Privacy Policy
(Applicable in Switzerland and in the European Union)
1. Introduction
At EMDR Europe Association, we attach the utmost importance to preserving your privacy and ensuring the security of your data. We minimise data collection as far as possible, only gathering what is strictly necessary. All data collected—whether automatically or voluntarily—are retained in compliance with European (GDPR) and Swiss data protection standards.
The purpose of this document is to provide transparent information about the nature, scope, and purpose of the processing of personal data carried out when you browse and use our website www.emdr-europe.org (hereinafter “the Site”).
2. Purpose and scope
This policy aims to inform users of the Site about how EMDR Europe Association collects and processes their personal data when they use it (browsing, interactions, forms, etc.). It applies to all functionalities, services, and pages offered on the Site, including but not limited to:
- Simply viewing the pages;
- The possible purchase of products or services;
- Signing up for accounts or restricted areas;
- Sharing content or interacting with third-party services (video players, social networks, etc.).
3. Definitions
To facilitate the understanding of this document, here are some key definitions:
- Personal Data: any information relating to an identified or identifiable natural or legal person. This may include, for example, name, address, email address, telephone number, health status, or even online browsing behaviour.
- Usage Data: data that may be collected automatically while using the Site (e.g. IP address, browser type, pages viewed).
- Data Subject or Concerned Person: any natural person whose personal data is processed.
- User: the person who uses the Site.
- Cookies: small text files stored on the user’s device, for instance to recognise a browser, save preferences, or track the use of a site (for statistical, security, advertising purposes, etc.).
- Controller: the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (see below, section 4).
All other definitions from the General Data Protection Regulation (GDPR) or Swiss law also apply and may be consulted, where appropriate, in the applicable legislative texts.
4. Controller
The controller (under the GDPR and Swiss legislation) is:
EMDR Europe Association
Steigstrasse 26
8200 Schaffhausen
Switzerland
Telephone: +39-339-8695585
Email: info@emdr-europe.org
Website: www.emdr-europe.org
For any requests related to the protection of your data, please contact the email address above.
5. Data collection and cookies
5.1 Automatically Collected Data
When the Site is loaded and browsed, without any voluntary transmission of information on your part, only the data that your browser automatically transmits is collected, in particular:
- IP address;
- Date and time of visit;
- Difference in time zone with Greenwich Mean Time (GMT);
- Access status / HTTP status code;
- Browser type and version;
- Operating system and interface;
- Language and version of the browser;
- Pages viewed;
- Time and date of the visit to these pages;
- Unique device identifier and other diagnostic information.
This information is technically required to display the Site, ensure its stability and security, and carry out anonymised statistical analyses.
5.2 Voluntarily Provided Data
EMDR Europe Association also collects personal information that you provide, for example:
- When creating an account, or logging in to a restricted area;
- When viewing or purchasing products or services;
- When filling out forms (contact, quote request, newsletter subscription, etc.);
- When browsing the Site in an authenticated manner.
This data is only used for the purposes described in this policy (service improvement, order tracking, communication with users, etc.) or to comply with legal obligations.
5.3 Cookies
The Site uses different types of cookies, which differ mainly in their storage duration:
- Transient cookies (session cookies): automatically deleted when you close your browser. They often contain an identifier that allows your browser to be recognised from one page to another, during your session.
- Persistent cookies: stored for a specified period (up to two years, depending on their purpose). They can be manually deleted via your browser’s security settings and are automatically deactivated upon expiry.
5.3.1 Purposes of Cookies
- Necessary cookies: they make the Site usable (navigation, access to secure areas, etc.). The Site cannot function properly without them.
- Statistical / performance cookies: they help us understand how visitors interact with the Site, collecting anonymous information to produce statistics.
- Advertising cookies: they can be used to display targeted advertising, including in external video players (YouTube, Vimeo, Dailymotion, etc.).
- Security cookies: they are collected for security reasons (e.g. fraud prevention).
You can configure your browser to reject all cookies or to notify you when a cookie is sent. You can also delete at any time any cookies that have already been installed. However, if you refuse them, some features of the Site may be unavailable or degraded.
6. Legal basis for processing
We process your data on the following legal bases (GDPR):
- Article 6(1)(a): explicit consent (e.g. newsletter subscription).
- Article 6(1)(b): performance of a contract or pre-contractual measures (e.g. ordering services).
- Article 6(1)(c): compliance with a legal obligation (e.g. tax obligations).
- Article 6(1)(d): protection of vital interests of a person.
- Article 6(1)(f): pursuit of legitimate interests (e.g. Site security, audience statistics), provided your fundamental rights and freedoms do not prevail.
Where we rely on legitimate interest, it chiefly relates to ensuring proper Site management, improving our services, or protecting our systems.
7. Data retention
We will only retain your personal data for as long as necessary for the purposes described or to fulfil our legal obligations (accounting, tax obligations, etc.). By default, data is stored exclusively in Switzerland, in a secure manner, and is only accessible to authorised persons or entities (subcontractors, service providers, etc. who are bound by confidentiality obligations).
7.1. Cross-border transfers
Some of the providers or partners we work with (e.g. Google, Meta/Facebook, advertising or videoconferencing platforms) are located in countries that do not offer an equivalent level of data protection to that of Switzerland or the European Union, in particular the United States.
When we transfer personal data to a third country:
- We implement the Standard Contractual Clauses (SCC) approved by the European Commission or equivalent safeguards recognised under Swiss law.
- We evaluate the level of data protection in the third country to ensure that your fundamental rights are not compromised.
- Where applicable, we obtain your explicit consent or put in place other protection mechanisms (e.g. binding corporate rules, certifications, etc.).
You can obtain more information on these safeguards (including the Standard Contractual Clauses) by contacting us at the address provided at the end of this document.
7.2. Data security
We implement technical and organisational measures appropriate to protect your data against loss, manipulation, unauthorised access, or any form of unlawful processing. These measures include:
- SSL/TLS encryption on our pages, to secure data transfers between your browser and our servers;
- Authentication and access management protocols (passwords, restricted authorisations) so that only authorised persons can view or process the data;
- Firewall and intrusion detection systems to protect our infrastructure;
- Regular backup and business continuity procedures to mitigate the impact of potential incidents;
- Raising awareness among our staff and subcontractors about best practices in data protection.
Although we strive to protect your data, no system is infallible. If, despite all precautions, a security breach should occur, we will follow the legal notification procedures provided under the GDPR and/or the Swiss Federal Act on Data Protection (FADP).
8. User rights
Under applicable law (GDPR, Swiss law), users have, in particular, the following rights:
- Right of access: the right to know whether data concerning you are processed and to obtain a copy of them.
- Right to rectification: the right to have inaccurate or incomplete data corrected or completed.
- Right to erasure (“right to be forgotten”): the right to request the deletion of your data under certain conditions (e.g. withdrawal of consent, outdated data).
- Right to object: the right to object to the processing of your data for reasons relating to your particular situation, or at any time when processing is for direct marketing purposes.
- Right to restriction of processing: the right to request the restriction of processing in case of disputing accuracy, lawfulness, or if you need the data for establishing, exercising or defending legal claims.
- Right to data portability: the right to receive a copy of your data in a structured, commonly used, and machine-readable format, in order to transmit them to another controller.
- Right to withdraw consent: when processing is based on your consent, you may withdraw it at any time (e.g. unsubscribing from the newsletter).
To exercise these rights, please contact us by email at: info@emdr-europe.org.
9. Collection of additional information
9.1 Sharing Site Content on Social Networks
If you share Site content (for example, an article) via an integrated sharing feature, the relevant social network (Facebook, Instagram, LinkedIn, TikTok, Snapchat, Twitter/X, etc.) may collect and process information about your browsing in accordance with its own privacy policy.
- No control: EMDR Europe Association has no control over the data collected or the processing operations carried out by these platforms.
- User profile: each social network uses the information gathered to build marketing profiles or offer you targeted advertising.
- Data transfer abroad: depending on where your account is based and your account settings, certain data may be transferred outside the European Union and/or Switzerland, to countries that do not guarantee an adequate level of protection.
We invite you to consult the privacy policies of these social networks for more information (Facebook, Instagram, LinkedIn, TikTok, Snapchat, Reddit, Telegram, X (Twitter), WhatsApp, etc.).
9.2 Quote Request / Contact Form
When you enter your personal data (e.g. name, email, message) in a quote request or contact form, you agree that this data will be used to process and respond to your query. It will only be disclosed to third parties with your prior consent or in case of a legal obligation.
9.3 Logging In to a User Account (Login / Intranet)
If you have a user account, certain identifying information (e.g. username, email address) is collected in order to:
- Facilitate access to the account’s features;
- Personalise your experience (e.g. remember your preferences);
- Ensure secure access.
Where applicable, certain information may be shared with technical service providers (hosting, maintenance) strictly for the operation of the Site. These providers are contractually bound to maintain data confidentiality.
9.4 Downloading PDF Files
The Site may offer downloads of PDF documents. When a download occurs, we may log information (e.g. date, number of downloads) for the purpose of tracking and improving content.
10. Google Analytics
The Site may use Google Analytics, a web analytics service provided by Google Inc. (“Google”).
- Operation: Google Analytics uses cookies to analyse your use of the Site and generate reports (audience statistics, pages viewed, etc.). Google may use this information to personalise advertising on its own advertising network.
- Opt-out add-on: you can prevent Google Analytics from collecting your data by installing the Opt-out Browser Add-on.
- IP anonymisation: your IP address is anonymised before being transferred to Google servers (located in the United States).
- Legal basis: the use of Google Analytics is based on our legitimate interest (Article 6(1)(f) GDPR) in evaluating the Site’s use and optimising it.
For more information, see:
https://policies.google.com/privacy
10.1. Remarketing and targeted advertising (Google Ads, Facebook Pixel, etc.)
We may use remarketing or targeted advertising services provided by third parties such as Google Ads, Facebook Ads (Meta Pixel), LinkedIn Ads, or equivalent platforms. The goal is to show you more relevant advertising related to our services or updates on other websites or apps.
Operation:
- Cookies or tracking pixels are placed when you browse our Site. This allows third-party providers (e.g. Google, Meta) to recognise your browser on subsequent visits and offer you personalised ads based on your presumed interests.
- The data collected may include your IP address, the unique ID of your browser, the page viewed, or the time of the visit.
- The information collected is processed according to these providers’ privacy policies. It may be transferred to the United States or other countries outside Switzerland/EU (see “Cross-border Transfers” section).
Legal basis:
- Where required by applicable law (e.g. GDPR), we ask for your consent before placing such cookies or pixels. Without your consent, remarketing will not be activated.
- In some cases, we may rely on our legitimate interest (Article 6(1)(f) GDPR) to promote our services, provided that your fundamental rights and freedoms do not prevail.
How to deactivate:
- You can manage your preferences via our cookie banner or your browser settings.
- On the relevant platforms, you can customise or block targeted advertising (e.g. through your Facebook settings or Google account).
- You can also use tools such as YourOnlineChoices or Google Ads Settings to adjust your online advertising preferences.
11. Video players (YouTube, Vimeo, Dailymotion)
The Site may embed video players from third-party services such as YouTube (Google Inc.), Vimeo, or Dailymotion. In this case:
- Cookies may be placed on your device by these providers, for the purposes of tracking preferences, audience measurement, and/or personalised advertising.
- Data collected (e.g. IP address, pages visited) may be transferred to these third parties and processed according to their own privacy policies.
11.1 YouTube
Service provided by:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
(Represented in Switzerland by VISCHER AG, Google Ireland Data Protection Representative, Schützengasse 1, CH-8001 Zurich)
How Google uses cookies – Google Privacy and Terms
11.2 Vimeo
Service provided by:
Vimeo
(e.g. RA Robert Niedermeier, Data Business Services GmbH & CO KG-Switzerland, Badenerstrasse 549, City West, Zurich, CH-8048)
11.3 Dailymotion
Service provided by:
Dailymotion SA, 140 boulevard Malesherbes, 75017 Paris, France.
[Phone: +33 (0)1 77 35 11 00 / Email: dpo@dailymotion.com]
12. Newsletter
Users may have the opportunity to subscribe to our newsletter.
- Double opt-in: by entering your email address in the “Newsletter” form and clicking “Send”, you agree to receive said newsletter. A confirmation email is then sent to you to verify your consent.
- Unsubscription: you may unsubscribe at any time by clicking on the unsubscribe link at the bottom of every newsletter.
13. Processing of applications (if applicable)
If you apply for a job or send application documents, we collect and process your personal data in order to manage the recruitment process.
- If an employment contract is concluded, the data is retained for the duration of the employment relationship, in accordance with the applicable legislation.
- If your application is unsuccessful, the data is deleted after a period of two months, unless a longer retention period is necessary to assert rights (for example, in the event of a dispute).
14. No automated decision-making
EMDR Europe Association does not use automated decision-making or profiling that produces legal effects or significantly affects you, except where provided by law or subject to your explicit consent.
15. Disclaimer
By accessing the Site www.emdr-europe.org, you accept these terms of use (otherwise, you are invited to cease browsing):
- Accuracy of information
EMDR Europe Association does not guarantee the accuracy, precision, or completeness of the information contained on the Site. The content may be modified at any time without notice. - Exclusion of liability
EMDR Europe Association, its representatives, and agents disclaim all liability for any direct or indirect damage resulting from the use of the Site. - Intellectual property rights
The content of the Site must not be copied, reproduced, distributed, or transmitted to third parties, in whole or in part, without prior authorisation. - Applicable law and jurisdiction
The use of the Site is governed by Swiss law, and jurisdiction is located in Schaffhausen (Switzerland).
16. Effective date and modification
EMDR Europe Association reserves the right to amend this privacy policy at any time. Amendments are published on this page and take effect upon being posted. Continued use of the Site after publication of a new version constitutes tacit acceptance of the amended policy. We invite you to regularly consult this page to stay informed of any changes.
17. Contact details
For any questions regarding this privacy policy or to exercise your rights (access, objection, etc.), please contact:
EMDR Europe Association
Steigstrasse 26
8200 Schaffhausen
Switzerland
Telephone: +39-339-8695585
Email: info@emdr-europe.org
Thank you for the trust you place in us. We remain at your disposal for any further information regarding the protection of your data.