EnableMe Insights Privacy Policy
Version 2.0, Valid from: July 29, 2024
Replaces version 1.0 of October 10, 2023
The person responsible for the processing described in this privacy policy is:
EnableMe Foundation (CHE-171.283.378)
Ms. Fabienne Locher
Oberer Graben 3
CH-9000 St. Gallen
Phone: +41 (0)71 911 49 49
Email: dataprotection@enableme.org
Data protection declaration
The EnableMe Foundation (hereinafter "EnableMe Foundation," "we," or "us") is committed to protecting your personal data. We therefore strictly adhere to all applicable data protection regulations, in particular the Swiss Data Protection Act (hereinafter "CH-DSG") and, where legally applicable in the specific case, the EU General Data Protection Regulation (hereinafter "EU GDPR").
We guarantee that all personal data entrusted to us will be treated with confidence and we assure you that we will handle this data with the utmost care and process it appropriately for the purpose and limit it to what is necessary for the purpose of processing.
This statement describes how we treat information provided to us by visitors to this website and others.
Please note that data concerning (i) religious, ideological, political, or trade union views or activities, privacy, or racial or ethnic origin, (ii) data concerning criminal prosecutions or sanctions, and (iii) data concerning social assistance measures are considered particularly sensitive personal data under the Swiss Data Protection Act (DSG) and a special category of personal data under the EU GDPR. Please do not transmit such data to us.
Legal basis and purposes of data processing
EnableMe Foundation processes personal data that you enter on our website, communicate to us or that we collect from you,
-
to fulfill contractual obligations (Art. 6 (1) (b) GDPR); / Art. 31 (2) (a) revDSG,
-
due to legal obligations (Art. 6 para. 1 lit c GDPR / Art. 31 para. 1 revDSG and Art. 9 para. 2 lit b GDPR / Art. 31 para. 2 lit a revDSG),
-
based on your consent (Art. 6 Para. 1 lit a GDPR / Art. 6 Para. 6 revDSG in conjunction with Art. 31 revDSG and Art. 9 Para. 2 lit a GDPR / Art. 6 Para. 7 revDSG) and
-
to protect our legitimate interests (Art. 6 Para. 1 lit f GDPR / Art. 31 Para. 1 revDSG).
Your personal data will be processed for the following purposes:
-
To initiate business regarding our range of services.
-
For the performance of the contract in the sense of providing services and pre-contractual measures.
-
To maintain business relationships and personal contact.
EnableMe Insights is a platform that brings together people with disabilities and chronic conditions and organizations seeking information on accessibility.
Your personal data in connection with EnableMe Insights is processed for the following purposes:
-
To connect people with disabilities and chronic illnesses with organizations seeking information on accessibility. The EnableMe Insights platform collects opinions and experiences from people with disabilities to support research and practice in this field.
-
To select the right people for each study.
-
To ensure the secure and stable operation of our website, we collect technical data, such as your IP address, information about your device's operating system and settings, the region, time, and type of use. We also use cookies and similar technologies.
The EnableMe Insights platform uses the collected data, as needed, to:
-
To communicate suitable studies or research projects through our platform that may be relevant to you and to ensure the general operation of the platform.
-
To provide you with information about services or opportunities that we believe will be relevant to you.
-
For internal documentation so that we can contact you if necessary.
-
To contact you by mail, email, telephone or any other format you prefer, whether for community or employment reasons.
-
To evaluate the platform and improve our programs.
-
to make settlements.
-
To conduct market research, analyze our offers and fulfill statistical and reporting obligations.
What data does EnableMe Insights collect and store?
Each time the website is accessed, technical information transmitted by the user's browser (especially the IP address) is automatically collected and stored in the server logs. This tells the web server where to send the content. Theoretically, it is possible to draw conclusions about the respective user from such a recorded IP address. These IP addresses are only stored to the extent necessary to defend against DOS attacks or to prevent misuse of the website. IP addresses collected in this way are immediately deleted as soon as this is no longer necessary.
The EnableMe Foundation may collaborate with partners who conduct studies/surveys. In such cases, the EnableMe Foundation will select suitable survey participants from our internal database and forward the corresponding survey to them. However, personal data will never be shared with third parties, including partners, without the additional written consent of the data subject.
EnableMe Foundation collects and stores only data necessary for selecting and assigning members to appropriate studies. Mandatory information is marked accordingly.
We may also collect the following information:
-
Name and job title
-
Contact information, including email address and telephone number
-
Demographic information such as date of birth and region
-
Preferences and interests
-
Data on website usage
-
Additional information relevant to customer inquiries.
We may also collect the following log files to provide timely and relevant information to our visitors:
-
Internet Protocol (IP) addresses
-
Browser types
-
Internet Service Provider (ISP)
-
Date and time stamp
-
Referring pages and exit pages
-
Number of clicks.
On the processing and use of data:
-
The user's data necessary for business processing will be stored for this purpose and, if necessary, passed on to affiliated partners as part of the order processing.
-
We use data on the use of individual services on the website (usage data) for the technical processing of these services.
-
In order to improve the website's offerings, EnableMe Foundation reserves the right to evaluate anonymized data sets generated by so-called cookies (see next paragraph).
-
Personal data will not be transferred to third parties unless the transfer is necessary for the implementation and invoicing of studies and research offers on the website, the user has used studies or research offers from a third party via the website, an agent requires the data to process a service on the website, or the EnableMe Foundation is obliged to disclose data due to an order from a government agency.
You can decide whether or not to provide personal information to the EnableMe Foundation. However, please be aware that if personal information is not provided and is required for such opportunities, you may not be able to complete certain studies or access certain offers or opportunities. You can opt in and consent to receive digital or other communications from us. You have the right to request the complete deletion of all data you have provided to us at any time. If you no longer wish to receive these communications, you can update your preferences at any time by using the "unsubscribe" link in emails, contacting us at surveys@enableme.org , or using the information in the "Contact Us" section of this website.
Transfer of your personal data to third parties and to third countries
-
Transmission and use of data within the framework of research projects
We do not share personal information about our members and users with third parties unless we have your express consent or are required to do so by law. If we need to share your personal information for any reason, we will always inform you. We have implemented strong physical and electronic security measures to prevent unauthorized disclosure of or access to your information.
Nevertheless, we cooperate with partners who conduct research projects such as surveys, focus groups, interviews, and product tests. For each of these projects, we provide a detailed overview of the data collected by each partner. Our members always have the choice whether they want to participate in such a research project. Participation may require the provision of demographic or health-related data. This data is collected, evaluated, and stored by our partners. Separate consent from the member is required for each participation in a research project. Our partners adhere to high data protection standards (in accordance with the EU GDPR) to ensure the protection of our participants.
-
Processor
To provide our services, we use the following categories of processors: hosting providers, cloud service providers, survey providers, shipping companies, payment service providers, advertising service providers, tracking technology providers, and social media platforms. These processors are bound by confidentiality clauses and data processing agreements and are prohibited from using your data for their own or any other purposes.
-
Service provider
We work with certain service providers (so-called processors) to enable you to use our websites. With your consent, these service providers may use your personal data to the extent necessary to provide their services. They may use non-personal data for their own purposes.
We use Microsoft Forms for internal data collection. Details on the use of Microsoft Forms and its security and data protection can be found here .
For our contact forms and surveys, we use Typeform from TYPEFORM SLC/ Can Rabia 3-5, 4th floor, 08017 – Barcelona (Spain). Typeform's detailed privacy policy can be viewed here .
Of particular note here is Vanilla and Vanilla Forums, the service provider for our forum. Vanilla is a Canadian software company that hosts the forum for the MyHandicap Foundation and the EnableMe Foundation. Canada is considered by the EU to be a third country with an adequate level of data protection. Our community's data is stored on Vanilla's servers in Canada. We have taken the necessary precautions with Vanilla to ensure adequate data security.
-
Transfer to third countries
Our processors may be located worldwide, including outside of Switzerland or the European Union. EnableMe Foundation ensures that data is only transferred to countries that have a data protection level equivalent to that of Switzerland or the EU, or only to processors that have concluded data transfer agreements with EnableMe Foundation based on the contracts issued and approved by the European Commission, known as standard contractual clauses (Article 46 (2) of the EU GDPR), and thus guarantee a data protection level comparable to that in the EU or Switzerland.
If you have any questions regarding the specific processors we use or would like to receive a copy of the data protection guarantees we use, please direct your request to the contact point mentioned above.
Data security
We implement state-of-the-art technical and organizational security measures to protect the data we manage against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. These security measures are continuously improved in line with technological developments.
Data deletion
If data is no longer required for the purposes described in this declaration, in particular after termination of the user relationship, it will be retained for the legally required period and then deleted.
Data related to the respective study and/or survey that EnableMe Foundation has collected via the EnableMe Insights platform and its associated tools (e.g. TypeForm) will be deleted 3 months after project completion.
Should you request deletion of your data, our process is designed to identify and delete all information we hold. These sources may include password-protected databases, secure cloud storage servers, and secured emails. We will act within 30 days and notify you of complete deletion.
Cookies
The platform uses so-called cookies in several places. Cookies serve to make the website's services more user-friendly, effective, and secure, and to enable analysis of website usage.
Cookies are small text files that are stored on the user's computer and saved by the user's browser. Most of the cookies used by the EnableMe Foundation are so-called "session cookies." They are automatically deleted after your visit. Cookies do not cause any damage to the user's computer and do not contain viruses.
Most browsers are set to automatically accept cookies. However, users can disable cookies or configure their browser to notify them when cookies are sent. The website can be used without cookies, but may be limited.
This Cookie Policy was created and updated by CookieFirst.com . This
Cookie Table was created and updated by the CookieFirst consent management platform .
Privacy policy for the use of social network plugins and service providers
Our site may integrate social network plugins. These include, in particular:
-
Instagram, 1601 Willow Road, Menlo Park, CA, 94025, USA
-
Facebook, 1601 South California Avenue, Palto Alto, CA 94304, USA
-
Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
-
LinkedIn, 2029 Stierlin Court, Mountain View, CA 94043, USA
-
HubSpot, Inc., Two Canal Park, Cambridge, MA 02141 USA
-
TYPEFORM SLC/ Can Rabia 3-5, 4th floor, 08017 – Barcelona (Spain)
Data protection for children
Our EnableMe Insights services are not directed to anyone under the age of 18. We do not knowingly collect personal information from anyone under the age of 18. If we discover that someone under the age of 18 has provided us with personal information, we will immediately delete that information from our records. If you are a parent or guardian and you become aware that your child has provided us with personal information, please contact us so we can take the necessary steps.
We will inform you if we make any changes
EnableMe Foundation reserves the right to change this privacy policy at any time, subject to applicable data protection regulations. You will be notified of such changes.
Your rights
You generally have the right to information, rectification, erasure, restriction, data portability, revocation, and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated in any way, you can lodge a complaint with the supervisory authority.
In Switzerland this is the FDPIC (Federal Data Protection and Information Commissioner), in Germany the data protection supervisory authority of the BfDI (Federal Commissioner for Data Protection and Freedom of Information), in Austria the Data Protection Authority and in Liechtenstein the Data Protection Office of the Principality of Liechtenstein.
Version 2.0, July 29, 2024