This website no longer supports Internet Explorer 11. Please use a more up-to-date browser such as Firefox, Chrome for better viewing and usability.

Privacy Policy

Note on translation
This translation of the privacy policy was automatically generated by DeepL in order to make the content accessible in other languages. Only the original German version is legally binding and authoritative.

The protection of your personal data is very important to us, the Research Institute of Organic Agriculture (hereinafter referred to as "FiBL").

We are committed to handling your personal data responsibly and consider it a matter of course to comply with the Swiss Federal Act on Data Protection (DSG), the Data Protection Ordinance (DSV) and, in particular for our European companies within the FiBL Group, the EU General Data Protection Regulation (GDPR) and other applicable data protection regulations.

In our privacy policy, we explain how and for what purposes we will process your personal data and what rights you have in this regard.
Sections 3 to 6 of this privacy policy contain information on data protection for visitors to the joint website (www.fibl.org) of the companies of the FiBL Group in accordance with section 1.1. Section 7 contains additional information that is specifically relevant to the Research Institute of Organic Agriculture FiBL, Frick (Switzerland).

This privacy policy is not exhaustive. Other privacy policies, general terms and conditions and similar documents may regulate specific matters in a supplementary or deviating manner.
 

1. Contact

1.1. Name and address of the controller

Depending on which FiBL company you enter into a business relationship with, participate in our seminars and events with, or otherwise come into contact with, the following may be considered data controllers: 

FiBL– Research Institute of Organic Agriculture
Ackerstrasse 113 / Postfach 219
CH-5070 Frick
+41 (0)62 865-7272
info.suisse(at)fibl.org

FiBL Projekte GmbH
Postal address:
PO Box 90 01 63
D-60441 Frankfurt am Main
House address:
Kasseler Straße 1a
D-60486 Frankfurt am Main
+49 (0)69 7137699-0
info.projekte(at)fibl.org

FiBL Austria
FiBL – Research Institute of Organic Agriculture
Doblhoffgasse 7/10
A-1010 Wien
+43 (0)1 9076313
Fax +43 (0)1 9076313-20
info.oesterreich(at)fibl.org

FiBL France
Pôle Bio – Ecosite du Val de Drôme
150 Avenue de Judée
F-26400 Eurre
+33 (0)4 75 25 41 55
info.france(at)fib.org

FiBL Europe
Postal address:
Rue de la presse 4
B-1000 Brussels
Street address:
Rue du Congrès 37
B-1000 Brussels
+32 (0)2 227 11 24
info.europe(at)fibl.org

The Research Institute of Organic Agriculture (FiBL) in Frick (Switzerland) is responsible for this website.

If you have any questions about the handling of your personal data, please contact dataprotection(at)fibl.org.

1.2. EU representative

The EU representative for the European locations is:

FiBL Projekte GmbH, Frankfurt am Main, Germany
datenschutz.de(at)fibl.org

2. Data protection: in a nutshell

Below, we provide information about the most important aspects of our data processing. You will find more detailed information about our processing activities below.

2.1. What personal data do we process and where does it come from?

We use personal data that you provide to us, that we collect about you or that we have received from third parties. This includes, in particular, personal data:

that we receive in the course of our business relationships from customers, future customers, interested parties, service providers, suppliers, business partners or other persons involved in the business relationships;

  • which we receive from job applicants;
  • which we receive from visitors to our locations or participants in our seminars and events;
  • that we are legally or contractually obliged to collect;
  • which we collect when you use our website;
  • which we obtain from publicly accessible sources (media, internet) or public registers (debt collection registers, commercial registers, etc.);
  • which we receive from authorities and other third parties (address brokers, credit agencies).

Depending on the nature of the relationship, we process personal data from you such as:

  • Contact and identification data such as surname, first name, address, email address, telephone number;
  • Contract data such as services used, type of contract, contract content, type of products and services, applicable terms and conditions, contract start date, contract term, invoice data, names of contact persons;
  • Application data such as cover letter, CV and photo, employment references, diplomas, training certificates, third-party references, interview notes;
  • Financial data such as account information, payment information, payment history, average revenue;
  • Donor data such as details of the time and amounts and values donated or contributed;
  • Telecommunications data such as telephone number, value-added service numbers, date, time and duration of the connection, type of connection, location data, IP address, device identification numbers such as MAC address;
  • Interaction and usage data such as correspondence, preferences and target group information, device type, device settings, operating system, software, information from the assertion of rights;
  • Website information: IP address, cookie information, browser settings, frequency and duration of visits to the website, search terms, clicks on content, originating website.

2.2. For what purposes is the data processed?

We use the personal data we collect primarily to conclude and execute contracts with our customers and business partners. In addition, we process personal data to optimise our services and for marketing purposes.

We also rely on the processing of personal data for the purchase of products and services from our suppliers and subcontractors. If you work for a customer or business partner, you may also be affected in this capacity.

In addition, we process personal data from you and other individuals, to the extent permitted and as we deem appropriate, for the following purposes, in which we (and sometimes third parties) have a legitimate interest:

  • Communication and processing of enquiries (e.g. via contact forms, e-mail, job applications, media enquiries, telephone, letter post, blogs);
  • In the context of cooperation with customers, suppliers and partners;
  • For the fulfilment of contracts, order processing and in the pre-contractual phase;
  • Offering and further developing our products, services and websites and other platforms on which we are present;
  • Optimisation of our internet presence (adapting the website to your needs);
  • Compilation of usage statistics;
  • Administration of donations (e.g. acknowledgements, donation receipts, payment recording);
  • Fundraising, advertising and marketing (including the organisation of seminars and events), newsletter distribution, provided you have consented to the use of your data;
  • Prevention and investigation of criminal offences and other misconduct (e.g. conducting internal investigations, data analysis to combat fraud, defence against and recording of hacking attacks);
  • Assertion of legal claims and defence in connection with legal disputes and official proceedings;  
  • Reviewing and processing job applications;
  • Ensuring our operations, in particular our IT and our website.

The legal basis for processing your personal data is generally:

  • your consent (Art. 6 Para. 1 lit. a GDPR), insofar as you have given us your consent to process your personal data for specific purposes (e.g. when you register to receive newsletters). You can revoke your consent at any time, but this will not affect any data processing that has already taken place.
  • the conclusion or fulfilment of a contract with you or your request in advance (e.g. by submitting a job application; Art. 6 Para. 1 lit. b GDPR ).
  • a balancing of interests (e.g. if your professional contact details are recorded when you contact us on behalf of your employer, implementation of marketing measures; Art. 6 Para. 1 lit. f GDPR ).
  • a legal obligation (e.g. for the storage of documents by us or for data processing within the framework of a public contract; Art. 6 Para. 1 lit. c GDPR ).
     

2.3. Is the data disclosed to third parties?

We treat your personal data as confidential and only pass it on if you have expressly consented to this, if we are required to do so by law, or if this is necessary in the context of using the website or for the provision of services requested by you, or if this is necessary for the fulfilment of a contract or pre-contractual measures.

We also disclose personal data to third parties within the scope of our business activities and for the above-mentioned purposes, insofar as this is permitted and appropriate, either because they process it for us (contract data processing) or because they wish to use it for their own purposes (data disclosure). This applies in particular to:

  • Service providers, including contract processors;
  • IT service operators (e.g. web hosting providers, e-mail delivery service providers, suppliers);
  • Retailers, suppliers and other business partners;
  • Insurance companies;
  • Banking institutions and payment service providers;
  • Public authorities;
  • Government agencies and courts.

In doing so, we naturally comply with the legal provisions governing the transfer of personal data to third parties. If we use processors to provide our services, we take appropriate legal precautions and technical and organisational measures to ensure that your personal data is protected in accordance with the relevant legal provisions. Among other things, processing by processors is limited to the contractually agreed purposes, they are obliged to protect your privacy to the same extent as we do, and they may only process your personal data in accordance with our instructions.

Some of the recipients are located in the United Kingdom, while others are located abroad.

2.4. Where is the data processed?

We generally process personal data in Switzerland or in an EU/EEA country or in another country that has an adequate level of data protection. With regard to certain processing operations, you must expect your data to be transferred to other countries within and outside Europe, where some of the IT service providers we use are located. If we disclose data to a country that does not have an adequate level of legal data protection, we require the recipient to take appropriate measures to protect your privacy (e.g. by agreeing to the EU Standard Contractual Clauses, the current version of which is available here, or other precautions) or we rely on justifications such as your consent.

2.5. How long do we retain your data?

We process personal data for as long as it is necessary to fulfil our contractual obligations or for the purposes pursued with the processing, for example for the duration of the entire business relationship and beyond, in accordance with the statutory retention and documentation obligations. It is possible that personal data may be retained for the period during which claims can be asserted against us and insofar as we are otherwise legally obliged to do so or legitimate interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will generally be deleted or anonymised.

In addition, we will delete your data if you request us to do so at the email address mentioned in section 1.1 and we have no legal or contractual obligation to retain or otherwise secure this data. 

2.6. What are your rights?

You have the following rights under the data protection law applicable to you and to the extent provided for therein:

Right to information: You have the right to request access to your personal data stored by us at any time if we process it.

Right to rectification: You have the right to have inaccurate or incomplete personal data corrected.

Right to erasure: You have the right to have your personal data erased under certain circumstances. In individual cases, in particular in the case of statutory retention obligations, the right to erasure may be excluded. In this case, the data may be blocked instead of erased if the relevant conditions are met.

Right to data portability: You have the right to request that we disclose certain personal data in a commonly used electronic format or transfer it to another controller.

Right of withdrawal: You have the right to withdraw your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your withdrawal.

Right to object: You have the right to object to the processing of your data, in particular for the purposes of direct marketing, profiling for direct advertising and other legitimate interests in processing.

Right to further information: You have the right to request further information necessary for the exercise of these rights.

Automated individual decisions: You have the right to express your point of view in the case of automated individual decisions and to request that the decision be reviewed by a natural person.

To exercise these rights, please send us an email to the email address mentioned in section 1.1.

Right to lodge a complaint: You also have the right to enforce your claims in court or to lodge a complaint with the competent data protection authority.  

Please note that these rights are subject to certain conditions, exceptions or restrictions (e.g. if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are permitted to invoke this) or need it to assert claims). We will inform you accordingly if necessary. 

2.7. Use of the website by minors

The website is intended for an adult audience. Minors, in particular children under the age of 16, are prohibited from transmitting personal data to us or registering for a service. If we discover that such data has been transmitted to us, it will be deleted from our database. The child's parents (or legal representative) can contact us and request deletion or deregistration. To do so, we require a copy of an official document that identifies you as a parent or legal guardian.

2.8. How is your data protected?

We take technical and organisational security measures to protect your personal data against manipulation, loss, destruction or access by unauthorised persons and to ensure the protection of your rights and compliance with the applicable data protection regulations.

The measures taken are designed to ensure the confidentiality and integrity of your data and to guarantee the long-term availability and resilience of our systems and services when processing your data. They are also intended to ensure the rapid restoration of the availability of your data and access to it in the event of a physical or technical incident.

Our security measures also include encryption of your data. When your data is transmitted to us, it is encrypted using Transport Layer Security (TLS) / HTTPS. All information you enter online is transmitted via an encrypted transmission channel. This means that this information cannot be viewed by unauthorised third parties at any time.

Our data processing and security measures are continuously improved in line with technological developments.

We also take our own internal data protection very seriously. Our employees and the service providers we commission are obliged to maintain confidentiality and comply with data protection regulations. Furthermore, they are only granted access to personal data to the extent necessary. 

3. Visiting our website

As a rule, you can use our website without having to provide any personal information. This does not apply to areas and services that naturally require your name, address or other personal data, e.g. registrations for our seminars or events. 

3.1. Server log files

When you visit our website, the web server we use automatically collects various pieces of information and stores them temporarily in so-called server log files. This information includes, in particular, the IP address of the requesting computer (in anonymised form, if applicable), the date and time of access, the name and URL of the files accessed on , the operating system and browser type, the country of access, name of the Internet provider, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status or HTTP status code, amount of data transferred, the last website visited, browser settings, language and version of the browser software, and activated browser plug-ins. 
This data is required in order to deliver the content of our website to you correctly, to ensure system security and stability, to optimise our offering in terms of technology and content, to perform statistical evaluations and, if necessary, to provide law enforcement authorities with the information required for prosecution in the event of cyber attacks. The processing of this data is based on our legitimate interest. Our legitimate interest lies in ensuring the functionality and security of our website and in improving it. 
We delete your personal data as soon as it is no longer required for the purposes mentioned above. In the case of data collection for the provision of our website, deletion takes place, subject to criminal relevance, when the respective session has ended.  

For the hosting of our websites, we may use the services of third parties in the United Kingdom and abroad who carry out the above-mentioned processing on our behalf. Currently, the website www.fibl.org is operated by German hosting providers on servers in Germany. 

3.2. Local storage technology for FiBL job vacancies

To enable you to filter FiBL job vacancies by type and location, we use local storage technology (also known as "local data" and "local memory"). This involves storing data locally in your browser's cache, which remains there even after you close the browser window or exit the programme – unless you delete the cache – and can be read.
The data from local storage is used to display the appropriate ads based on your filters. The following information is stored as local data:  Filter options by location and job type.
Third parties cannot access the data stored in local storage. It is not passed on to third parties and is not used for advertising purposes. We use these techniques in our legitimate interest in order to be able to offer you an attractive, fully functional service.
The data stored in local storage remains on your device until you delete the cache or the stored website data in your browser. We do not automatically delete this data, as it is stored exclusively locally on your device.

3.3. Email marketing and marketing

On our website, we offer you the opportunity to subscribe to our newsletter. When you order the newsletter, you will be asked for your consent to the processing of your personal data. With this newsletter, we provide regular updates on news from the research, education and advisory work of the International Research and Education Centre for Organic Agriculture, FiBL.

To receive our newsletter, you need a valid email address. We will check the email address you have entered to ensure that you are actually the owner of the email address provided or that the owner has authorised you to receive the newsletter. This is done using the double opt-in procedure. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and deleted. In addition, we store your IP addresses and the times of registration and confirmation.

We need this information in order to send you our newsletter. By registering for the newsletter, you also consent to the statistical evaluation of user behaviour for the purpose of optimising and adapting the newsletter. This consent constitutes our legal basis for processing the data.

We will use your data for email correspondence until you revoke your consent. You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in every newsletter email, by sending an email to newsletter(at)fibl.org or by sending a message to the (email) address specified in section 1.1.

Our newsletters may contain graphics and/or web links that collect personal data on whether, when and how often an individual newsletter has been opened in an email application and which web links have been clicked on. Such graphics and/or web links collect information about the use of newsletters in order to ensure quality and enable improvements to the newsletter, and are used on the basis of our legitimate interests. You can block the setting of such graphics and/or web links in your email application.  

We use the email marketing software Mailjet (see section 3.5).

3.4. FiBL Switzerland distribution list for media professionals

On our website, we offer you the opportunity to subscribe to our FiBL Switzerland mailing list for media professionals. When you register, you will be asked for your consent to the processing of your personal data.

By registering for this mailing list, you will receive the latest media releases from FiBL Switzerland by email.

To receive press releases, you need a valid email address. We will check the email address you enter to ensure that you are the owner of the email address provided or that the owner has authorised you to receive press releases. This is done using the double opt-in procedure. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the press releases. If you do not confirm your registration, your information will be blocked and deleted. In addition, we store your IP addresses and the times of registration and confirmation.
We need this information in order to send you our press releases.

We store your personal data for as long as you are subscribed to the media distribution list. Once you have withdrawn your consent or unsubscribed from the distribution list, your personal data will be deleted immediately, provided that there are no legal retention obligations or legitimate interests (e.g. proof of consent) that prevent this. In this case, the data will be stored exclusively for these purposes and then deleted as soon as it is no longer required for this purpose.

You can revoke your consent to receive media releases at any time and unsubscribe from the mailing list. You can revoke your consent by clicking on the link provided in every media release email, by sending an email to media(at)fibl.org or by sending a message to the (email) address specified in section 1.1.

We use the email marketing software Mailjet (see section 3.5).

3.5. Mailjet

We use Mailjet Mailgun Technologies (Alt-Moabit 2, 10557 Berlin, Germany, hereinafter "Mailjet") to send our newsletter (section 3.3) and to deliver our media releases (see section 3.4).

We have concluded a data processing agreement with Mailjet. Mailjet processes data exclusively in data centres in the EU. Mailjet collects data on the openings and clicks of the newsletters sent.

For more information on Mailjet's privacy policy, please visit: www.mailjet.com/privacy-policy/.

3.6. Registration for seminars and events

You can register for seminars and events online using a registration form. To do so, you must enter the following mandatory information: selected event, first name, surname, organisation, telephone number, email address, residential address, postcode, city and country.

We require this data in order to register your online registration for the selected course and thus enable you to participate in the course. The provision of further data, which is marked separately, is voluntary and is used to optimise the seminar content and to enable us to contact you in other ways. You are entitled to revoke your consent at any time.

The legal basis for this is our legitimate interest in offering you online registration for our events.

If you do not wish to register online, you can also contact the address given in section 1.1to register for our seminars.

As part of the registration service, you can voluntarily choose the option to share the data you have provided for networking purposes. Your details (first name, surname, organisation, street, postcode, town, telephone number, email address) will be recorded in a list of participants, which will be sent to the other seminar or event participants by email or handed over in person. Your data will be entered into the participant lists on the basis of your consent. Your data will not be used for any purpose other than the creation of participant lists. Consent to be included in the list is given separately for each seminar and can be revoked at any time with effect for the future.

The legal basis for the processing of your personal data is the fulfilment of a contract to which you are a party or the implementation of pre-contractual measures.

You may object to the processing of your personal data at any time. Please send your objection to the email address specified in section 1.1. However, we would like to point out that in such a case, your registration cannot be processed further and your participation in the training course cannot be guaranteed.  

Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is usually the case after completion of your training course, provided that there are no legal retention periods that prevent deletion.  

3.6.1. Cvent

We use the Cvent platform provided by Event Tech Partner GmbH for the FiBL registration service. Event Tech Partner is a data processor and we have concluded a data processing agreement. For further information on the Cvent platform, please refer to Cvent's privacy policy.

3.7. Online meetings and online events / Microsoft Teams (recordings)

In order to exchange information, in particular for communication and collaboration, as well as to conduct webinars and other online training courses, we use Microsoft Teams ("MS Teams"), a collaboration platform provided by Microsoft Corporation, based in the USA, or, if you are resident in the European Economic Area (EEA) or Switzerland, Microsoft Ireland Operations Limited, based in Ireland ("Microsoft").

When using MS Teams, various data is processed, in particular content data from meetings, chats and shared files, call history, profile data (e.g. email address, profile picture) as well as your IP address and preferred language. Meeting metadata such as date, start and end time, meeting ID and, if applicable, telephone number and location are also processed. In addition, Microsoft collects diagnostic data in connection with usage, which enables Microsoft to provide the service, i.e. troubleshooting, backing up and updating MS Teams, and monitoring performance.

The data collected via MS Teams is transmitted to Microsoft servers and processed there. The storage location is in the geographical region assigned to our Microsoft 365 organisation, which is located in Switzerland. According to Microsoft, this data is not disclosed to unauthorised third parties.

The data collected is only stored for as long as is necessary to provide the service, i.e. usually until the end of the MS Teams session ("session") or until the respective user deletes the files they have shared.

In some cases, it may be necessary for us to record meetings. Recordings are made in particular to provide participants with a reference and to make the content accessible to people who were unable to attend the original meeting. The recordings are for internal use only and may not be passed on or reproduced without permission. The recordings are stored in encrypted form and access is restricted to the participants of the respective meeting and those (authorised) persons who have been authorised to do so by the creator of the recording (usually the organiser of the meeting).

Recordings are always made on the basis of your consent. We will inform you in good time if a meeting is being recorded. This gives you the opportunity to turn off your camera and microphone or leave the meeting. We would also like to point out that your name may be visible in the recordings even if your camera/microphone is turned off.

Recordings are only kept for as long as necessary (e.g. until absent participants have had the opportunity to view them). Recordings are deleted after one year at the latest.

To protect your privacy, we have entered into a Data Processing Addendum with Microsoft. Further information on data protection and data security, as well as how MS Teams works, can be found on the Microsoft Teams website.

3.8. Push notifications

We offer you the option of subscribing to push notifications via your internet browser. This function is provided by the "Signalize" service from etracker GmbH (Erste Brunnenstraße 1, 20459 Hamburg, Germany).

No push data is transmitted when you first visit the page. Only when you expressly allow reception via the corresponding request from your browser (opt-in) will a pseudonymous device identifier be stored in order to deliver the desired messages to you. No personal data such as your name or email address is collected.

Processing is based on your consent, provided that you actively agree to receive the messages. Our legitimate interest lies in providing you with a data-efficient and user-friendly information channel.

The data stored in connection with push notifications (e.g. pseudonymous device identifiers) is stored for as long as you have activated the service. After you unsubscribe from receiving notifications or revoke your consent, this data will be deleted or anonymised. In addition, you can stop receiving notifications at any time via the settings of your browser or mobile device and thus delete the stored data yourself.

For more information about unsubscribing from push notifications, please visit https://signalize.com/docs/sonstiges/opt-out-info/.

4. Cookies and tracking on our website

Like many other websites, we also use so-called "cookies". Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the entity that sets the cookie. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again. Cookies cannot execute programmes or transfer viruses to your computer. They serve to make the Internet offering more user-friendly and effective overall and to enable the use of certain functions.

Our website only uses technically necessary cookies that ensure the core functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. These purposes also constitute our legitimate interest in the processing of personal data.

We use temporary cookies. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognised when you return to the website. We use this type of cookie to ensure the operation and functionality of our website.

We integrate external content from third-party providers on our website. In this case, we explicitly point this out to you and obtain your consent before you can activate the external content. The third-party providers may set cookies. For further information, please refer to the respective section on this third-party provider in this privacy policy.

4.1. Signalize

In order to be able to design push notifications in accordance with section 3.8 in a way that is meaningful to you in terms of content, Signalize uses tracking technologies from etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany, on our behalf.

With your express consent, pseudonymous usage profiles are created using a tracking pixel and, if necessary, additional cookies. These contain information about your preferences and interactions on our website. For this purpose, your notification ID is linked to the pseudonymous user profile in order to provide you with individually tailored push notifications.

The tracking technology is also used for statistical evaluation of the push notifications. This allows delivery rates and click behaviour to be analysed.

The data generated in this way is processed and stored exclusively on our behalf by etracker GmbH in Germany. This is subject to the provisions of the GDPR and German data protection law. etracker GmbH is independently audited and certified with the ePrivacyseal data protection seal of approval.

Data processing for the analysis and improvement of our push notifications is based on our legitimate interest in effective, usage-based direct communication with our users. Privacy is protected by anonymising or pseudonymising IP addresses and login or device identifiers as early as possible. This prevents direct identification. No data is passed on to third parties or merged with other data sets.

The pseudonymous data processed in connection with Signalize is stored for as long as is necessary for the provision and optimisation of push notifications. After you revoke your consent, unsubscribe from the service or the technical storage period at etracker expires, the data is deleted or anonymised.

You can revoke your consent to the creation of pseudonymous profiles and to receiving personalised notifications at any time with future effect. Information on how to unsubscribe can be found at: https://signalize.com/docs/sonstiges/opt-out-info/

4.2. eTracker Analytics

We use the web analysis service etracker Analytics from etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany, on our website for statistical evaluation of the use of our online offering. The analysis is carried out entirely without the use of cookies.

Only web server data (e.g. pages accessed, time stamps, browser type) that is technically generated when using any website connection is used. This data is processed anonymously or pseudonymously so that no conclusions can be drawn about individual persons. No user profiles are created or linked.

Processing is based on our legitimate interest in operating our website in a technically stable manner and in anonymously analysing the reach and content of the website and improving it as needed. The interests and fundamental rights of users are protected by data-minimising collection and early pseudonymisation.

The data processed within the framework of etracker Analytics is only stored for as long as is necessary to fulfil the aforementioned analysis purposes. It is then deleted or completely anonymised so that it can no longer be linked to a specific person.

The data is processed exclusively on our behalf by etracker GmbH in Germany on the basis of a data processing agreement.

You can object to anonymous data collection at any time. To do so, an opt-out cookie is set, which prevents data from being collected in future. Please note that this cookie must be reactivated if you delete your browser cookies.

Further information on data processing by etracker can be found at: https://www.etracker.com/datenschutz/.

4.3. Google services

We use various Google services on our website to provide interactive and embedded content. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, or, if you are resident in the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google LLC is always responsible for the processing of personal data when using "Google Maps".

These services use technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of our website. The information generated about your use of our website may be transmitted to a Google server in the USA or other countries and stored there. Information about the locations of Google's data centres can be found here.  

The services are only loaded if you have given your express prior consent (e.g. via the cookie banner or by deliberately activating them). No data is transmitted to Google without your consent.

The personal data processed by Google is stored for as long as necessary for the respective purposes. The storage period depends in particular on the type of service used, the settings you have made and Google's internal guidelines on data retention and deletion. For more information, please refer to Google's privacy policy.

Further information on the individual services can be found below.  

Google uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of our website. The information generated about your use of our website may be transmitted to a Google server in the USA or other countries and stored there. Information about the locations of Google's data centres can be found here.  

We use tools provided by Google, some of which, according to Google, may process personal data in countries where Google or its subcontractors have facilities. In its "Data Processing Addendum for Products where Google is a Data Processor", Google promises to ensure an adequate level of data protection by relying on the EU Standard Contractual Clauses. Although this does not provide conclusive protection, Google also continues to be certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework.

For more information about Google's processing and privacy settings, please refer to Google's privacy policy and privacy settings

4.3.1. YouTube

No videos are embedded directly on our website. Instead, we only link to external content from the YouTube video portal, a service provided by YouTube LLC, based in the USA ("YouTube"), a subsidiary of Google LLC. ("Google").

When you click on such a link, you will be redirected directly to the YouTube platform. Only there will YouTube process personal data (e.g. IP address, device information or, if you are logged in, account data). No YouTube videos or elements are automatically loaded from our website and no data is transmitted to YouTube as long as you only visit our website.

Further information can be found in YouTube's terms of use and Google's privacy policy.

4.3.2. Google search function

Our website incorporates the Google Custom Search Engine search function from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This enables a full-text search of the content on our website.

The search function is accessible via a search field marked with a magnifying glass icon. The Google search script is only loaded when you actively click on the search field and submit a search query. This establishes a connection to Google's servers and allows Google to set personal data (e.g. IP address, search terms, location data, device information) and cookies.

Google uses cookies and similar technologies for analysis, security and advertising purposes, among other things. We have no influence on the type, scope and purpose of data processing by Google.

Your data is processed on the basis of your consent, which is given by actively using the search field. If you do not use the search function, no data is transferred to Google.

Further information on data protection at Google can be found at: https://policies.google.com/privacy. Information on Google's privacy settings can be found at: https://safety.google/privacy/privacy-controls/.

4.3.3. Google Maps

We use the online map service Google Maps to embed interactive maps on our website.

When you visit a web page that has Google Maps embedded in it, Google Maps will set a cookie. This cookie is not usually deleted when you close your browser, but expires after a certain period of time, unless you delete it manually beforehand.

By using Google Maps, information about your use of our website (including your IP address) may be transmitted to a Google server in the USA and stored there. Google may store this data as usage profiles for the purpose of designing services, advertising and market research in line with demand. If you are logged in to Google, your data will be directly associated with your account. If you do not want this to happen, you must log out beforehand. 
If you do not agree to this processing of your information, you have the option of deactivating the Google Maps service. To do this, you must deactivate the JavaScript function in your browser. However, this may also affect other functions of our website.

Further information can be found in the Google Maps Terms of Use and Google's Privacy Policy.

5. Social media presence

We maintain social media profiles on Facebook, Instagram, X, YouTube and LinkedIn, in particular:

Facebook and Instagram: We have several pages on Facebook

We have entered into a joint controller agreement (Controller Addendum) with Meta for the operation of Meta products. This agreement specifies which data processing operations we and Meta are responsible for when you visit one of our Facebook pages or Instagram profiles. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

X: We have several profiles on X (formerly Twitter)
X (formerly Twitter) is currently no longer managed by us, but the existing profiles remain in their previous form. Platform-side data processing by X may continue to take place; we have no influence over this.

YouTube:https://www.youtube.com/user/FiBLFilm

  • FiBL also operates other YouTube channels as part of international projects, which we do not list individually here.

(4) LinkedIn: We have several pages on LinkedIn

The data you enter on our social media profiles is published by the social media platform and is not used or processed by us for any other purpose at any time. However, we reserve the right to delete content if necessary. We may communicate with you via the social media platform.  

The basis for this is your and our legitimate interest in effective public relations and communication.

Please note that social media platforms use web tracking, over which we have no control. This tracking can also take place if you are not logged in or registered.

Please note that when using social media platforms, personal data may also be transferred to third countries such as the USA. These countries may not have a level of protection that complies with EU or Swiss data protection regulations. By actively using the platforms and their functions, you expressly consent to this transfer.

The storage and deletion of personal data in connection with the use of our social media presences is governed by the data protection guidelines of the respective platform operators. We have no influence on the duration of storage. The data will generally be deleted as soon as the purpose of processing no longer applies or you revoke your consent to the respective provider, provided that there are no legal storage obligations or legitimate interests in longer storage.

More detailed information on data processing by the provider of the social media platform can be found in the privacy policy of the respective provider: 

Social networkProviderPrivacy policy
X (formerly Twitter)X Corp. (USA)/Twitter International Company (Irland)https://twitter.com/de/privacy
FacebookMeta Platforms Inc. (USA)/Meta Platforms Ireland Ltd. (Irland)https://www.facebook.com/privacy/policy
Instagram Meta Platforms Inc. (USA)/Meta Platforms Ireland Ltd. (Irland)https://privacycenter.instagram.com/policy
YouTube YouTube LLC (USA)https://policies.google.com/privacy
LinkedIn LinkedIn Corporation (USA)/LinkedIn Ireland Unlimited Company (Irland)https://www.linkedin.com/legal/privacy-policy

 

6. Links to other providers' websites

Our websites may contain links to websites of other providers to which this privacy policy does not apply. Once you click on such a link, we no longer have any influence on the processing of any data transferred to the third party when you click on the link (such as your IP address or the URL where the link is located), as the behaviour of third parties is naturally beyond our control. We therefore cannot accept any responsibility for the processing of your data by third parties. If the use of other providers' websites involves the collection, processing or use of personal data, please refer to the privacy policies of the respective providers. 

 

7. Individual data processing by FiBL (Switzerland)

7.1. Provision of contractual services 

In order to fulfil our contractual obligations, we process your inventory data (e.g. names and addresses as well as your contact details) and contract data (e.g. services used, names of contact persons, payment information) with regard to our contractual obligations and services. We also understand contractual obligations to include the ongoing maintenance of customer relationships. 
The legal basis for the processing of your data is the fulfilment of a contract to which you are a party or the implementation of pre-contractual measures. 
If we store the data on the basis of a contractual relationship with you, this data will remain stored for as long as the contractual relationship exists and at least for as long as the limitation periods for possible claims by us run or statutory or contractual retention obligations exist. 

7.2. Contacting us

If you contact us via our contact addresses and channels (e.g. by e-mail or telephone), your personal data will be processed. The data you have provided us with (e.g. your name, e-mail address or telephone number and your enquiry) will be processed.

If you contact us by e-mail, your details will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. It is necessary to provide your name and an e-mail address. Providing a telephone number and other data is voluntary and serves to facilitate contact and to enable us to address you personally. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and for the associated technical administration.

The basis for the processing of your personal data is our legitimate interest in processing your enquiry. If the purpose of contacting you is to fulfil a contract to which you are a party or to carry out pre-contractual measures, this is an additional basis for the processing of your personal data.

You may object to this data processing at any time. Please send your objection to the (e-mail) address mentioned in section 1 and we will review your request. In such a case, your contact will not be processed further.

Your personal data will be deleted as soon as your request has been dealt with. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and there are no legal retention obligations that prevent deletion. 

7.3. Donations

If you donate to FiBL, FiBL Switzerland will process your contact details (such as title, first name, surname, email address, company name if applicable, postal address, IBAN or account number and the amount of the donation).
This data is processed in order to receive and record your donation and, if necessary, to issue a donation receipt. Processing is based on our legitimate interests in the efficient processing of donations and the fulfilment of legal obligations (in particular, taking into account the applicable national tax regulations).
The donation may be partially or fully tax-deductible under the applicable national tax law. Donor data is processed for the purposes of tax deductibility on the basis of a legal obligation and, if necessary, transmitted to the relevant tax authorities. If the data is not provided, donations cannot be accepted and no tax deduction is possible.
Your personal data will be stored for as long as is necessary to process the donation and to fulfil statutory storage and documentation obligations. This usually includes a retention period of ten years from the end of the calendar year in which the donation was made, in accordance with commercial and tax law requirements. After these periods have expired, your data will be deleted or anonymised, unless there are further legitimate interests (e.g. documentation requirements, law enforcement or queries regarding donation receipts).

7.4. Surveys

Our location occasionally conducts surveys on various topics. Participation in these surveys is voluntary and is based on your consent. 
In anonymous surveys, no information is stored that could be used to identify you or your business. For example, your answers are aggregated and evaluated in summary form. 
Participation in the surveys is always voluntary. If personal data (e.g. name, email address, IP address, answers with personal references) is collected in the respective survey, the data processing is carried out either on the basis of your consent or on the basis of our legitimate interest in evaluating and improving our services or processes, depending on the purpose of the survey.
The survey data will be used exclusively for the specified purpose and will not be merged with other data. Evaluation will only be carried out in aggregated form or using pseudonymised data sets, where possible and permissible.
The data collected will be deleted as soon as it is no longer required for the purpose of the survey and there are no legal retention obligations. You can revoke your consent to participate in the survey or to the processing of your personal data at any time with effect for the future. In this case, your personal data will be deleted, provided that there are no legal retention obligations. 

7.4.1. LimeSurvey

We use LimeSurvey software to conduct online surveys. LimeSurvey is a survey tool offered by LimeSurvey GmbH, Papenreye 63, 22453 Hamburg, Germany. Surveys can be conducted either anonymously or with the collection of personal data, depending on the purpose of the respective survey.
LimeSurvey is provided technically in-house on our own servers. The service provider is contractually obliged to process the data only in accordance with our instructions and to take appropriate technical and organisational measures to protect the data.
Further information on data processing by LimeSurvey GmbH can be found at: https://www.limesurvey.org/de/datenschutzerklaerung.

7.5. Applying for a vacant position

When you apply for a position with us, we process the personal data that we receive from you during the application process or that you enter or upload in the application form. In addition to your personal details, education, work experience and skills, this includes the usual correspondence data such as your email address and telephone number. In addition, all documents submitted by you in connection with your application, such as your CV and references, will be processed. This data will be stored, evaluated, processed or forwarded internally exclusively for the purposes of your application. It may also be processed for statistical purposes (e.g. reporting). In this case, no conclusions can be drawn about individual persons. 
Your applicant data will be stored separately from other user data and will not be merged with it. 
Your applicant data is processed in order to fulfil our (pre-)contractual obligations within the framework of the application process.  

You may object to this data processing at any time and withdraw your application. Please send your objection to the contact person named in the job advertisement or to the email address specified in section 1.1.

If we conclude an employment contract with you, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.  

If the application process ends without employment, your personal data will be stored for 6 months for documentation purposes and then deleted or returned to you, unless you have given us your consent to use your details for further application processes with us. You have the option to revoke this consent at any time.  

You can send your revocation to the email address provided in the job advertisement or to the email address specified in section 1.1.

7.6. Profiling and automated decision-making

We do not use fully automated decision-making for the establishment and implementation of the business relationship or for any other purpose. Should we use such procedures in individual cases, we will inform you separately if this is required by law and explain your rights in this regard.