Online data protection policy

We consider it our primary duty to maintain the confidentiality of the personal data you provide and to protect this data from any unauthorised access. We therefore take the utmost care and apply the latest security standards to provide maximum protection for your personal data.

The Zuger Kantonsspital is responsible for the website www.zgks.ch.

Contact address:

Zuger Kantonsspital AG
Landhausstrasse 11
6340 Baar

T +41 41 399 11 11
F +41 41 399 11 21
E datenschutz@zgks.ch

We process our users' personal data in accordance with the Zug Data Protection Act (DSG; BGS 157.1) and the Ordinance on Information Security of Personal Data (VIP; BGS 157.12) only insofar as this is required to provide a functional website that presents our content and services. The personal data of our users is regularly processed after obtaining the user's consent. This does not apply in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law or we have a legitimate interest in processing the data.

We process the personal data of our users for communication and contact purposes.

Your personal data will not be transferred to any third parties for purposes other than those mentioned. We will only forward your personal data to third parties if:

• you have expressly consented to this,
• the processing is required in order to honour a contract with you,
• the processing is required to fulfil a legal obligation,
• the processing is required to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
• the third party is a commissioned data processor that we have contractually engaged to comply with the data protection policy and to guarantee data security. We will also contractually oblige contract data processors to process your data solely for the purposes of fulfilling a contract.

Your data may be transferred abroad as a result of the involvement of service providers. This specifically applies where a service provider commissioned by us is based abroad. Your data may also be transferred to countries without adequate data protection, notably to the US. When finalising contracts (particularly if they include standard EU contractual clauses), we ensure that the legal requirements are complied with.

We adhere to the privacy by design principles. We therefore only save your personal data for as long as is required to fulfil the purposes stated herein or for the various storage periods stipulated by law. Once the respective purpose has ceased to exist or these periods have expired, the corresponding data is routinely anonymised or deleted in accordance with the statutory provisions.

You can exercise your following rights at any time using the contact details provided, subject to the restrictions provided for by law (e.g. statutory retention obligations):

• Information about your data saved by us and its processing,
• Rectification of inaccurate personal data,
• Deletion of your data saved by us,
• Restriction of data processing insofar as we are not yet permitted to delete your data due to legal obligations,
• Objection against us processing your data

You may revoke the consent you have granted us at any time and this revocation will apply prospectively.

We use state-of-the-art encryption methods (e.g. SSL) via HTTPS to protect the security of your data during transmission. An encrypted connection is indicated by the address line of the browser changing from "http://" to "https://" and by the lock symbol in the browser line. SSL encryption means that the data you transmit to us cannot be read by third parties.

We attach great importance to protecting your privacy. The following measures explain which of your personal data we process when you visit our website or use our online services.

A contact form, to contact us online, is available on our website. If the user opts to complete the contact form, data entered in the input fields will be transmitted to us and saved. This includes all data provided in the form such as the form of address, surname, first name and general correspondence data such as postal address, telephone number and email address.

As part of the sending process, we will ask for your consent to process the data and refer you to this data protection policy. Processing of the personal data entered in the input fields allows us to process the contact.

Alternatively, you can contact us using the email address provided. Data transmitted via email – i.e. external to our own administrative network – is not encrypted and is therefore deemed to be less confidential. The user's personal data transmitted via email is saved. No data will be transferred to any third parties as part of this process. The data is solely used for processing the conversation. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. This applies to both the personal data from the input fields of the contact form and the data sent by email when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been definitively resolved. Users may revoke consent to the processing of their personal data at any time.

We collect and process the personal data of applicants for the purpose of handling the application process.

As part of your online application, we will save the personal data you submit in the applicant database. This includes all data provided in the form such as the form of address/title, surname, first name, nationality, date of birth, gender and general correspondence data such as postal address, telephone number and email address. In addition, all documents submitted by you and relating to the application, such as cover letter, CV, references or diplomas/certificates, are also collected.

This specifically applies to situations where an applicant submits relevant application documents to us electronically, for example by email, a website form or an integrated recruiting tool. When an employment contract is finalised with an applicant, the data transmitted will be saved and processed for the purpose of handling the employment relationship in compliance with the statutory provisions. If no employment contract is finalised with the applicant, the application documents are automatically deleted no later than 3 months after notification of the rejection, provided that there are no other legitimate grounds for us not to delete these documents. If you agree to be included in our applicant pool, the data will be automatically deleted 12 months after inclusion. Other legitimate grounds in this context, for example, include, an obligation to provide evidence in a procedure under the Gender Equality Act (GIG).

eCcards (electronic cards) can be sent from our website. We save the data from the input fields (sender name, sender email, recipient email, message) to generate statistics. The saved data will not be used for any other purposes and will be automatically deleted in 3 months. Your personal data will not be transferred to any third parties.

When you access our website, general information is automatically collected by means of a cookie. This information (server log files) includes:

• IP address
• Date/time of enquiry, time zone difference relative to (GMT)
• Content of the query (specific page)
• Access status/http status code
• Volume of data transmitted in each case
• Website from which the query originated
• User agent (e.g. browser, operating system and its interface, language and version of the browser software)

The web server log files are stored for 30 days by default.

This information is technically required to correctly deliver the website content you have requested. If cookies are deactivated, the website may have limited functionality, since not all functions of the website will be available if cookies are deactivated.

By configuring your browser accordingly, you can prevent the installation of cookies at any time or request that a warning be displayed before accepting a cookie. This enables you to choose if you want to allow cookies or not.

Cookies are primarily processed for the following purposes:

• To ensure that the website is functional
• Optimisation of the website
• To ensure the security of our information technology systems

The processing of your personal data is based on our legitimate interest arising from the aforementioned purposes for data collection. We do not use your data to draw conclusions about you personally. The data recipients are only the responsible entity. In this respect, the data is not analysed for marketing purposes or transmitted to third parties.

When accessing our website, users are informed by an info banner about the use of cookies for analysis purposes and referred to this data protection policy.

What are cookies?
Our website uses cookies. These are small files that are saved on your computer or mobile device when you visit or use one of our websites. Cookies save specific settings and data about the communication with the website via your browser. When a cookie is activated, it is assigned an identification number (cookie ID) that identifies your browser and allows the information contained in the cookie to be used.

Most of the cookies we use are temporary session cookies that are automatically deleted from your computer or mobile device at the end of the browser session. In addition, we also use permanent/long-term cookies. These are saved on your computer or mobile device after the end of the browser session. Depending on the type of cookie, these permanent/long-term cookies are saved on your computer or mobile device for between one month and ten years and are automatically deactivated after the programmed time has expired.

Why do we use cookies?
The cookies we use serve to provide miscellaneous functions on our website. Cookies for example help to save your country and language preferences and your shopping basket across different pages of an internet session.

Using cookies, also allows us to record and analyse the usage behaviours of our website visitors. This helps us make our website more user-friendly and effective and to make your visit as pleasant as possible. It also allows us to display information that is specifically tailored to your interests.

What data is collected?
Cookies record usage information such as the date and time our website was accessed, the name of the website visited, the IP address of your end device and the operating system used. Cookies also provide information about which of our content pages you visit and which website referred you to our website.

Cookies from third-party providers (Third Party Cookies)
Cookies or any corresponding technologies stored on your computer or mobile device may also originate from independent third parties. Third-party cookies are considered separately in our online data protection policy.

Deactivating cookies
You can configure your browser settings to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all website functions if you deactivate cookies. Third-party cookies are considered separately in our online data protection policy.

This website uses Google Analytics, a web analytics service provided by Google LL.C., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The statistics obtained allow us to improve our contents and to make the website more interesting to you, the user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate your usage cross-device analysis in settings under "My data", "Personal data".

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We advise that on this website Google Analytics has been extended by the code "_anonymizeIp();" to facilitate anonymised collection of IP addresses. This means that IP addresses are further processed in abbreviated form, so that they cannot be traced back to a specific person. If data collected about you contains a personal reference, this will be excluded immediately and the personal data will be deleted immediately.

Only in exceptional cases will the full IP address be transmitted to a Google server in the US and abbreviated there. On behalf of the operator of this website, Google will use this information to analyse your website usage, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage. For exceptional cases where personal data is transmitted to the USA, Google has agreed to comply with the Swiss-US Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active 

Google Analytics uses cookies. The information generated by the cookie about your website usage is usually transmitted to a Google server in the US and saved there. You may prevent cookies being saved by setting your browser software to this effect; however, we wish to point out that this may restrict the full functionality of this website. You may also prevent Google from collecting data generated by the cookie as well as on your website usage (including your IP address) and from processing this data by downloading and installing the browser plug-in provided in the following link: https://tools.google.com/dlpage/gaoptout.

This website uses the Google Maps services. This allows us to display interactive maps directly on the website and lets you use the map function more conveniently.

When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. The data collected when you visit our website is also transmitted. This occurs regardless of whether you are logged into the Google user account or not. If you are logged into the Google account, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google saves your data in the form of usage profiles and then uses this data for advertising, market research and/or customising its website. This type of analysis is used to provide customised advertising (even for users who are not logged in) and to inform other social network users about your activities on our website. You have the right to object to the creation of these user profiles, in which case you must contact Google to exercise this right.

Further information about the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's data protection policy. This will also provide more detailed information about your rights and the settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy.

Google also processes your personal data in the US and has agreed to comply with the Swiss-US Privacy Shield, www.privacyshield.gov/participant

Our website also uses social plugins. These plugins are identified by their respective social network logos. To protect your data, we rely on the "Shariff" solution to implement the social media plugins. This means that these buttons are only integrated on the website as a graphic that contains a link to the corresponding website of the button provider. When you click on the graphic, you will be redirected to the services of the respective providers. This will send your data to the respective providers. If you do not click on the graphic, there is no communication between you and the social media button providers. Details about the collection and use of your data on social networks can be found in the respective terms of use of the corresponding providers.

Our website features social media buttons of companies such as:

• Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA - Facebook has agreed to comply with the Swiss-US Privacy Shield: Link
• Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA - Twitter has agreed to comply with the Swiss-US Privacy Shield: Link
• Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA - Google has agreed to comply with the Swiss-US Privacy Shield: Link

This website uses "fonts.com", a font service provided by Monotype GmbH, Werner-Reimers-Strasse 2-4, 61352 Bad Homburg, Germany. Each time you visit this website, files are loaded from a fonts.com server to display the text in a specific font. Your IP address may be transmitted to a fonts.com server and saved in the general server log. The further processing of this information is the responsibility of fonts.com. Information on conditions and settings can be found in the data protection policy of fonts.com.

The use of web fonts serves to present our online services in a uniform and appealing manner.

We reserve the right to adapt this data protection policy so that it always complies with current legal requirements or to implement changes to our online services in the data protection policy, e.g. when introducing new services. The new data protection policy will then apply to subsequent website visits.