Privacy policy

This translation is provided for information only. The German version is authoritative.

1. Data controller

Rettungsdienste Nordwestschweiz AG
Feuerwehr- und Rettungsdienststützpunkt Reinach
Pfeffingerstrasse 1, CH-4153 Reinach
Phone +41 61 713 70 66 · info@rdnws.ch

Please send data protection enquiries in writing or by email with the subject ‘Data protection’ to this address. Person responsible for data protection: Sandro Strub, CIO Knecht Gruppe, info@rdnws.ch.

2. Scope

This policy applies to the website rdnws.ch, to contacting us and to job applications. Section 4 applies to patient data.

3. What data we process

3.1 Visiting the website

When you access the website, the server automatically stores technical data transmitted by your browser: IP address, date and time, page accessed, previously visited page, browser type and operating system. We use this data to provide the website, ensure its security and rectify faults. The log data is deleted after [30] days unless it is needed to investigate a security incident.

3.2 Contacting us

If you contact us via the contact form, by email or by phone, we process your details (e.g. name, email address, phone number, content of the message) in order to respond to your enquiry. Please do not send us any health data via the contact form or by email: unencrypted emails can be viewed by third parties.

3.3 Job applications

We process application documents only for the application procedure. After a rejection, we delete them no later than [6] months after the procedure has ended, unless you have agreed to longer retention. If you are hired, the documents become part of the personnel file.

4. Patient data

In an emergency, you can reach us only via the emergency number 144. Data that we collect during an ambulance call-out, in particular health data, is sensitive personal data. It is not processed via this website and is subject to professional secrecy and cantonal health law. How we process this data is described in our patient information [Link oder Bezugsquelle].

5. Cookies and consent

The website does not use analytics or visitor tracking. We do not set any cookies ourselves when you access the website. Optional functions remain switched off until you allow them in the ‘Cookies and external content’ notice:

• External content: Google Maps in the contact area (section 6).
• Marketing: If you reach the website via an online advert, we store the identifier of the advertising network (Google, Microsoft or Meta) in a cookie for 30 days and send it to us with the contact form. This lets us see which advert led to an enquiry.

If your browser sends the Global Privacy Control signal, we do not show the notice and leave optional functions switched off until you allow them yourself.

We store your selection for six months, only in your browser. It is not transmitted to us or to third parties. You can change or withdraw it at any time under Cookie settings; the link is also in the footer.

6. Google Maps

In the contact area, we embed maps from Google Maps (Google Ireland Limited, Ireland, and Google LLC, USA). The map is only loaded after you have given your consent. Your browser then transmits your IP address, among other data, to Google. Further information: policies.google.com/privacy.

7. Contact form, job portal, typeface and error monitoring

We transmit messages from the contact form via the Formspark service of Trampoline Software SRL, Belgium. Your entries go directly from your browser to Formspark. To protect against spam, we use Cloudflare Turnstile in the form (Cloudflare, Inc., USA). When you access the contact page, your browser transmits your IP address, among other data, to Cloudflare.

We embed our open positions via the job portal of Dualoo AG, Goldach, Switzerland. When you access the Jobs page, your browser transmits your IP address, among other data, to Dualoo. Applications that you submit via the portal go directly into this system.

These services load only on the relevant pages and without any selection in the notice, because the form and job portal would otherwise not work.

We load this website’s typeface on every page from Adobe Fonts, a service of Adobe (Adobe Systems Software Ireland Limited, Ireland, and Adobe Inc., USA). Your browser transmits your IP address, among other data, to Adobe. According to Adobe, the service does not set cookies for this purpose and does not store the IP address. It records information such as the font delivered and the name of the website, for billing, operation and troubleshooting. This service loads without any selection in the notice because the typeface is part of how the site is displayed.

We record technical errors on the website and violations of our security policy (Content Security Policy) using the Sentry service of Functional Software, Inc., USA, with data stored in Germany. Server error reports contain the address requested without its parameters, but no IP address, no cookies and no form entries.

If your browser detects a violation of the security policy, it reports it directly to Sentry. The report contains, among other things, the address requested, the blocked content and information about the browser. Your IP address is transmitted to Sentry for technical reasons and may be stored there with the report. Search pages do not trigger such reports and the pages that follow do not learn the search term, so it does not reach Sentry. We use this information solely to detect and fix faults. This service runs without any selection in the notice because it serves the secure operation of the website.

8. Links to social networks

We link to our profiles on Instagram and Facebook (Meta Platforms Ireland Limited, Ireland) and on LinkedIn (LinkedIn Ireland Unlimited Company, Ireland). These are simple links, not plug-ins: data is only transmitted when you click on a link. The operators of these platforms are responsible for the data processing on them.

9. Disclosure to third parties

We only pass on personal data if this is necessary for the stated purposes, if you have given your consent or if we are legally obliged to do so. Recipients are primarily our hosting provider DigitalOcean, LLC, USA, with servers in the EU, the server management service Laravel Forge of Laravel Holdings Inc., USA, other IT service providers and the providers named in sections 6 and 7. They process the data on our behalf and are contractually bound to data protection. We do not sell personal data.

10. Disclosure abroad

Individual providers are based in the EU or the USA (sections 6 to 9). According to the assessment of the Swiss Federal Council, the EU ensures an adequate level of data protection. For disclosures to the USA, we rely on the recipient’s certification under the Swiss-U.S. Data Privacy Framework or on the standard contractual clauses of the European Commission.

11. Retention

We retain personal data only for as long as the purpose requires or statutory retention obligations demand. We then delete or anonymise it.

12. Data security

We protect your data with appropriate technical and organisational measures. The connection to the website is encrypted (HTTPS).

13. Your rights

You can request information about your personal data that we process and have incorrect data rectified. You can object to the processing, request the deletion of your data and withdraw consent at any time. Under certain conditions, you can request that your data be handed over in a common electronic format.

Send your request to the address in section 1. We may ask for proof of identity. You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, in German EDÖB, www.edoeb.admin.ch).

14. Changes

We may amend this privacy policy at any time. The version published on this website applies.

Last updated: [Monat Jahr]