MHHI LogoBack to home

Legal notice & Data protection regulations

Publisher

Swiss Red Cross
Rainmattstrasse 10
P.O. Box
CH-3001 Bern

Tel: +41 58 400 41 11

E-mail: mhhi@redcross.ch
Homepage: www.mhhi.org

Data protection regulations

The Movement Hub on Harmful Information (MHHI) is an initiative of the Swiss Red Cross (SRC). This notice describes the personal data processing carried out on mhhi.org.

Which data do we process, and where do they come from?

  • Contact form data: if you contact us via the form on this site, we process your full name, organisation/National Society, email address, subject and message. This data is stored in our content management system, and you receive an automatic confirmation email. The Hub team accesses submissions through the system to respond to you.
  • Technical/log data: like any website, our hosting provider automatically records technical information for every visit (e.g. IP address, browser type, date/time, requested page) to operate the site securely and reliably.
  • Analytics data: if you consent, we collect anonymised/pseudonymised usage statistics (pages visited, referring site, language, device type) via Google Analytics, to understand how the site is used and to improve it.
  • Consent choices: our consent management tool stores which tracking categories you have accepted or declined, so that your choice is respected on future visits.

Purpose of processing

  • Responding to enquiries submitted through the contact form
  • Operating, securing and maintaining the website
  • Understanding site usage in aggregate to improve content and navigation
  • Complying with legal obligations

Cookies and consent

This site uses a consent banner (Usercentrics) to ask for your permission before any non-essential technology, such as analytics, is activated. You can accept, decline, or change your choice at any time via "Privacy Settings" in the footer. Strictly necessary technology required for the site to function is not subject to this consent requirement.

Analytics tools used

  • Google Analytics 4 / Google Tag Manager: measures page views and site usage. Only activated after you give consent; data may be processed by Google on servers outside Switzerland/the EEA (see "International data transfers" below).
  • Microsoft Clarity: records anonymised/pseudonymised session behaviour (e.g. heatmaps, clicks, scrolling) to help us understand and improve usability. Only activated after you give consent.

We do not use advertising pixels, retargeting, or social media tracking plugins on this site.

Recipients of data / processors

We share data with the following external providers, each acting under a data processing agreement:

  • Vercel (hosting/infrastructure) — technical delivery of the website and server logs
  • Neon (database) — engaged via Vercel's Storage/Marketplace integration, but with its own direct data processing terms; stores contact form submissions and other site content
  • Make.com and Mandrill (email delivery) — process contact form data to send you the confirmation email
  • Google (Google Analytics/Tag Manager) — only if you consent to analytics
  • Microsoft (Clarity) — only if you consent to analytics

International data transfers

Neon (database) and Make.com (email forwarding) process data within the European Union. Although Neon is provisioned through Vercel's Storage/Marketplace integration, Neon acts as its own separate data processor with its own data processing terms.

Vercel (hosting) runs the website's server functions in European regions (Frankfurt and Paris), so day-to-day processing of your requests takes place within the EU. However, Vercel Inc. itself is a US company, and like most hosting providers it relies on "subprocessors" for other parts of its platform: other companies it works with behind the scenes, such as the cloud infrastructure providers Amazon Web Services, Microsoft Azure and Google Cloud. These subprocessors, and some of Vercel's own account/billing systems, may be located in various countries, including the United States. Vercel publishes the current list of its subprocessors in its Data Processing Addendum (vercel.com/legal/dpa).

Google (Analytics/Tag Manager), Microsoft (Clarity) and Mandrill (email delivery) may also process data outside Switzerland or the European Economic Area, including in the United States. Wherever any of our providers, or the subprocessors they rely on, process data outside Switzerland or the EEA, we rely on appropriate safeguards (such as standard contractual clauses) to protect your data.

How long do we retain your data?

Contact form submissions are retained in our system for 30 days to allow us to respond to and follow up on your request, and are then automatically deleted. Make.com retains contact form data for 30 days before it is automatically deleted. Analytics data is retained according to Google Analytics' standard retention settings and is not used to identify you personally.

What are my rights in relation to my data?

You have the right to request information about the personal data we hold about you, to ask for it to be corrected or deleted, and to withdraw consent to analytics tracking at any time (via "Privacy Settings"). To exercise these rights, please contact us at mhhi@redcross.ch.

Legal provisions

Copyright

© Swiss Red Cross. All rights reserved. The content of the Swiss Red Cross website is protected by copyright, so may only be used for commercial purposes with the consent of the SRC. This provision does not apply to materials expressly provided for the media and marked as such. Some web pages may also contain pictures and text that are subject to third-party copyright. No licence for the use of the intellectual property of the SRC or of third-parties is granted by this website.

Protection of the emblem and name

The red cross emblem and the words ‘Red Cross’ are protected by the Geneva Conventions of 12 August 1949 and the Federal Law on the Protection of the Emblem and Name of the Red Cross.

Terms of use

By visiting our web pages, placing orders and using our services, you declare that you agree to our collecting your data and to our terms of use. You navigate our website and use our services at your own risk. The SRC cannot be held liable for any damage that may arise from using or disabling the use of our website and its content. This refers in particular to any damage that may result from viruses, etc. after downloading content from our site. The SRC cannot accept any liability for any damage arising from the interruption of any features of its website. The content of the SRC website may contain inaccuracies or mistakes. The SRC reserves the right to improve this content at any time.

Links to other websites

Certain links on this website lead to external websites. When editing its web pages, the SRC checks that links work but cannot accept any liability for the content of the websites. Webmasters who link their sites to our website are requested to inform the SRC of this.