Privacy Policy

Last updated: September 2026

1. Who we are

The party responsible for data processing in connection with this website is:

Swiss One Health Foundation

‍Villa Hohenstein
Rigistrasse 55CH-8006
Zurich
Switzerland

Authorized representative: Solange Olszewska

Email: info@swiss-one-health.ch

Phone: +41 43 234 99 99

If you have any questions regarding data protection, you can reach us at any time using the contact details provided above.

2. What this statement is about

Protecting your personal data is important to us. On this page, we explain what data we collect when you visit our website and use our services, what we use it for, and what rights you have.

As a Swiss foundation, the Federal Act on Data Protection (FADP) is primarily authoritative for us. Insofar as we address individuals in the European Economic Area, we also comply with the General Data Protection Regulation (GDPR). Where we refer to the legal bases of the GDPR in this statement, these are, depending on the case, your consent (Art. 6 para. 1 lit. a GDPR), the performance of a contract or pre-contractual measures (lit. b), or our legitimate interest (lit. f).

3. Data disclosure and processing abroad

We only pass on personal data if it is necessary for the operation of our website or our communication with you – for example, to IT service providers, our hosting provider, or our newsletter distribution service. We have contracts in place with these service providers to ensure the protection of your data.

Some of our service providers are based in the USA. We base transfers to the USA on the Swiss–U.S. Data Privacy Framework (DPF), which the Federal Council has recognized as providing an adequate level of protection, as well as – for individuals in the EEA – on the EU–U.S. DPF and, additionally, on standard contractual clauses. We indicate the respective basis for each individual service.

4. Hosting via Webflow

Our website is operated and delivered via Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA.

When you access our pages, Webflow processes connection data for technical reasons, in particular your IP address, the date and time of access, the page accessed, the browser and operating system used, and the previously visited page (referrer). We require this server log data to display the website to you, ensure its stability, and defend against attacks (e.g., DDoS attacks). This is based on our legitimate interest in the secure and reliable operation of the website.

Log data is retained only for as long as necessary for these purposes and is subsequently deleted or anonymized; in the event of security-related incidents, individual data may be retained longer until the incident has been resolved.

Webflow is certified under the Data Privacy Framework. Further information: https://webflow.com/legal/privacy

5. Adobe Fonts

To ensure a consistent display of our fonts, we use Adobe Fonts, a service provided by Adobe Inc., 345 Park Avenue, San Jose, CA 95110, USA (for Europe: Adobe Systems Software Ireland Companies, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland).

When a page loads, your browser connects to Adobe's servers to retrieve the required font files. Your IP address is transmitted to Adobe during this process; without this transmission, the fonts cannot be technically delivered. According to Adobe, no cookies are set as part of the provision of Adobe Fonts.

We use Adobe Fonts based on our legitimate interest in maintaining a consistent and appealing appearance for our website. Adobe is certified under the Data Privacy Framework. Further information: https://www.adobe.com/ch_de/privacy/policies/adobe-fonts.html

6. Cookies and consent management

We use cookies and similar technologies that store or read information on your device. Some of these are technically necessary (e.g., to save your cookie settings), while others are used only with your consent—particularly for statistical and marketing purposes.

When you first visit our website, we use a consent banner to ask which categories of cookies you wish to allow. Your selection is saved so that we do not have to ask you again on every visit and so that we can provide proof of consent. You can adjust or revoke your consent at any time with future effect via the cookie settings on our website or your browser settings.

Unless otherwise stated for a specific cookie, the maximum storage period for permanent cookies is two years. Session cookies are deleted as soon as you close your browser.

7. Web analytics

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA).

Google Analytics helps us understand how our website is used—for example, which pages are visited, how long visitors stay, and how they find us. To do this, pseudonymous identifiers and information about your device, browser, approximate location (based on a truncated IP address), and usage behavior are processed. IP addresses are not stored by Google Analytics 4; they are used only for rough location determination and then discarded.

The legal basis is your consent, which you provide via our cookie banner and can revoke at any time. Data may be transmitted to Google servers in the USA; Google is certified under the Data Privacy Framework, and standard contractual clauses are also in place.

Further information: https://policies.google.com/privacy

8. Contacting us

When you contact us—via contact form, email, phone, or mail—we process the information you provide (e.g., name, contact details, content of your message) to respond to your request and address any follow-up questions.

The legal basis for this is—depending on the nature of your request—the initiation or fulfillment of a contract or our legitimate interest in efficient communication. We retain your inquiries for as long as necessary to process them or as required by legal retention obligations.

9. Newsletter

You can sign up for our newsletter on our website to receive updates about our work, projects, and events. Your email address is all that is required to sign up; you may voluntarily provide your name so that we can address you personally.

Registration: To prevent misuse, we log the registration process (time, IP address, confirmation) so that we can provide proof of consent.

Performance measurement: Our newsletters contain a tracking pixel and measurable links. This allows us to track if and when a newsletter was opened, which links were clicked, and technical information such as your browser, device, and the time of access. We use this data to improve the content and technical aspects of our newsletters and to tailor them to the interests of our recipients. Performance measurement is part of your consent to receive the newsletter. Unfortunately, it is not possible to opt out of measurement separately; in this case, you would need to unsubscribe from the newsletter entirely.

Service provider: We may use a specialized service provider to send our newsletters, who processes data on our behalf based on a data processing agreement.

Unsubscribing: You can unsubscribe from the newsletter at any time using the link at the end of each newsletter or by sending us a message. After you unsubscribe, we will store your email address in a record for up to three years to provide proof of your prior consent; we will delete it sooner upon request, provided you confirm that consent was previously given.

The legal basis for sending and measuring performance is your consent, which you can withdraw at any time with effect for the future.

10. Embedded YouTube videos

On individual pages, we embed videos from YouTube, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When a video is played, a connection to YouTube's servers is established. Your IP address is transmitted; YouTube may also set cookies and – especially if you are logged into your Google account – associate your usage behavior with your account and analyze it for advertising purposes.

We only load YouTube content after you have provided consent via our cookie banner or the video preview. The legal basis is your consent. Data may be transferred to the USA; Google is certified under the Data Privacy Framework.

Further information and opt-out options: https://policies.google.com/privacy and https://myadcenter.google.com

11. Our social media presence

We maintain a presence on Instagram, Facebook, and LinkedIn to provide information about our work and to connect with interested parties. When you visit our profiles or interact with us, the platform operators process your data – often for their own market research and advertising purposes, and sometimes outside of Switzerland and the EEA.

  • Instagram / Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. We share joint responsibility with Meta for the statistics on our Facebook page ("Page Insights"); any further processing is the sole responsibility of Meta. Privacy policy: https://privacycenter.instagram.com/policy/ and https://www.facebook.com/privacy/policy/
  • LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland. We share joint responsibility with LinkedIn for the collection of data for our profile's "Page Insights." Privacy policy: https://www.linkedin.com/legal/privacy-policy

The most effective way to submit requests for access or deletion is to contact the respective platform directly, as only they have full access to the data. We are, of course, happy to assist you if needed. Meta and LinkedIn (Microsoft) are certified under the Data Privacy Framework; in addition, standard contractual clauses are in place.

12. Retention and deletion

We only retain personal data for as long as is necessary for the respective purpose or as required by legal obligations. Thereafter, the data is deleted or anonymized.

Under Swiss law, business records are subject to a ten-year retention obligation, particularly for accounting records and supporting documents (Art. 958f CO). We retain data required for the assertion or defense of legal claims for the duration of the relevant limitation periods (generally ten years, or five years in certain cases, Art. 127 et seq. CO).

13. Your rights

Under the Swiss FADP – and, where applicable, the GDPR – you are entitled to the following rights in particular:

  • Access regarding whether and which data we process about you
  • Correction of incorrect data
  • Deletion or destruction of your data as well as Restriction of processing
  • Provision or transfer of the data you have provided to us, in a common electronic format
  • Objection against data processing, in particular against direct marketing
  • Withdrawal of consent granted, at any time and with effect for the future

To exercise your rights, simply send a message to info@swiss-one-health.ch. You also have the right to lodge a complaint with a supervisory authority—in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), or in the EEA with the data protection authority responsible for you.

14. Security

We protect your data using appropriate technical and organizational measures, which we continuously adapt to the state of the art. Data transmission between your browser and our website is encrypted via TLS/SSL (recognizable by the "https" in the address bar).

15. Changes to this policy

We update this privacy policy whenever our data processing practices or legal requirements change. The version currently published on this page applies. If a change requires your cooperation (e.g., new consent), we will notify you separately.

‍