What personal data we collect and why
This Privacy Policy explains how our organization uses the personal data we collect from you when you use our website.
Data Collection
The RheumaCura Foundation collects the following data:
• Personal identification information (first name, last name, email address, your message to us)
How do we collect your data?
We collect and process data when you:
• register for a service online.
• voluntarily participate in a survey or provide feedback via our contact form or by email.
• use or view our website through your browser’s cookies.
How do we use your data?
The RheumaCura Foundation collects your data so that we can:
• We can keep you informed about our activities if you have asked us to do so.
• The RheumaCura Foundation will not share your information with other organizations without your express consent.
How do we store your data?
Data Storage and Hosting
Our website is hosted by Hostpoint AG, Rapperswil-Jona (Switzerland). All website data and emails stored by Hostpoint are kept exclusively on servers in Switzerland in FINMA-certified, ISO 27001-compliant data centers, with multiple daily backups and technical safeguards against unauthorized access (e.g., DDoS protection, redundant storage, access controls).
Hostpoint processes this data on our behalf as a hosting provider and is contractually obligated to implement appropriate technical and organizational measures in accordance with the Swiss Federal Data Protection Act (DSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
Newsletters and MailerLite
For our newsletter, we use the“MailerLite”service, operated by MailerLite Limited. Newsletter subscriber data (email address and, if provided, name and other information) are stored in secure MailerLite data centers in the European Union (currently primarily in Germany, the Netherlands, and other EU locations), which are ISO 27001-certified and comply with the security requirements of the GDPR.
MailerLite acts as our data processor and is bound by a Data Processing Agreement (DPA) that requires the company to process personal data only in accordance with our instructions, to protect it through appropriate technical and organizational measures, and not to disclose it to third parties without a legal basis.
General Safety Measures
To protect your personal data, we and our service providers use appropriate technical and organizational measures such as encrypted data transmission (TLS/SSL), access controls, secure passwords, regular backups, and continuous monitoring of systems in accordance with the requirements of the revised Swiss Data Protection Act (DSG) and, where applicable, the GDPR.
Despite these measures, data transmission over the Internet may still be subject to security vulnerabilities; we cannot guarantee that data will be completely protected from access by third parties, but the providers we have selected and the measures we have implemented comply with current industry standards for secure web hosting and email marketing services.
Retention Period
We process and store personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or if we have a legitimate interest in storing it (e.g., to maintain our website, to operate our newsletter, or to process inquiries), and in addition, in accordance with the statutory retention and documentation requirements under Swiss law.
Data related to newsletter subscriptions will be stored for as long as you remain subscribed to the newsletter and until you withdraw your consent or opt out of receiving further emails; After that, we may retain limited information about your subscription for a reasonable period of time, to the extent necessary to document your consent or to comply with legal obligations.
If you contact us by email or through other channels, we will store your data for as long as necessary to process and respond to your inquiry and for the duration of any ongoing relationship with you, and beyond that, provided that statutory retention requirements (e.g., under accounting or nonprofit law) apply.
Personal data will be deleted or anonymized as soon as it is no longer necessary for the stated purposes, unless longer retention is required or permitted under applicable law, or until RheumaCura ceases operations and all statutory retention periods have expired.
Your Privacy Rights
All users are entitled to the following:
The Right of Access – You have the right to request copies of your personal data from the RheumaCura Foundation. We may charge a small fee for this service.
The Right to Rectification – You have the right to request that the RheumaCura Foundation correct any information that you believe to be inaccurate. You also have the right to request that the RheumaCura Foundation complete any information that you believe to be incomplete.
The Right to Erasure – You have the right to request that the RheumaCura Foundation erase your personal data under certain conditions.
The right to restrict processing, to object to processing, or to submit a request. We have one month to respond to you. If you wish to exercise any of these rights, please contact us at .
Cookies and How We Use Them
Cookies are text files that are stored on your computer to collect standard Internet protocol information and information about visitor behavior. When you visit our websites, we may automatically collect information from you through cookies or similar technologies. For more information, please visit https://allaboutcookies.org/.
The RheumaCura Foundation uses cookies in various ways to enhance your experience on our website and to understand how you use it.
What types of cookies do we use?
We use cookies on our website for:
• Functionality – The RheumaCura Foundation uses these cookies so that we can recognize you on our website and save your previously selected preferences. These may include your preferred language and location. We use a mix of first-party and third-party cookies.
• Statistics and Analyses — We use tools to generate statistics and analyses, for optimization, and for error detection. To collect data, the tool uses what is known as a “cookie.” This is a small text file that your browser stores on your device. Through this cookie, the tool receives information, for example, about which pages you have visited, the duration of your visit to the pages, the country and city from which you are browsing, and technical data about the browser and device you are using. The IP address of your device is processed only in an anonymized form. At no time does the tool create profiles that allow us to identify specific users; instead, it always uses pseudonyms.
• Advertising – The RheumaCura Foundation does not use cookies for advertising purposes.
How to Manage Cookies
You can configure your browser to not accept cookies. If you do so, some features of our website may not work in a few cases.
Privacy Policies of Other Websites: The RheumaCura Foundation website contains links to other websites. Our privacy policy applies only to our website. Therefore, if you click on a link to another website, you should read that website’s privacy policy.
Changes to Our Privacy Policy: The RheumaCura Foundation reviews its privacy policy regularly and publishes all updates on this website.
Last revised in March 2026