Privacy policy

Your trust is the foundation of our work. This notice explains, in plain words, which personal data we process, why we do it and what rights you have. We follow the revised Swiss Federal Act on Data Protection (nFADP, in force since 1 September 2023).

1. Who is responsible for your data

The data controller is:

Associazione SosForAll Via Merlina 28, 6962 Viganello (Lugano) — Switzerland UID: CHE-142.641.375 Privacy contact: info@sosforall.ch

For any question about your data, write to this address.

2. Which data we process and why

a) Browsing the website

The site is hosted by Infomaniak (Switzerland). Like every hosting provider, Infomaniak keeps technical server logs (IP address, date and time, requested page) needed for security and operation. We do not use them to identify you.

This website runs no analytics, no advertising and no tracking tools. We build no visitor profiles.

b) Contact and application forms

If you fill in the contact form or the volunteer application form, we process:

• the data you enter yourself: name, e-mail and — for applications — optional phone, address, country, role and the documents you attach (CV, motivation letter, any diplomas);
• your IP address, collected automatically for the sole purpose of preventing abuse (spam, malicious submissions). Nothing else: no user agent, no geolocation.

Purpose: handling your request or application and preventing misuse of the form. The data travels by encrypted e-mail to the association’s mailbox and is never stored on the website’s server; we keep it only as long as needed (see section 5).

c) Support chat (service in preparation)

Once the support chat is live, conversations will be processed on infrastructure operated for the association. Anonymous use will be possible: no registration, no name required. Before activation we will complete this section with details on the provider, processing location and retention.

d) Donations

Payment data is processed directly by the chosen payment provider (e.g. Stripe, TWINT or your bank) under their own privacy notices. The association never sees or stores card numbers.

3. Recipients and service providers

We never sell or pass on your data. We share it only with the technical providers we need (processors) or where the law requires it:

Provider	Service	Data location
Infomaniak SA, Geneva (Switzerland)	Web hosting and e-mail	Switzerland
Stripe (for card donations)	Payments	per Stripe’s privacy notice
Hostinger (EU/Germany)	Support-chat hosting (not yet active)	EU/Germany

4. Cross-border transfers

Data is processed in Switzerland. Should we use service providers in the European Union in the future (for example chat hosting in Germany), note that Switzerland recognises the EU as providing an adequate level of data protection — such transfers are therefore permitted under the nFADP.

5. How long we keep data

We keep data only as long as necessary for the stated purposes or for legal retention duties. Concretely:

• contact requests: until the request is closed, then deleted;
• volunteer applications: at most 12 months, unless a collaboration starts — in that case the data becomes part of the volunteer’s file.

6. Your rights

Under the nFADP you have the right to:

• know which data we hold about you (right of access);
• have it corrected if inaccurate;
• have it deleted;
• receive the data you provided in a readable, portable format (data portability);
• object to a processing operation or withdraw consent you have given.

To exercise them, write to info@sosforall.ch — we reply within 30 days. You can also contact the Federal Data Protection and Information Commissioner (FDPIC) at any time: www.edoeb.admin.ch.

7. Security

We apply appropriate technical and organisational measures: encrypted connection (HTTPS), access control, collecting only the bare minimum (privacy by design and by default), and a duty of confidentiality for everyone working with us. In the event of a data-security breach posing a relevant risk to the people concerned, we will notify the FDPIC promptly, as the nFADP requires, and inform the affected people where needed.

8. Profiling and automated decisions

This website performs no profiling and makes no automated decisions with effects on individuals.

9. Cookies

This site uses only technical cookies that are necessary for it to work. No tracking, no advertising. In detail:

• Strictly necessary cookies: the site currently sets no cookies of its own; at most, a technical session cookie of the hosting infrastructure may exist.
• Local storage (localStorage): we remember in your browser that you dismissed the cookie notice (cookie-notice), so it doesn’t reappear. It contains no personal data and never leaves your device.
• Functional chat cookies: the support chat (Chatwoot, hosted at chat.sosforall.com) sets a technical identifier so your conversation isn’t lost when you reload the page. It is a functional cookie, set when the widget loads; it is not used to track or profile you.

Swiss law (nFADP and art. 45c TCA) requires informing you about cookies and how to refuse them: you can block or delete cookies at any time in your browser settings (instructions for common browsers). The site remains usable without cookies.

10. Changes to this notice

We may update this notice, for example when the support chat is activated. The version published on this page applies, with the update date shown at the top.