Trust is important, especially when it comes to your data. For this reason, we consider it our duty to only collect the data that is absolutely necessary, to manage it with due care, and to protect it from misuse.

The CCF Children Cancer Foundation (hereafter CFF) adheres strictly to the data protection regulations when collecting and processing your data.

You will find information on the processing of your data and your rights below. This privacy policy is based on the EU General Data Protection Regulation (GDPR).

Name and Contact Details of the Controller

Controller for the purposes of the GDPR:

CCF Children Cancer Foundation
Schaanerstrasse 29a
9490 Vaduz
Liechtenstein

info@childrencancer.eu
Phone +423 237 28 10

This privacy policy applies (A.) to the CCF website (www.childrencancer.eu) and to the personal data collected via it, as well as (B.) to general data processing within the CCF.

The data protection notices and declarations of other providers apply to their websites, e.g. via links.

A. Data Processing on this Website

Categories of personal data collected

Each time our website is accessed, our system automatically collects data and information from the accessing computer's system. The following data is collected:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server enquiry
• IP address

You will find the relevant information on the data collected via the online forms and transmitted to CCF in Section "B. General Data Processing by CCF".

Purposes of processing

We only process personal data on our website if it is necessary to provide a functional website, user-friendly content and services. We therefore collect personal data on our website

• for internal administrative purposes, such as ensuring the stability and operational security of the system.
• For the application form.

For details of how CCF processes data transmitted via online forms, please refer to section B. General Data Processing by CCF.

Legal bases

The processing of personal data in connection with our website is based on Art. 6 para. 1 GDPR:

• If you provide us with your data voluntarily (e.g. by subscribing to the newsletter or completing an online form), this is based on your consent (letter a). We also process the health data provided in the application form on the basis of your consent in accordance with Art. 9 (2) (a) GDPR.
• Our legitimate interest, e.g. ensuring the stability and operational security of the system (point (f)).

The legal basis for the processing of data transmitted to CCF via online forms can be found in the section entitled "B. General Data Processing by CCF".

Storage period

We store personal data collected when our website is accessed and files are transferred for a maximum period of one year. This ist done for reasons of data security, particularly to defend against attempted attacks on our web server, as well as to ensure the stability and operational security of our system. You will find detailed information on the storage period of the data provided in the application form in chapter "B. General Data Processing by CCF".

Web analysis

This website uses Matomo, an open-source web analytics service.
Matomo enables us to collect and analyse data about how our website is used by visitors. This allows us to determine, among other things, which pages were accessed and from which region. We also record various log files (e.g. IP address, referrer, and the browser and operating system used), and we can measure whether visitors perform certain actions on our website (e.g. clicks and purchases).
This analysis tool is used on the basis of Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in analysing user behaviour in order to optimise our website and advertising.

Cookies

We only use cookies that are necessary for the technical operation of our website to make it more user-friendly. These are small files that your browser automatically creates and stores on your device when you visit our website. These cookies remain stored until you delete them. This enables us to recognise your browser when you visit again. If you do not wish this to happen, you can configure your browser accordingly. Please note that deactivating cookies may prevent you from using all the functions of our website. The legal basis for processing data via cookies is Art. 6 para. 1 lit. f GDPR.

Online forms

Online forms (application form)

The following online form is available on our website:

• Application form

We process the data collected via the application form on the legal basis of Art. 6 para. 1 let. a and Art. 9 para. 2 let. a GDPR. We obtain your consent either in writing or via the online form. You can withdraw your consent at any time. However, please note that, if you do so, we will no longer be able to process your application for support services.

Data transmitted to us via the online form will be processed exclusively for the purpose of handling the request submitted. This data is therefore used solely for the stated purpose; it is neither analysed in any other way nor linked to other data. Data entered into online forms is transmitted via an HTTPS connection (TLS-encrypted).

For details on how CCF prosesses data in the context of online forms on the CCF website, and the corresponding deletion periods, please refer to the following chapter "B. General Data Processing by CCF".

File downloads (application form)

You don't need to give us any personal information to download files from our website.

B. General Data Processing CCF

Categories of personal data collected

The main activity of CCF is to provide financial support to families with children and young people suffering from cancer. To do this, we require the following information applicants, which we typically collect via our application form:

• Details of the sick child and their legal guardians (name, date of birth, contact details, etc.)
• Information on their family and financial circumstances
• Medical certificates / diagnosis of illness

• Any additional information

   

Purposes of processing

This data is collected where necessary

• in order to identify you as our applicant;

• to correspond with you;

• to review your application;

• for the payment of awarded funds;

• for accounting purposes;

• possibly for the enforcement of or defence against legal claims,

   

Legal basis

We will only process your personal data if you have given us your consent, in accordance with Art. 6 para. 1 let. a and Art. 9 para. 2 let. a GDPR.
 

Transfer of personal data to a third country

We do not transfer personal data to third countries outside of the European Economic Area.

Duration of storage of personal data

CCF will only store your personal data for as long as is necessary for the purposes for which it was collected in accordance with this privacy policy. After termination of the cooperation, i.e. payment of the support benefit, this data is stored for at least 10 years on the basis of statutory provisions (Art. 1059 PGR). If you withdraw your consent before support is provided, we will delete your data immediately.

Right to withdraw consent

In accordance with this privacy policy, CCF will only store your personal data for as long as is necessary for the purposes for which it was collected. After the end of our cooperation, i.e. after the support benefit has been paid, this data will be stored for at least 10 years on the basis of statutory provisions (Art. 1059 PGR). However, if you withdraw your consent before support is provided, we will delete your data immediately.

C. Data Security

Website

When you visit our website, we use the widely adopted TLS method alongside the highest level of encryption supported by your browser. You can tell if a page on our website is being transmitted in encrypted form by looking for the closed key or lock symbol in the address bar of your browser.

General Data Processing

In addition, we apply appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties when processing data. These measures are in line with the latest technological advances.

D. Your Rights

Rights of data subjects

According to the EU General Data Protection Regulation, you have the following rights

(i) to obtain information about the personal data processed, the purposes of processing, the categories of recipients to whom your data has been or will be disclosed, whether your data is transferred to a third country or international organisation (including the appropriate safeguards), the planned storage period, your rights to rectification, erasure, restriction of processing or objection, your right to appeal, whether your data was collected by us and, if not, the source of your data, and whether automated decision-making (including profiling) is used and, if so, the details;

(ii) to request the rectification, completion or erasure of your personal data that is incorrect or not processed in accordance with the law

(iii) to require us to restrict the processing of your personal data;

(iv) in certain circumstances, to object to the processing of your personal data or to withdraw the consent previously given for the processing;

(v) to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller

(vi) lodge a complaint with the relevant data protection supervisory authority.

Right to withdraw consent

If you have given your consent to CCF processing your data, you can withdraw it at any time. This does not affect the lawfulness of data processing carried out on the basis of consent prior to its withdrawal.

To exercise your rights, please email us at info @ childrencancer.eu or write to us at the address provided.