All information on this website is provided for information purposes only and does not constitute legal advice from Summit Foundation. The Summit Foundation accepts no responsibility for the accuracy and up-to-dateness of the information published on this website.
LINKS
This website contains links to third-party websites over whose accuracy, legality and content Summit Foundation has no influence. The Summit Foundation therefore accepts no responsibility for the accuracy, completeness or legality of the content of third-party websites.
Data protection
May 2018
Summit Foundation is the operator of the www.summit-foundation.org website. It is therefore responsible for collecting, processing and using your personal data, and must ensure that this data is processed in accordance with Swiss law.
Your trust is important to us, which is why we take data protection very seriously and ensure that it is carried out securely. It goes without saying that we comply with the legal provisions of the Federal Data Protection Act (DPA), the Ordinance on the Federal Data Protection Act (FDPA), the Telecommunications Act (TCA) and, where applicable, other legal provisions on data protection, in particular the European Union's General Data Protection Regulation (GDPR).
Please read the following information to find out what type of personal data we collect about you and how we use it.
When you visit our website, our servers temporarily record any access to a log file. The following data is captured without any intervention on your part and stored by us until it is automatically deleted within a maximum period of twelve months:
the IP address of the computer from which the site was accessed
the date and time of access
the name and URL of the file consulted
the website from which access was gained
your computer's operating system and browser used
the country from which the site was accessed and your browser's language settings
the name of your Internet service provider
The purpose of collecting and processing this data is to enable the use of our website (establishment of communication), to ensure the long-term security and stability of the system, to enable the optimisation of our Internet offering and to compile internal statistics. Data processing is therefore based on a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
When you visit our website, we use so-called pixels and cookies to display personalised advertising and to use web analysis services. You will find more information on this subject in sections 2, 6 and 7 of this data protection declaration.
You can use a contact form to get in touch with us. The following personal data must be entered:
first and last name
email address
We will identify the mandatory data required: if this information is not provided, the provision of our services may be impeded. Entering other information is optional and has no influence on the use of our website.
We use this information solely to respond to your contact request in an appropriate and personalised manner. The processing of your contact request is based on a legitimate interest within the meaning of art. 6 para. 1 lit. f RGPD. You may object to this data processing at any time (for contact data, see 10 below).
You can subscribe to our newsletter on our website. This requires registration. The following data must be entered:
first and last name
email address
The above data is required for data processing. You are also free to enter other data (school/organisation). We only process this data to personalise the information and offers we send you and to better tailor them to your interests.
By registering, you authorise us to process the data entered for the purpose of sending regular newsletters to the address you have provided, as well as for the statistical evaluation of consumer habits and the optimisation of newsletters. This authorisation constitutes consent within the meaning of Art. 6 para. 1 lit. a GDPR and thus the legal basis for the processing of your email address in this context. We are entitled to entrust the technical running of our advertising campaigns to third parties and to pass on your data for this purpose (see section 3).
A link is provided at the bottom of each newsletter allowing you to unsubscribe from the newsletter at any time. After cancellation, your personal data will be deleted. After that, your data will only be processed in anonymous form in order to optimise our newsletter.
We would expressly draw your attention to the data analyses carried out in connection with the sending of the newsletter (see 8 below).
1.4. WHEN BILLING, ORDERING OR BOOKING WITH THIRD PARTIES
Our website offers various options for making reservations or requesting information or other services. These services are provided by third parties. You will then be informed when these services are transferred to our partners. Depending on the service, different data is collected. This may include the following data:
first and last name
school
postcode, place
email address
telephone number
number of people
We will identify the data that is absolutely necessary: if this information is not provided, the provision of billing services may be hampered. Entering other information is optional and has no impact on the use of our website.
The data you enter is generally collected directly by the supplier concerned or, in connection with certain offers, transmitted by us to them. In this case, the data protection provisions of the supplier concerned apply to the further processing of the data. The legal basis for the aforementioned data processing is the performance of a contract within the meaning of Art. 6 para. 1 lit. b GDPR.
We use re-targeting technologies for our website. Your user behaviour on our website is analysed so that we can also offer you personalised advertising on the websites of our partners. Your user behaviour is recorded pseudonymously.
The main Re-Targeting technologies use cookies (see section 6 below).
This website uses Google AdWords Remarketing and Doubleclick by Google, services provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") to serve ads on previously visited websites. Google uses what is known as a DoubleClick cookie, which enables your browser to be recognised when you visit other websites. The information generated by the cookie about your visit to these websites (including your IP address) is transferred to a Google server in the USA and stored there (for further information about the transfer of personal data to the USA, see section 10).
Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and user behaviour. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.
We will only pass on your personal data if you have expressly authorised us to do so, if we are legally obliged to do so or if it is necessary to protect our rights, in particular to enforce claims arising from the relationship between you and Summit Foundation.
We may also transfer your data to third parties if this is necessary for the use of this website, for the provision of the services you require and for the analysis of your user behaviour. Insofar as this transfer is necessary for the purposes mentioned in the first sentence, it may also take place abroad. Insofar as the website contains links to third-party websites, once these links have been activated Summit Foundation has no influence on the collection, processing, storage or use of your personal data by these third parties and accepts no liability in this respect.
Summit Foundation may transfer your personal data to third-party companies (contracted service providers) abroad if this is necessary for the data processing tasks described in this data protection declaration. These third parties are bound by the same data protection requirements as we are. If the level of data protection in a country does not correspond to that in Switzerland or Europe, we will ensure by contractual means that the protection of your personal data always corresponds to the protection that applies in Switzerland or the EU.
We use appropriate technical and organisational security measures to protect your personal data stored with us against manipulation, partial or total loss and unauthorised access by third parties. Our security measures are constantly being improved in line with technological developments.
We also take data protection in the workplace very seriously. Our employees and the service providers we appoint are bound by an obligation of confidentiality and are also required to comply with the legal provisions on data protection.
Cookies contribute in many ways to making your visit to our website easier, more pleasant and more interesting. Cookies are information files that automatically save your web browser on your computer's hard drive when you visit our website. Cookies do not damage your computer's hard drive and do not transmit any personal user data to us.
We use cookies, for example, to tailor the information, offers and advertising we provide to you to your personal interests. This use does not result in the collection of any new personal data about you as an online visitor. Most Internet browsers automatically accept cookies. However, you can configure our browser so that no cookies are saved on your computer, or so that a message informs you when a new cookie is received.
If you deactivate cookies, you may not be able to use all the functions of our website.
We use Google Analytics for our website. This tracking tool is used to monitor your browsing habits on our website. This is done in order to improve and continually optimise our website. User profiles with a pseudonym are created and small text files stored on your computer ("cookies") are used.
Further information on Google Analytics and data processing can be found here (Terms of Service) and here (Privacy Policy).
We use the email marketing services of third parties to send our newsletter. For this reason, our newsletter may contain a web beacon (invisible GIF) or similar technical means. A web beacon is an invisible image called a monopixel (1×1) that is linked to the user ID of the newsletter subscriber.
The use of this type of service makes it possible to assess whether emails containing our newsletter have been opened. It also makes it possible to detect and evaluate clicks made by the newsletter recipient. We use this data for statistical purposes and to optimise the newsletter in terms of content and structure. This enables us to better tailor the information and offers contained in our newsletter to the interests of the recipient concerned. The invisible GIF is deleted when you delete the newsletter.
To prevent the presence of tracking pixels in our newsletter, please configure your email so that your messages are not displayed in HTML.
For the sake of completeness, we inform users who have their domicile or registered office in Switzerland that the US authorities have enacted surveillance measures in the United States which make it possible to record all the personal data of all persons whose data has been transferred from Switzerland to the United States. This is done without discrimination, limitation or exception in relation to the objective pursued, and without any objective criterion that would make it possible to restrict the access of the American authorities to the data collected and their subsequent use for specific and strictly limited purposes, likely to justify all the actions associated with the consultation and use of this data. Furthermore, we inform you that persons residing in Switzerland do not benefit from any possible recourse in the United States allowing them to access data concerning them and to obtain its rectification or deletion, and that there is no effective jurisdictional protection against the general right of access of the US authorities. We inform data subjects of this legal and factual situation precisely so that they can make an informed decision as to whether to consent to the use of their data.
We would like to point out to users domiciled in an EU Member State that, according to the European Union, the United States does not have a sufficient level of data protection, particularly in view of the issues raised in this section. Insofar as we have indicated in this data protection declaration that the recipients of the data (e.g. Google) are based in the United States, we cannot guarantee, either by putting in place contractual provisions with these companies or by guaranteeing their certification under the EU-US Privacy Shield agreement, that your data will benefit from an appropriate level of protection with our partners.
You have the right, on request and free of charge, to obtain information about the personal data stored about you. In addition, you have the right to have inaccurate data corrected and your personal data deleted, provided that there is no legal obligation to archive the data and no legal authorisation to process the data. You also have the right, in accordance with Articles 18 and 21 of the GDPR, to request that data processing be restricted or to object to such processing.
You also have the right to ask us again for the data you have sent us (right to data portability). On request, we may also forward the data to a third party of your choice. You have the right to receive the data in a standard file format.
You can contact us for the above purposes at info@summit-foundation.org. If we consider it necessary, we may require you to show proof of identity in order to process your requests.
You can also tell us what should happen to your data after your death by sending us the relevant instructions.
We keep data only to the extent necessary
to use the above-mentioned tracking, advertising and analysis services set up in the context of our legitimate interests;
to carry out the aforementioned services that you have requested or for which you have given your consent (e.g. for the newsletter in accordance with section 8);
to meet our legal obligations.
We retain contractual data for a longer period if this is required by legal data archiving requirements. Our archiving obligations, which include the obligation to retain data, derive from accounting and tax legislation. In accordance with these rules, commercial communications, contracts concluded and accounting documents must be kept for up to 10 years or up to 5 years for users domiciled in France. This data is blocked to the extent that we no longer need it to provide you with the relevant services. This means that they can only be used for accounting and tax purposes.
If you are domiciled in an EU country, you have the right to lodge a complaint with a data protection supervisory authority at any time.
