Use of language

Please view our Masthead for more information on our use of language at this website.

Privacy policy

Person responsible: Christof Baer, CEO
Information: datenschutz@plusport.ch

Version as of 01.09.2023
This translation was created automatically. In case of doubt, the german version applies.

Introduction

Based on Article 13 of the Swiss Federal Constitution and the data protection regulations of the Swiss Confederation (Data Protection Act, DSG), every person has the right to protection of their privacy as well as protection against misuse of their personal data. PluSport

 Behindertensport Schweiz - hereinafter referred to as "PluSport" - takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. We explain below how we collect and process personal data in principle. Further documents such as conditions of participation, declarations of consent etc. regulate specific matters.

The group of persons addressed by PluSport is generally domiciled in Switzerland. This also applies to the provision of services by PluSport. We process the data of our members, customers, sponsors, interested parties or other persons in accordance with the data protection provisions of the Swiss Data Protection Act (DSG) and, where applicable, the EU Data Protection Regulation in accordance with Art. 6 Para. 1 lit. b, insofar as we offer them contractual services or are active within the framework of existing business relationships, e.g. with members, or are ourselves recipients of benefits and services. In all other respects, we process the data of the persons concerned, where given, in accordance with Art. 6 para. 1 lit. f. DSGVO on the basis of our legitimate interests, e.g. when administrative tasks or public relations work are involved. The data processed in this context, the type, scope and purpose as well as the necessity of their processing result from the underlying contractual relationship.In principle, this includes inventory and master data of persons (e.g. name, address, etc.) as well as contact data (e.g. e-mail address, telephone, etc.), contract data (e.g. services used and personal details that are indispensable for the provision of the same, contents and information provided, names of contact persons) as well as payment data (e.g. bank details, dunning procedures, etc.).

The CEO of PluSport is responsible for the data processing described here, unless otherwise stated in individual cases. For data protection concerns, you can contact the data protection project management as indicated above.

Principles of personal data collection and processing 

Personal data is any information relating to an identified or identifiable individual. This includes, for example, name, address, date of birth, email address, telephone number, online identifiers, sound and image recordings, financial data where given. Data about personal preferences such as leisure activities or memberships and reference persons also count as personal data. Likewise, depending on necessity, personal data requiring special protection is collected, namely health data, which is essential for the safe conduct of our sporting activities.

A data subject is a person from whom personal data is collected and processed.

Processing includes any handling of personal data, regardless of the means and procedures used, in particular the collection, use, storage, disclosure, retention, modification, deletion and destruction of personal data. In most cases, the personal information comes from the data subjects themselves.Where permitted, we also take certain data from publicly accessible sources (e.g. public registers, land registers, commercial registers, press, internet) or receive such data from authorities and other third parties (such as address dealers). We also collect data in connection with the use of our digital media.

Wir bearbeiten personenbezogene Daten nach Treu und Glauben und nach den in dieser Datenschutzerklärung festgelegten Zwecken in Übereinstimmung mit dem Schweizer Datenschutzgesetz. Sofern und soweit die EU-DSGVO anwendbar ist, bearbeiten wir personenbezogene Daten darüber hinaus auf den Rechtsgrundlagen in Verbindung mit Art. 6 Abs. 1 GDPR. lit. a-f.

Purposes of the processing of personal data

PluSport collects the necessary personal data for the provision of the agreed services, for contact maintenance and communication, marketing and direct marketing, organisation and administration, administration and answering enquiries, running competitions or prize draws, measuring reach, providing the online service, improving the user-friendliness of the digital media, feedback, community building, information technology infrastructure and security measures.

The Federal Social Insurance Office FSIO maintains a performance contract with PluSport. For our part, we maintain partial subcontracts with our member clubs. The personal data of the members of our member clubs are processed centrally by them and by us in the PluSport database. Parts of this data are used for the required reporting to the BSV. To date, personal data details have not been passed on to the BSV.

Photo and video recordings at events

Photos and videos may be taken at all PluSport events and published on the website, on social media, in newsletters, printed matter and other publications. This processing serves to protect our legitimate interest in public relations and documentation within the meaning of the DSG and the DSGVO. The participants of these events or their legal guardians acknowledge that participating persons may be depicted and recognisable in these images. The rights of the person concerned apply. If a person does not agree to the possible publication of his or her pictures, PluSport advises against participation in events.

Protection of personal data - Data security

We have technical and organisational security measures in place to safeguard the security of your personal data and to protect it against unauthorised or unlawful processing and/or accidental loss, alteration, disclosure or access. Data subjects are hereby advised that the transmission of information, whether physically by post or courier or via the Internet and other electronic means, involves certain security risks and that we cannot guarantee the security of any information transmission.

PluSport's electronic data is professionally managed and secured by an external service provider. The management of our server structure includes:

• Guaranteed data storage in Switzerland
• Secured, air-conditioned data centre
• Procurement, installation and commissioning of the servers
• Sustainable software and hardware maintenance
• Security, update and patching services
• 7x24h monitoring and alerting of the server infrastructure
• Multilayer spam and virus protection
• Network security (LAN, WAN, WLAN, DMZ)
• Firewall & Backup Services
• etc.

Employees and persons with access to personal data held by us are subject to confidentiality obligations, access restrictions, directives and regulations as well as commissioned data processing agreements.

Duration of processing and storage of personal data

We process and retain personal data for the period necessary for the relevant purpose(s) and we are required to retain it by law.In doing so, personal data may be retained for the period during which claims may be brought against our organisation and where we are otherwise required to do so by law or where legitimate business interests so require (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymised as a matter of principle and as far as possible.

Collection, use and disclosure to third parties of personal data

Categories of persons

The following is a list of the categories of people from whom we collect and process data in varying degrees of detail.In the case of people with impairments from whom we receive data for the provision of services or for cooperation, medical and health data are also present in most cases (hereinafter referred to as "health data"), as these serve primarily to ensure the safety and integrity as well as the needs of the person concerned in the fulfilment of the purpose. Without the necessary data, we are generally unable to provide our services or conclude contracts with persons concerned. If you provide us with personal data of other persons (e.g. as a guardian, for family members, contact persons, etc.), please make sure that these persons are aware of this privacy policy to the best of their ability and only share their personal data with us if you are allowed to do so and if this data is correct.
 

We collect personal data from the following categories of people (the collection of health data is not specifically mentioned here as it can apply to any category):

Participants in sports camps and sports courses (e.g. remedial training).
The survey includes all personal information necessary for participation in our sports camps and sports courses.

Leaders of sports camps and sports courses (e.g. support trainings), incl. helpers & volunteers
The survey contains all personal information necessary for the management team of the sports camps or courses and for the possible processing of the fee payment.

Participants in other sports activities
The survey contains all personal information necessary for the participation in the respective offer.

Leaders of other sporting activities, incl. helpers & volunteers
The survey contains all personal information necessary for the management of the offer and, if applicable, for the processing of fee payments.

Top-level sports athletes
The data collection includes all personal information required for participation in training and competitions.

Coaches, top-level sports staff
The survey includes all personal information required for the management and implementation of training sessions, for competition entries and for the processing of fee payments.

Course participants of training and further education courses of PluSport and joint course providers.
The survey contains all personal information required for participation in the corresponding course.

Leaders of education and training courses
The survey contains all personal information necessary for the management of courses and for the processing of fee payments.

Parents and guardians
The survey includes all personal information necessary for contact.

Guests, representatives, speakers, ambassadors Media representatives at events
The data collection includes all personal information necessary for the organisation and implementation of the event and for further contact.

Donors, patrons, sponsors
The data collection includes all personal information necessary for the processing of the income and the maintenance of contacts.

Board Members, Commission Members, Honorary Presidents, Honorary Members
The survey contains all personal information necessary for the installation in office and the duration of the office as well as for the further maintenance of contacts.

Office staff
The survey contains all personal information necessary for the employment relationship.

External staff
The survey includes all personal information required for employment or mandate.

Employees of partner and competition organisations, suppliers and business partners.
The survey includes all personal information necessary for the cooperation and may also include further information for contact maintenance.

Participants in competitions, studies, surveys, newsletter recipients, followers and subscribers to social media.
The survey includes all personal information necessary for maintaining contact.

Our member clubs, including cantonal associations, sports associations and collective members (hereinafter "sports clubs") collect personal data from the following groups of people, which are processed in the PluSport database:

Sportsmen and sportswomen of sports clubs.
The collection includes all personal information necessary for participation in club offers.

Board members, officials, sports directors of sports clubs
The survey includes all personal information necessary for their function.

Persons can be represented in several categories. Personal data can thus also contain cross-reference information as well as other informative details about the person such as birthday, anniversaries, preferences regarding food, etc. The primary collection and processing purposes are stated for the categories of persons. For all categories, further purposes of the processing activities apply, such as general administration, information provision, etc. The detailed processing activities are recorded in internal directories for each category of persons.

Privacy by Design and Privacy by Default

The systems used to collect and process data at PluSport are designed to prevent unauthorised access to data and to ensure that data is protected. In order to comply with the Privacy by Default, employees and external persons (sports club officials) who process data are assigned individual authorisations according to roles so that only required data can be viewed and processed.

Disclosure of data to third parties

Only necessary data will be shared with third parties where requested such as management teams, accommodation, sports facilities, event partners, transport providers etc.

Personal data may also be disclosed to third parties in the course of our business activities, e.g. to order processors (e.g. for the delivery of electronic or printed information), banks, insurance companies, IT providers and partners, authorities, official agencies or courts, other parties in potential or actual legal proceedings as well as auditing companies, business partners, the media, the public, including visitors to our digital media, competitors, industry organisations, associations, organisations and other bodies, or all joint recipients. These recipients - especially their electronic infrastructure - may be in the home country, but also anywhere in the world.

The collection of personal data via electronic channels such as website, social media, newsletter, etc. is described separately under the item "Digital media".

Transfer of data abroad

Our courses are generally held in Switzerland. If an offer takes place abroad, the participants know this in advance and agree to any necessary transfer of parts of their data abroad with their registration. In the case of sports camps or training courses, this may involve the transfer of necessary personal data to hotels, transport organisations, sports facilities and the like.

Top athletes and their staff also take part in training sessions and competitions abroad. Personal data is therefore also transferred to third countries. Third countries are countries that do not have a data protection system accepted by Switzerland or the EU. These include the USA, China, Russia, etc. If PluSport has to pass on data from athletes and staff to foreign organisers, the association acts as a processor and is authorised to do so by the athletes and staff. PluSport has no influence on the further processing of the data in third countries.

Rights of the data subject

Within the scope of the data protection law applicable to you, you have the right to information, correction, deletion, the right to restrict data processing and otherwise to object to our data processing. Please note, however, that we reserve the right to enforce the restrictions provided for by law, for example if we are obliged to retain or process certain data, have an overriding interest in doing so (insofar as we are entitled to rely on this) or require it for the assertion of claims. If you incur any costs, we will inform you in advance.

Please note that the exercise of these rights may conflict with contractual agreements and may have consequences such as the premature termination of the contract or costs. We will inform you in advance if this is not already contractually agreed.

The exercise of such rights generally requires that you clearly prove your identity (e.g. by means of a copy of your identity card). To assert your rights, you can contact the data protection project management. Your request will be answered as soon as possible. Should the answer take longer, we will inform you of the approximate duration.

Every data subject also has the right to enforce his or her claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner.

Right to confirmation

Every data subject has the right to request confirmation as to whether personal data concerning him or her are being processed.

Right of access

Every person affected by the processing of personal data has the right to obtain information about the data stored about him or her at any time and to a reasonable extent. In addition, information may be provided about the following, if applicable: The purposes of the processing, categories of personal data processed, recipients to whom the personal data have been or will be disclosed, if possible, the planned duration of the storage of the personal data or, if this is not possible, the criteria for determining this duration.

Right of rectification

Any person concerned by the processing of personal data has the right to obtain the rectification without delay of personal data relating to him or her which are inaccurate. In addition, the data subject has the right to request that incomplete personal data be completed, including by means of a supplementary declaration, taking into account the purposes of the processing.

Right to erasure (right to be forgotten)

Any person affected by the processing of personal data has the right to request that the person responsible for the processing erases the personal data concerning him or her without delay, provided that one of the following reasons applies and the processing is no longer necessary or the erasure is legally permissible:

• The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
• The data subject withdraws the consent on which the processing was based and there is no other legal basis for the processing.
• The data subject objects to the processing on grounds relating to his or her particular situation and there are no overriding legitimate grounds for the processing
• The personal data have been processed unlawfully
• Right to restriction of processing

Any person affected by the processing of personal data has the right to request the controller to restrict the processing if one of the following conditions is met and the legal basis is given:

• The accuracy of the personal data is contested by the data subject for a period of time sufficient to enable the controller to verify the accuracy of the personal data
• The processing is unlawful, the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data
• The person responsible for the processing no longer needs the personal data for the purposes of the processing, but the data subject needs it for the assertion, exercise or defence of legal claims
• The data subject has objected to the processing on grounds relating to his or her particular situation and it is not yet clear whether the legitimate interests of the controller override those of the data subject

Right to data portability

Any person concerned by the processing of personal data has the right to obtain the personal data relating to him or her in a structured, commonly used and machine-readable format. In addition, the data subject has the right to obtain that the personal data be transferred directly from one data controller to another data controller, provided that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

Right of objection

Every person affected by the processing of personal data has the right to object to the processing of personal data concerning him or her at any time on grounds relating to his or her particular situation. The data controllers will no longer process the personal data in the event of the objection, unless they can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

Right to withdraw consent under data protection law

Every person affected by the processing of personal data has the right to revoke a given consent to the processing of personal data at any time.

Collaboration with third parties, use of electronic tools and services.

PluSport, like any other professional organisation, uses services and applications from third parties. In the following chapters, the most common tools and services are mentioned, but the naming is not necessarily exhaustive. In this data protection declaration, we do not link to web pages on the data protection of the tools used, as these pages could be moved at any time and therefore cannot be found directly. However, PluSport's data protection project management will be happy to help you find the relevant websites.

Audio and video conferencing

We use third party services to communicate with our contacts. In particular, they allow us to conduct audio and video conferences, virtual meetings and training sessions.

Zoom and Teams, for example, are services we use. They are subject to US law. The services also grant users in Switzerland the rights under the European General Data Protection Regulation (GDPR), but as companies they are obliged to hand over data to the state upon justified request.

Furthermore, we work with companies specialising in video conferencing. In these cases, we assure ourselves of their compliance with the Data Protection Act.

Use of software and electronic services

We also use foreign software for text, number and data processing, cloud-based platforms for project management, data storage and transfer, server and cloud-based systems for the transmission of information such as emails, newsletters, web forms, apps etc. for our business activities.

We aim to use services whose services and servers are operated in Switzerland, Europe or other secure countries.

E-Mails, Newsletter   
PluSport versendet Informations-E-Mails an Personen und Organisationen, die in geschäftlicher, partnerschaftlicher oder freundschaftlicher Verbindung mit PluSport und/oder seinen Partnern stehen. Den Empfängern steht es frei, ihre Adresse jederzeit aus Mailinglisten von PluSport löschen zu lassen. Es ist zu beachten, dass E-Mails von und an PluSport z.B. aufgrund von Anfragen allenfalls persönliche Angaben enthalten können. PluSport geht davon aus, dass die Risiken von E-Mails bekannt sind und diese in Kauf genommen werden (insbesondere fehlende Vertraulichkeit, Manipulation oder Missbrauch durch Dritte, Fehlleitung, verzögerte Übermittlung oder Bearbeitung, Viren, etc.). Sollte jemand eine E-Mail irrtümlicherweise erhalten haben, bitten wir darum, die E-Mail an PluSport zurückzusenden und die E-Mail anschliessend mitsamt allen Anhängen vom System zu löschen. Der Gebrauch der in der betreffenden E-Mail enthaltenen Information ist verboten.

Data transfer to the USA and/or other third countries
We use, among others, tools from companies with headquarters in the USA, e.g. Microsoft Office. With these tools, your personal data could be transferred to the servers of the respective companies, e.g. when transmitting by e-mail. We would like to point out that the USA is not a secure third country in the sense of data protection law. US companies assure their customers of secure storage or transmission of data; however, they are obliged to hand over personal data to their security authorities upon request, without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on or transmitted to US servers for monitoring purposes. We have no influence on these processing procedures. This applies analogously to any future use of software from other third countries.

Digital media

Validity

By accessing the website and all other digital media of PluSport (hereinafter "Digital Media"), users declare that they have understood the following general legal conditions (hereinafter the "Conditions"). Those who do not agree with the following conditions will refrain from accessing PluSport's Digital Media or, if possible, stop using them accordingly.

These terms and conditions apply to access and use of the website, e-shop, newsletters, social media, apps and all other Digital Media offered by PluSport now and in the future.

Copyright - Intellectual Property Rights  

The content of the Digital Media is protected by copyright. Reproduction, or copying of parts thereof, is prohibited without the prior written consent of PluSport. If information such as PDF, Word etc. is downloaded and/or processed in any other way, all property rights remain with PluSport. The use of the Digital Media in no way grants a licence or right to use any image, logo, text or other content.

Downloading and/or copying the Digital Media or any part thereof does not transfer any rights to the User with respect to any elements. PluSport reserves all rights (including but not limited to copyright, trademark and intellectual property rights) in respect of all elements on the Digital Media.

Linking to PluSport's Digital Media is permitted if there is a business, partnership or friendly relationship with PluSport. The use of the PluSport logo is possible for such purposes after consultation.

Completeness and accuracy of the content    

Although PluSport takes every care to check the information on the Digital Media thoroughly at the time of publication, neither PluSport nor any of its contractual partners can give any assurance or guarantee that the information, documents or applications conveyed or made available are up-to-date, complete, correct or free of errors.

Exclusion of liability

PluSport is in no way liable for any direct or indirect damage and/or consequential damage resulting from the use of the digital media or from access via links to digital media of third parties. PluSport does not guarantee that content accessible via the Digital Media is free of viruses and/or other harmful components.       
Any liability of PluSport (including negligence) for damage and/or consequential damage resulting from access to the elements of the Digital Media and/or their use (or from the impossibility of access and/or use) is excluded.
PluSport does not check the Digital Media of third parties and is not responsible for their content. Connecting to these is at the user's own risk.

Third-party services       

The PluSport website may use Google Maps to embed maps or query postcodes, Google Invisible reCAPTCHA to protect against bots and spam, Google Fonts and YouTube to embed videos. These services of the American Google LLC use, among other things, cookies, whereby data is transferred to Google in the USA, whereby we assume that no personal tracking takes place in this context solely through the use of our website.         
Google has undertaken to ensure adequate data protection in accordance with the US-European and the US-Swiss Privacy Shield.
For more information, please see Google's privacy policy.

We also use links or plug-ins from social networks such as Facebook, Instagram, YouTube, LinkedIn etc. on our digital media. This is visible to you, typically via corresponding symbols or labelled links. Clicking on them will take you to our corresponding accounts. The processing of your personal data on these platforms is then the responsibility of the respective operator in accordance with their data protection regulations.

Analysis and use of cookies

Data collection
By using our digital media, users consent to the processing of their user data within PluSport as well as by third parties such as, in particular, analysis tools from Google for the website. PluSport uses the collected data only for the evaluation of overall used browsers, operating systems, visited pages, times of accesses, search words etc. for coverage measurement and for content improvement. The temporary storage of log files is absolutely necessary for the operation of the website in order to guarantee its functionality and to ensure the security of our systems. The data is deleted after the end of each session. Further analysis tools are those of Facebook, Instagram, Youtube, LinkedIn and possibly other social media in the future, of which PluSport only evaluates data summarily in the same way. Applications for the app such as Google Play Store, Apple App Store and EchoSOS are not evaluated by PluSport, but by the providers themselves.

Rejecting the use of website cookies       
It is possible to set your own computer or device to accept all cookies or to reject some cookies. In addition, you can manually delete cookies in the browser settings at any time. If cookies are rejected, it may not be possible to make full use of all the functions offered.

Profiling and tracking           
Profiling and tracking are used in particular to inform and advise users about products in a targeted manner. PluSport does not process your personal data automatically with the aim of evaluating certain personal aspects or transmitting personalised content. PluSport does not use any instruments for automated decision-making.

SSL/TLS encryption

The PluSport website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, e.g. which pages you call up. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://..." to "https://..." and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties. This does not apply to the sending of web forms, which is handled via the mail service.

Despite extensive technical and organisational security precautions, it is possible that data may be lost or intercepted and/or manipulated by unauthorised persons. As far as possible, we take appropriate technical and organisational security measures to prevent this from happening within our system. However, your computer is outside the security perimeter that we control. It is your responsibility as a user:in to inform yourself about the necessary security precautions and to take appropriate measures. As the operator of the website, we are in no way liable for any damage that you may suffer as a result of data loss or manipulation.

Sending web forms

The voluntary disclosure of personal information via the Internet is at your own risk. Personal data may be lost and/or fall into the hands of unauthorised persons, especially when sending web forms.

Changes to the data protection declaration

We may change this privacy policy at any time without prior notice. The current version published on our website applies.