Privacy Policy will no longer apply. Your browsing and interaction on another website is subject to the terms of use and privacy policies and notices of those third party websites. Furthermore, we cannot guarantee the accuracy and timeliness of these links.

We recommend that you carefully read the terms of use and the privacy statements and notices of other websites before you submit any personal data via this website. We are not responsible or liable for the information content and data processing of such third-party websites.

13 What are your rights

You can request information from CYH about whether personal data about you is being processed by providing proof of your identity. You also have the right to request the rectification, erasure or restriction of personal data concerning you and to object to the processing of your personal data. If the processing is based on your consent or our legitimate interests, you can withdraw your consent or object to this processing at any time by contacting us directly by e-mail at info@young-humanitarians.ch. In certain cases, you have the right to receive personal data generated when using online services in a structured, common and machine-readable format, so that further use and transmission to any third-party provider is possible.

Requests in this regard should be sent to CYH via the following e-mail address: info@young-humanitarians.ch. CYH reserves the right to restrict your rights within the framework of applicable law and, for example, not to disclose comprehensive information or to delete personal data. Please note that even after a request to delete your personal data, we must retain all or part of it within the scope of the statutory and contractual retention obligations. The deletion of your personal data may mean that you can no longer use our services.

If we reject your request or you are not satisfied with our processing, you are also entitled to lodge a complaint with the competent supervisory authority and to appeal to the competent authority. The competent authority is the Federal Data Protection and Information Commissioner (FDPIC) in Bern (https://www.edoeb.admin.ch).

14 Changes to our privacy policy

CYH reserves the right to adapt, amend or otherwise change this personal data protection declaration at any time and without giving reasons. The current personal data protection declaration as published on the portal applies.