Privacy Policy
Controller
The controller within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
General note
Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the federal government (Data Protection Act, FADP), everyone has the right to protection of their privacy and protection against the misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Together with our hosting providers, we make every effort to protect the databases as well as possible against unauthorised access, loss, misuse or falsification.
We point out that data transmission over the internet (for example when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.
By using this website, you consent to the collection, processing and use of data as described below. This website can generally be visited without registration. In the process, data such as the pages accessed or the names of the files retrieved, the date and the time are stored on the server for statistical purposes, without this data being directly related to your person. Personal data, in particular name, address or email address, is collected on a voluntary basis as far as possible. Without your consent, the data is not passed on to third parties.
Processing of personal data
Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing covers any handling of personal data, regardless of the means and procedures applied, in particular the storage, disclosure, obtaining, deletion, recording, modification, destruction and use of personal data.
We process personal data in accordance with Swiss data protection law. In addition, where and insofar as the EU GDPR is applicable, we process personal data on the following legal bases in connection with Art. 6 (1) GDPR:
- lit. a) Processing of personal data with the consent of the data subject.
- lit. b) Processing of personal data to perform a contract with the data subject and to carry out corresponding pre-contractual measures.
- lit. c) Processing of personal data to fulfil a legal obligation to which we are subject under any applicable law of the EU or under any applicable law of a country in which the GDPR applies in whole or in part.
- lit. d) Processing of personal data to protect the vital interests of the data subject or another natural person.
- lit. f) Processing of personal data to safeguard the legitimate interests of us or of third parties, unless the fundamental freedoms, fundamental rights and interests of the data subject prevail. Legitimate interests are in particular our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.
We process personal data for the period necessary for the respective purpose or purposes. Where longer retention obligations apply due to legal and other duties to which we are subject, we restrict the processing accordingly.
What data we collect
When you register for the program
- First and last name
- Email address
- Company or organisation
- Role or function
- Message (voluntary)
When you visit the website
- IP address (anonymised by the hosting provider)
- Browser type and version
- Operating system
- Date and time of access
- Referrer URL, where transmitted
This data is processed automatically by the hosting provider (Vercel Inc., USA) for the purposes of operation, security and performance analysis.
Cookies
This website uses technically necessary cookies and local storage entries for the function of the registration form and the management of your cookie consent. In addition, with your consent, we use Google Analytics 4 (see the separate section further below).
To manage your consents, we operate our own consent banner, which is shown on your first visit. There you can choose between "Accept" and "Decline". Your choice is stored locally in your browser (local storage) and remains until you delete your browser data. You can reset your decision at any time by deleting your browser data.
The legal basis for processing in connection with consents is Art. 6 (1) lit. a and lit. f GDPR. Our legitimate interest is the management of consents and ensuring the function of our service.
SSL / TLS encryption
For security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator, this website uses SSL / TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.
When SSL / TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Third-party services
To process your registration, for invoicing and for the operation of the website, we use the following processors:
| Provider | Purpose | Location |
|---|---|---|
| Airtable, Inc. | Database for registrations and payment status | USA |
| Make (Celonis Inc.) | Automation of the registration and invoicing processes | EU (Czech Republic / Ireland) |
| Microsoft Corporation | Email delivery via Microsoft 365 (info@caaie.ch), storage of invoices on OneDrive | EU data centres |
| Vercel Inc. | Hosting of the website (edge delivery) | USA |
| Google LLC / Google Ireland Limited | Google Fonts (typefaces) and Google Analytics 4 (web analytics, only with consent) | USA / Ireland |
Data processing agreements are in place with all providers. Transfers to third countries (in particular to the USA) take place on the basis of the European Commission's standard contractual clauses and the EU-U.S. Data Privacy Framework (where the relevant providers are certified).
Privacy policy for the registration form
When you send us your data via the registration form, your details are stored with us for the purpose of processing the registration, invoicing and in case of follow-up questions. We do not pass this data on without your consent, except to the processors named above (Airtable, Make, Microsoft 365), insofar as this is necessary to handle your participation.
Google Fonts
To display fonts consistently, this website uses what are known as web fonts, provided by Google. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. If your browser does not support web fonts, a standard font from your computer is used.
You can find more information about Google Fonts at developers.google.com/fonts/faq and in Google's privacy policy: policies.google.com/privacy.
Google Analytics
With your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited. Where the controller for the data processing is located outside the European Economic Area or Switzerland, the Google Analytics data processing is carried out by Google LLC.
Google Analytics is integrated on this website with Consent Mode v2. This means: as long as you have not consented to the data processing (via our consent banner), no analytics cookies are set and no personally identifiable data is transmitted. Only after your consent is anonymised usage data collected (with IP anonymisation via "anonymize_ip").
The statistics obtained allow us to improve our service and make it more interesting for you as a user. The legal basis for the use of Google Analytics with consent is Art. 6 (1) lit. a GDPR.
Data transfers to the USA take place on the basis of the EU-U.S. Data Privacy Framework, which Google has joined as a certified participant. Further information on the Google Analytics privacy policy: policies.google.com/privacy.
You can withdraw your consent at any time by deleting your browser cookies or the local storage of this website. On your next visit, the consent banner will appear again. In addition, you can generally prevent collection by Google Analytics by installing the browser add-on to deactivate Google Analytics: tools.google.com/dlpage/gaoptout.
Retention period
Registration and invoicing data is retained in accordance with the statutory retention obligation (10 years under the Swiss Code of Obligations) and deleted thereafter. Technical log data is deleted after 30 days at the latest, unless security-related reasons prevent this.
Rights of data subjects
Right to confirmation
Every data subject has the right to obtain from the operator of the website confirmation as to whether personal data concerning them is being processed. If you wish to exercise this right to confirmation, you can contact the data protection officer at any time.
Right of access
Every data subject affected by the processing of personal data has the right to obtain, at any time and free of charge, from the operator of this website information about the personal data stored about them and a copy of this information. Furthermore, information may be provided about the following, where applicable:
- the purposes of processing
- the categories of personal data being processed
- the recipients to whom the personal data has been or will be disclosed
- where possible, the envisaged period for which the personal data will be stored, or, if this is not possible, the criteria used to determine that period
- the existence of a right to rectify or erase the personal data concerning them, or to restrict processing by the controller, or a right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- where the personal data is not collected from the data subject: all available information about the origin of the data
The data subject also has the right to information as to whether personal data has been transferred to a third country or to an international organisation.
Right to rectification
Every person affected by the processing of personal data has the right to request the immediate rectification of inaccurate personal data concerning them. The data subject also has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary declaration.
Right to erasure (right to be forgotten)
Every person affected by the processing of personal data has the right to request that the controller of this website erase the personal data concerning them without delay, where one of the following grounds applies and insofar as the processing is not necessary:
- The personal data was collected or otherwise processed for purposes for which it is no longer necessary
- The data subject withdraws the consent on which the processing was based and there is no other legal basis for the processing
- The data subject objects to the processing on grounds relating to their particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to processing in the case of direct marketing and related profiling
- The personal data was processed unlawfully
- The erasure of the personal data is necessary to fulfil a legal obligation under EU law or the law of the member states to which the controller is subject
- The personal data was collected in relation to information society services offered directly to a child
Right to restriction of processing
Every person affected by the processing of personal data has the right to request that the controller of this website restrict the processing where one of the following conditions applies:
- The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data
- The processing is unlawful, the data subject opposes the erasure of the personal data and requests instead the restriction of its use
- The controller no longer needs the personal data for the purposes of the processing, but the data subject needs it for the establishment, exercise or defence of legal claims
- The data subject has objected to the processing on grounds relating to their particular situation, pending verification of whether the controller's legitimate grounds override those of the data subject
Right to data portability
Every person affected by the processing of personal data has the right to receive the personal data concerning them in a structured, commonly used and machine-readable format. They also have the right to have this data transmitted to another controller where the legal conditions are met.
The data subject further has the right to have the personal data transmitted directly from one controller to another, where this is technically feasible and provided that the rights and freedoms of others are not adversely affected.
Right to object
Every person affected by the processing of personal data has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them.
In the event of an objection, the operator of this website no longer processes the personal data, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or where the processing serves the establishment, exercise or defence of legal claims.
Right to withdraw consent under data protection law
Every person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time. The withdrawal does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.
Right to lodge a complaint with the supervisory authority
You have the right to complain to the Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch. To exercise all of the aforementioned rights, an email to info@caaie.ch is sufficient.
Objection to advertising emails
The use of contact data published as part of the imprint obligation to send advertising and information material that has not been expressly requested is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam emails.
Copyright
The copyright and all other rights to content, images, photos or other files on the website belong exclusively to the operator of this website or to the specifically named rights holders. Written consent from the copyright holder must be obtained in advance for the reproduction of any files.
Anyone who commits a copyright infringement without the consent of the respective rights holder may be liable to prosecution and, where applicable, to claims for damages.
General disclaimer
All information in our online offering has been carefully checked. We make every effort to keep our information offering current, correct and complete. Nevertheless, the occurrence of errors cannot be entirely ruled out, which means we cannot guarantee the completeness, accuracy and timeliness of information, including of a journalistic or editorial nature. Liability claims for damages of a material or immaterial nature caused by the use of the information offered are excluded, unless there is demonstrably intentional or grossly negligent fault.
The publisher may, at its own discretion and without notice, change or delete texts and is not obliged to update the content of this website. Use of or access to this website is at the visitor's own risk. The publisher, its clients or partners are not responsible for any damage, such as direct, indirect, incidental, consequential or specifically determinable damage, allegedly caused by visiting this website, and therefore accept no liability for it.
The publisher likewise accepts no responsibility or liability for the content and availability of third-party websites that can be reached via external links on this website. The operators of the linked pages are solely responsible for their content. The publisher therefore expressly distances itself from all third-party content that may be relevant under criminal or liability law or that violates accepted standards of decency.
Changes
We may amend this privacy policy at any time without prior notice. The version currently published on our website applies. Where the privacy policy is part of an agreement with you, we will inform you of any update by email or in another suitable way.
Questions for the data protection officer
If you have questions about data protection, please send us an email at info@caaie.ch or contact the person responsible for data protection in our organisation listed at the beginning of this privacy policy.
Schindellegi, 20.04.2026