Data protection

1.Responsible body

The entity responsible for processing your personal data is:

This statement applies to the website susyutzinger.ch and to all personal data that we process in connection with donations, sponsorships, orders, courses, projects, and inquiries, even if you write to us or call us. Please direct any questions regarding data protection to the address above. Further information about the foundation can be found in the legal notice.

2.Basics

We comply with the Federal Data Protection Act (DSG) . We process personal data in good faith, only for the purpose that was apparent at the time of collection, and only for as long as necessary.

Where the EU General Data Protection Regulation (GDPR) is applicable, for example in the case of donations from Germany or Austria, we rely on your consent (Art. 6 para. 1 lit. a GDPR), on the performance of a contract such as an order or sponsorship (lit. b), on legal obligations such as the retention of accounting records (lit. c), and on our legitimate interest in the secure operation of the website and in informing our donors (lit. f). Individuals in the EU can also contact the data protection authority of their country.

3.Visit the website

When you access a page, your browser automatically transmits technical information: IP address, date and time, the page accessed, the previously visited page (referrer), browser, and operating system. This information is needed to deliver the website, identify errors, and defend against attacks. It is not combined with other data and is deleted after a short time.

We do not operate our own servers. Our website is hosted by Raidboxes GmbH in Münster, Germany, which provides the technical infrastructure and manages these logs on our behalf. To protect against attacks, we use the security software Wordfence (Defiant Inc., USA). It checks access attempts for known attack patterns and compares IP addresses against blocklists.

All connections to susyutzinger.ch are encrypted (TLS). You can recognize this by the padlock icon in your browser's address bar.

4.Cookies and your consent

Cookies are small files that your browser stores. We need some for the website to function, for example, for the shopping cart. We only set all others if you agree in the cookie banner on your first visit. This banner is provided by Borlabs Cookie (Borlabs GmbH, Hamburg) and stores your choice in a cookie in your browser.

You can change or withdraw your consent at any time: via the button below, the "Cookie settings" link at the bottom of each page, or by deleting the cookies in your browser.

5.Statistics and advertising

We integrate the following services via Google Tag Manager. They only run if you have agreed to the respective category.

Google Analytics

Google Analytics shows us how many people visit our pages, where they come from, and what content they read. Google stores a random identifier in a cookie for this purpose, but not full IP addresses. We only see the data aggregated, not on a per-person basis.

Google Ads

If you arrive at our website via a SUST ad on Google, Google Ads tracks whether a donation or order is subsequently made. Using the remarketing function, we can later show SUST ads to people who have visited our website on other websites within the Google advertising network. You can manage your Google ad settings at myadcenter.google.com.

Meta-Pixel and LinkedIn Insight Tag

These two services measure the performance of our posts and ads on Facebook, Instagram, and LinkedIn, and allow us to target ads to visitors of our website. If you are logged into Meta or LinkedIn, the provider can associate your visit with your account.

Origin declaration for orders

When you place an order in our shop, WooCommerce stores information about how you arrived at our website (for example, via a search engine or our email newsletter). This information is stored along with your order in the shop and is not shared with third parties.

The providers are Google Ireland Limited (Dublin), Meta Platforms Ireland Limited (Dublin) and LinkedIn Ireland Unlimited Company (Dublin). The data may also be transferred to their parent companies in the USA (see section 15 ).

6.Embedded content and social networks

Some content comes from other providers. Your browser connects to their servers and transmits at least your IP address in the process. We only load this content after you have given your consent or clicked on it.

• YouTube For videos. If you are logged into Google, YouTube can associate playback with your account.
• Google Maps for maps, for example on the page about our activities.
•  Google reCAPTCHA This protects our forms from automated entries. Google analyzes data such as IP addresses and mouse movements for this purpose.
• Google translatorIf you select a different language via the globe icon, the text of the page will be sent to Google and translated.

Our profiles on Facebook, Instagram, LinkedIn, TikTok, and YouTube are only linked on this website. The provider only becomes aware of your activity when you click on such a link. The privacy policies of the respective platforms apply on those platforms. If you follow us there or comment on a post, we will see your public profile name; the platforms also provide us with aggregated statistics about the reach of our posts.

7.Donate

When you donate, we process your name, address, email address, donation amount, date, payment method, and the purpose of your donation. If you make a bank transfer, we also process your bank details. We need this information to record your donation, thank you, issue a donation receipt for your tax return, and keep you informed about our activities, for example, with our foundation newsletter, "animal flash."

Online donations are processed by Payrexx AG (Thun) and RaiseNow AG (Zurich). You enter your card and TWINT details directly with these providers; they do not reach us. Our accounts are held with PostFinance AG. We manage donor data in the Amber database (comconsult, Zurich).

If you no longer wish to receive mail from us, simply send a brief message to info@susyutzinger.ch . We treat information regarding legacies and inheritances with the utmost confidentiality.

8.Sponsorships

When you sponsor, gift, or inquire about a sponsorship, we store your contact information, the sponsorship details including contributions and payments received, and the format in which your name should appear next to the animal. We need this information to manage the sponsorship: for the certificate, updates on the animal, allocation of your payments, our thanks, and any follow-up questions.

Your name will only appear on our website in the form you choose (for example, "Karin A."), or not at all. We send the sponsorship newsletter via mailxpert if you have subscribed. We answer questions about your sponsorship and your data at patenschaft@susyutzinger.ch.

9.Shop and crowdfunding

To place an order in our shop or contribute to a crowdfunding campaign, we need your name, address, email address, the items ordered, and your preferred payment method. We can also provide your phone number if you wish. This information allows us to process your order, handle payment, and answer any questions. The shop is part of our website and runs on WooCommerce.

Card payments are processed by Stripe Payments Europe Limited (Dublin). You enter your card details directly with Stripe; Stripe also checks the payment for fraud. For bank transfers, we allocate your payment using the order number. Swiss Post receives your name and delivery address for shipping purposes.

When participating in a crowdfunding campaign, you can specify that your contribution should remain anonymous. If you create a customer account, we will also store your login details and order history until you request account deletion.

10.E-newsletter and foundation newspaper

For the e-newsletter, we need your email address; optionally, you can also provide your name. After registering, you will receive an email with a confirmation link; only then will we add you to the mailing list. The e-newsletter is published monthly and includes practical tips and case studies.

MailXpert GmbH (Zurich) handles the distribution. We can see whether an e-newsletter has been opened and which links have been clicked. This helps us to improve it. You can unsubscribe at any time via the link at the end of each e-newsletter.

We send the printed foundation magazine "animal flash" by post to donors and everyone who has ordered it. If you no longer wish to receive it, please write to us at info@susyutzinger.ch.

11.Contact via form, email and telephone

Contact us via a form on the website, by email, or by phone. We will process your information to answer your request. Submissions from forms are saved by the website and forwarded to the responsible team via email. We use Microsoft 365 (Microsoft Ireland Operations Limited, Dublin) for email and office applications.

Please note that regular emails are transmitted unencrypted. For confidential information, it is better to call us or send us a letter.

12.Courses, workdays and assignments

Registrations for SUST Academy courses, workdays, and international assignments are handled via the edoobox booking system (edoobox AG, Switzerland). For this, we need your name, contact details, and the booked dates.

Anyone who volunteers with us as an animal welfare helper is listed in our volunteer directory: with contact details, date of birth, emergency contact, qualifications, and assignments. Before each assignment, you will sign a participation and liability waiver, which we keep as proof of your involvement. Your profile will only appear on our website if you consent. We can answer any questions you may have at tierschutz-helfer@susyutzinger.ch.

13.applications

Application documents are only seen by the people who decide on the position. We use them exclusively for the selection process and delete them no later than six months after its completion, unless you agree that we may keep them for a future position.

14.Service providers and other recipients

We only share personal data when it is necessary for the respective purpose. Our service providers process the data on our behalf and are not permitted to use it for their own purposes. Furthermore, we disclose data to authorities when we are legally obligated to do so.

15.announcement abroad

Where possible, we collaborate with providers in Switzerland or the European Economic Area. The Federal Council has determined that these countries, as well as the United Kingdom, provide an adequate level of data protection.

Some providers belong to companies in the USA, namely Google, Meta, LinkedIn, Stripe, and Defiant (Wordfence). Data may be transferred to these companies. For companies certified under the Swiss-US Data Privacy Framework, an adequate level of protection has also applied since September 15, 2024. In all other cases, we rely on the European Commission's Standard Contractual Clauses, which are also recognized in Switzerland.

16.How long we retain data

We retain personal data for as long as we need it for the intended purpose or as required by law. Afterwards, we delete or anonymize it. Anonymization means that figures such as amounts or the number of deployments are retained for our statistics, but can no longer be attributed to any individual.

Deleted data disappears from the backups as soon as they are regularly overwritten.

17.Data security

We protect personal data from loss and unauthorized access using technical and organizational measures: encrypted connections, personal access with secure passwords, access rights only for employees who need the data for their tasks, and regular data backups.

18.Your rights

You can do this anytime, free of charge:

• Request information about what data we process about you (Art. 25 GDPR),
• Have incorrect information corrected,
• request that we delete your data unless we are legally obligated to retain it.
• to object to the processing, such as the sending of mail or e-newsletters,
• revoked consent without rendering previous processing unlawful,
• You will receive the data you have provided to us in a commonly used electronic format (Art. 28 GDPR).

Please write to info@susyutzinger.ch or send a letter to the address in section 1. To ensure your data doesn't fall into the wrong hands, we will verify your identity beforehand, for example, by sending a reply to the address we have on file. You will usually receive a response within 30 days.

19.Amendments

We will update this statement if our processes, the services we use, or the legal situation changes. The version published on this page is the applicable one.

This version has been in effect since October 8, 2026.