Who Are We?
The Lotti Latrous Foundation (Rämistrasse 5, 8001 Zurich) operates the website www.lottilatrous.ch (referred to hereafter as "we" or "us"). On this website, you can learn about our organization and contact us.
The protection of your personal data is of utmost importance to us. In this privacy policy, we aim to inform you transparently and clearly about the data we collect on our website and how we handle it. This policy is designed to provide a quick overview of how we process your data.
What Information Do We Provide?
- Who is responsible for data processing;
- What data is collected;
- The purpose of collecting this data;
- To whom we disclose the data;
- How you can object to data processing;
- Your rights and how to exercise them.
Definitions
What Are Personal Data?
Personal data (or "personal information") are any details that relate to an identified or identifiable natural person, such as name, address, birthdate, email address, or phone number, as well as IP addresses. Information on personal preferences, such as hobbies or memberships, also constitutes personal data.
What Are Special Categories of Personal Data?
Special categories of personal data (or "sensitive data") include:
- Data concerning religious, ideological, political, or trade union beliefs or activities;
- Data regarding health, private life, racial or ethnic origin, as well as data about sexual life or orientation;
- Data related to administrative or criminal proceedings and sanctions, as well as data on social assistance measures;
- Genetic and biometric data that uniquely identify an individual.
If necessary and if you voluntarily provide such data, we may process data that falls within a special category of personal data. Processing of these data is subject to stricter confidentiality.
What Is Processing of Personal Data?
Processing (also referred to as "handling") is any operation with personal data, regardless of the means and methods used, such as collecting, storing, retaining, using, modifying, disclosing, archiving, deleting, or destroying personal data.
What Is Disclosure of Personal Data?
Disclosure is the transfer or making available of personal data, such as publication or revealing to a third party.
Contact
For any questions or concerns about our data protection practices, please contact our data protection officer:
Lotti Latrous Foundation
Email:
Phone: +41 76 547 30 37
Data Security
We securely store your data and take all reasonable measures to protect it from loss, unauthorized access, misuse, or alteration. Our employees and contractual partners who have access to your data are required to comply with data protection laws. In some cases, as part of order processing, we may need to share your requests with affiliated companies. In these cases, your data will also be handled confidentially.
Within our website, we use SSL (Secure Socket Layer) technology with the highest level of encryption supported by your browser.
Your Rights
Right to Access
You can request information on the data we store about you at any time. Please send your request with valid proof of identity to
The information will be provided in writing or another form, potentially electronically. Upon your request and with appropriate identity verification, we can also deliver this information orally. The information is generally free of charge. However, a reasonable fee may be charged for additional copies. If a request is manifestly unfounded or excessive, we reserve the right to refuse or charge a reasonable fee.
Processing of your request is subject to a statutory period of 30 days, which may be extended by two additional months due to complexity or high volume of requests. You will be informed within one month if an extension is required.
Deletion and Correction
You have the right to request the deletion, correction, or completion of your data at any time, provided no statutory retention obligations or legal grounds prevent it. Note that exercising your rights may conflict with contractual agreements and could impact the performance of contracts (e.g., early termination or associated costs).
Restriction of Processing
You also have the right to restrict processing if you contest the accuracy of data, if processing is unlawful, if data are no longer needed, or if you have objected to processing.
When processing is restricted, data can only be stored. Further processing may only occur with your consent, to establish, exercise, or defend legal claims, to protect another person's rights, or for reasons of substantial public interest. You will be informed if a restriction is lifted.
Right to Data Portability
You have the right to receive your data in a common file format or to have it transferred to a third party, provided it is technically feasible if we process your data automatically and if:
- You consented to the processing; or
- The data was disclosed for contract formation or fulfillment.
Right to Object
You have the right, based on your unique situation, to object to processing (including profiling) based on our legitimate interests. This right also applies to data processing for direct marketing.
Legal Recourse
If you are affected by the processing of personal data, you may enforce your rights in court or lodge a complaint with the relevant supervisory authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner.
General Data Processing
What Data Do We Process, and Where Do We Get This Data?
We primarily process personal data provided by you or collected during the operation of our website. In some cases, we receive personal data about you from third parties.
These data categories may include:
- Personal identifiers (name, address, date of birth, etc.);
- Contact data (mobile number, email address, etc.);
- Financial data (e.g., bank information);
- Online identifiers (e.g., cookie ID, IP addresses).
These data can come from:
- Publicly accessible sources (e.g., media, internet);
- Public registries (e.g., commercial register);
- Data related to official or court proceedings;
- Information about your professional activities (e.g., professional networks);
- Information from correspondence with third parties.
Conditions for Processing Your Data
We process your data in good faith and according to the purposes set forth in this privacy policy. If these principles cannot be followed in exceptional cases, the processing may still be lawful due to a justification, such as:
- Your consent;
- Contractual fulfillment or pre-contractual measures;
- Compliance with legal requirements;
- Legitimate interests, provided they do not override your interests.
Under certain circumstances, you may be required to provide us with certain personal data to initiate a business relationship with us. Without such data, we are typically unable to process a contract. Furthermore, the website may not function properly if certain information, such as your IP address, necessary for secure data transfer, is not disclosed.
How can you revoke your consent?
If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent, provided that no other legal basis or justification applies. You may withdraw your consent at any time with future effect by emailing the address listed in the website’s legal notice. Data processing that has already occurred remains unaffected by the revocation and retains its validity.
In which cases do we disclose your data to third parties?
a. General Principles
In some cases, we rely on services from third parties or affiliated companies and assign them to process your data (so-called processors). Categories of recipients include:
- Accounting, fiduciary, and auditing firms
- Consulting companies (e.g., legal, tax)
- IT service providers (e.g., web hosting, support, cloud services, web design)
- Payment service providers (only with your prior consent)
- Providers of tracking, conversion, and advertising services
We ensure that any transfer of data only occurs with your explicit consent, unless it involves contract data processing. We also ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially. Under certain circumstances, we may also be required to disclose your personal data to authorities.
b. Transfer to Partners and Cooperative Companies
We work with various companies and partners who offer their services on our website. These are marked as third-party offers ("advertising").
If you utilize such an offer, we transfer your personal data (e.g., name, role, communication) to the respective partner or cooperative company whose offer you wish to use, provided you have explicitly consented to this beforehand. These partners and cooperative companies are independently responsible for the personal data they receive. After the data transfer, the data protection policies of the respective partner apply.
c. Transfer Abroad
In some cases, processing your personal data may involve transfers to companies abroad. These companies are obligated to maintain the same level of data protection as we do. Transfers can occur worldwide.
If the level of data protection does not match that in Switzerland, we conduct a preliminary risk assessment and contractually ensure the same level of protection (e.g., using the new standard contractual clauses of the EU Commission or other legally mandated measures). Should our risk assessment indicate otherwise, we implement additional technical measures to protect your data. You can access the EU Commission's standard contractual clauses via the following link.
How long do we retain your data?
We store personal data only as long as necessary to fulfill the specific purposes for which it was collected.
We retain contract data longer due to legal requirements, particularly for business communications, closed contracts, and booking records, which we are required to keep for up to 10 years. When we no longer need such data to provide our services, we restrict further processing to purposes of accounting and tax compliance.
Detailed Data Processing
Provision of the Website and Creation of Log Files
When you visit www.lottilatrous.ch without registering or providing other information, we collect only the data that your browser automatically transmits to our server. This data is technically necessary for operating the website.
What data do we process?
The following data is processed to provide the website and create log files:
- Name of your Internet service provider
- IP address
- Technical information, such as browser, operating system, or screen resolution
- Date and time of access
- Referrer URL
This data cannot be attributed to a specific person, and it is not combined with other data sources.
For what purpose do we process this data?
Log files are processed to ensure website functionality and to safeguard our IT systems’ security.
How can you prevent data processing?
Data is stored only as long as necessary to fulfill the purpose for which it was collected. Accordingly, the data is deleted at the end of each session. The storage of log files is essential for the website's operation, so you cannot object to it unless you refrain from visiting our website.
Cookies
Our website uses cookies, which are text files placed on your device’s operating system through your browser when you access our website. Cookies do not damage your computer and contain no viruses. Some cookies are technically necessary for the website to function. Most cookies we use are "session cookies," which are automatically deleted after your visit. Other cookies remain stored on your device until you delete them or their expiration date lapses.
For what purpose do we process the data?
We use cookies to make our website more user-friendly, effective, and secure. Cookies are particularly used to save your preferences (e.g., language and location settings), quickly provide website content (e.g., fonts and content delivery networks), and analyze website usage for statistical evaluations and continuous improvements (usually via third-party cookies). Specific purposes for non-essential cookies are detailed in the subsequent sections of this privacy policy.
How can you prevent data processing?
Cookies are stored on your computer. You can delete them entirely or restrict their transfer by changing your browser settings. If cookies for our website are disabled, some website functions may not be fully available.
Guides for popular browsers can be found here:
- For Google Chrome
- For Apple Safari
- For Microsoft Edge
- For Mozilla Firefox
For cookies used for performance tracking or advertising, many services offer a general opt-out option via the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance), or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).
Tracking Pixels
We may use tracking pixels on our website or in our emails. Tracking pixels, also called web beacons, are small, usually invisible images automatically retrieved when visiting our website or opening our emails.
What data do we process?
Tracking pixels can capture the same data as log files and track the entire session's movement profile. Notably, tracking pixels from third parties whose services we use are applied. Details about these third-party services are provided later in this privacy policy.
For what purpose do we process the data?
Tracking pixels are used by various tracking services to analyze the use of this website, for statistical evaluations, and for continuous improvements. Tracking pixels can also be used for email tracking.
How can you prevent data processing?
To prevent data processing via tracking pixels, you can install appropriate browser extensions like uBlock Origin and block external images in your email program.
Google Web Fonts
How does Google Web Fonts work?
Our website uses Google Web Fonts for uniform font presentation. When you visit our pages, your browser loads the required web fonts into your browser cache to display text and fonts correctly.
What information do you share with us, and how is it used?
Your browser connects to Google servers, enabling Google to know that our website was accessed via your IP address. If your browser does not support web fonts, a default font is used by your computer.
Why are we permitted to use Google Web Fonts?
We use Google Web Fonts to present our online offerings in a consistent and appealing manner. For more information on Google Web Fonts, see Google’s FAQ: https://developers.google.com/fonts/faq.
Cloudflare
Cloudflare is a content delivery network (CDN) and web security platform used to accelerate website loading, improve website performance, and protect against various attacks. Cloudflare provides several features and tools for privacy protection and website performance optimization.
The main purposes of using Cloudflare on our website include:
- Improved Website Performance: Content delivery across servers in various locations enables faster loading times for users worldwide, reducing page load time and enhancing website performance.
- Protection Against DDoS Attacks: Cloudflare employs security measures like IP whitelisting and traffic distribution across multiple servers to protect websites from distributed denial-of-service (DDoS) attacks.