All data provided on this website is supplied for informational purposes only. Under no circumstances does it constitute legal advice from Summit Foundation. Summit Foundation assumes no liability for the accuracy, completeness or timeliness of the information published on this site.

This website contains links to third-party sites over which Summit Foundation has no influence, either with regard to accuracy, legality or content.
Summit Foundation assumes no liability for the content, completeness or legality of third-party pages accessible via these links.

Summit Foundation is the operator of the website accessible at the address https://summit-foundation.org and the controller responsible for processing personal data collected via this site.

We take the protection of your data very seriously and process it confidentially, in accordance with:

• the Swiss Federal Act on Data Protection (FADP) and its Ordinance (DPO); ;

• the Swiss Telecommunications Act (TCA); ;

• and, where applicable, the European Union’s General Data Protection Regulation (GDPR).

This privacy policy explains what personal data we collect, for what purposes, and what your rights are.

Each time our site is accessed, our servers temporarily record certain data in log files. The following data may be collected automatically and retained for a maximum of twelve months:

• IP address of the computer or device accessing the site; ;

• date and time of access; ;

• URL of the file accessed; ;

• website from which access was made (referrer); ;

• browser type and operating system used; ;

• country from which access was made and browser language settings; ;

• name of the Internet service provider.

This data is processed in order to:

• enable use of the site (establishing communication); ;

• ensure system security and stability; ;

• continuously improve our online offering; ;

• compile internal statistics (in anonymised or pseudonymised form).

This processing is based on our legitimate interest within the meaning of Art. 6(1)(f) GDPR, as well as on the legal bases of the FADP.

During your visit, we also use cookies and possibly tracking pixels to measure site audience and personalise certain features. You will find more information on this in sections 6 and 7.

You may contact us via a contact form. The following personal data is generally required and indicated as mandatory:

• first name and surname; ;

• email address.

Without this information, we may not be able to process your request properly. Providing other data (e.g. organisation, telephone number, free-text message) is optional.

We use this data solely to process your request and respond to it on a personalised basis.
The processing is based on our legitimate interest in responding to your requests (Art. 6(1)(f) GDPR) and, where applicable, on your consent.

You may object to this processing at any time (see section 10).

You may subscribe to our newsletter via our site. The following data is then generally collected:

• first name and surname; ;

• email address.

Additional information, such as the name of your school or organisation, may be requested on an optional basis in order to better target the newsletter content.

By subscribing, you consent to our using this data to:

• send you our newsletter regularly to the address provided; ;

• analyse, statistically and in anonymised or pseudonymised form, the newsletter’s performance (open rate, clicks, etc.); ;

• adapt and optimise our content.

The legal basis for this processing is your consent (Art. 6(1)(a) GDPR).

You may withdraw this consent at any time by unsubscribing via the link provided for this purpose at the bottom of each email. After unsubscribing, your data is deleted or anonymised, subject to statutory retention obligations.

We draw your attention to the fact that we use the services of an external provider for sending and managing the newsletter (see sections 3 and 8).

Our site may offer forms or links enabling you to:

• register for events (e.g. Clean-Up Tour); ;

• make a donation or purchase a product; ;

• request specific information or services.

In some cases, these services are provided directly by third-party partners (e.g. ticketing, donation or online payment platforms, or external registration forms). You will be informed of this at the time of collection.

Depending on the service, the following data may be collected:

• first name and surname; ;

• school/organisation; ;

• postal address (postcode, town/city, country); ;

• email address; ;

• telephone number; ;

• number of participants; ;

• information relating to your donation or order (amount, currency, payment method, etc.).

We indicate which data is mandatory. Without this data, providing the service (registration, invoice, donation, order) may not be possible.

The data entered is either collected directly by the relevant partner or transmitted by Summit Foundation to the partner where this is necessary to provide the service. In such cases, the data protection provisions of the relevant partner apply to further processing.

The legal basis for this processing is the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) and, where applicable, your consent.

We do not carry out detailed profiling for commercial purposes and do not sell your data.

We may, however, use your data:

• to inform you of our activities, projects, and events; ;

• to send you targeted communications (for example, based on your past participation in an event or your profile: school, public authority, company, etc.); ;

• and, on an occasional basis, to measure the effectiveness of our campaigns (aggregate statistics).

Where required by law, such processing is based on your consent. In other cases (communication with our donors, partners, participants in our initiatives), it is based on our legitimate interest in promoting the foundation’s activities.

You may object at any time to the use of your data for such purposes (for example, by unsubscribing from the newsletter or by contacting us; see section 10).

(Note: we no longer describe intensive advertising «re-targeting» campaigns or the use of Google AdWords Remarketing here, as these mechanisms are not systematically used by Summit Foundation. Should you implement this type of campaign at a later date, this point will need to be revised accordingly.)

We only disclose your personal data to third parties in the following cases:

• where you have given your explicit consent; ;

• where a legal obligation requires it (e.g., to public authorities); ;

• where it is necessary to protect our rights, for example, to assert or defend legal claims; ;

• where it is necessary to provide a service you have requested (e.g., website hosting provider, newsletter distribution tool, payment or donation platform, event registration tool).

The service providers we engage (hosting, emailing, online forms, analytics tools, etc.) process data solely on our instructions and under a data processing agreement compliant with applicable law.

When you click on a link to a third-party website, Summit Foundation no longer has control over the collection, processing, and use of your data by that third party. We disclaim all liability in this regard. We recommend that you consult the privacy policy of the website concerned.

In certain cases, your personal data may be transferred to service providers located abroad (e.g., emailing or analytics tools, certain hosting providers or form services).

We ensure in such cases that:

• the destination country offers a level of data protection deemed adequate by Switzerland and/or the EU; or

• appropriate safeguards are put in place, such as the European Commission’s standard contractual clauses or contractual clauses approved by the Swiss Federal Data Protection and Information Commissioner (FDPIC).

These providers are contractually bound by the same security and confidentiality requirements as we are.

We implement appropriate technical and organizational measures to protect your personal data against:

• loss; ;

• destruction; ;

• alteration; ;

• unauthorized disclosure or access.

These measures are continuously adapted in line with evolving risks and technology.

Our employees and our service providers are subject to a duty of confidentiality and compliance with applicable data protection laws.

Cookies are small text files placed on your device when you visit our website. They are used in particular to:

• ensure the proper functioning of the website (strictly necessary cookies); ;

• record certain preferences (e.g., language, cookie acceptance); ;

• improve the usability and performance of the website; ;

• analyze, in anonymized or pseudonymized form, website traffic.

Cookies do not damage your device and do not, by themselves, allow you to be directly identified.

You may configure your browser at any time to:

• inform you when a cookie is being created; ;

• accept cookies only on a case-by-case basis; ;

• refuse the acceptance of cookies generally; ;

• delete existing cookies.

Disabling cookies may limit certain functionalities of our website.
Our cookie banner also allows you to set your preferences directly when you visit.

We use audience measurement tools provided by third parties (e.g., Google Analytics or equivalent solutions) to better understand how our website is used and to continuously improve our content.

These tools may use cookies or similar technologies to collect anonymized or pseudonymized information, such as:

• pages viewed; ;

• duration of visit; ;

• browser and device type; ;

• approximate region of connection.

The information generated may be transmitted to the provider’s servers, which may be located abroad (see section 4 for the safeguards put in place).

We use this data solely for statistical purposes and in an aggregated form; no individual automated decision is made on this basis.

Depending on the tool used, you may object to the tracking (e.g., via a browser add-on or via the cookie settings on our website).

To send our newsletter, we use a specialized email marketing service provider. For this purpose, our newsletter may contain:

• a web beacon (tracking pixel); ;

• or similar technology enabling analysis of email opens and clicks on links.

The information collected (e.g., open rate, clicks, device used) is used exclusively:

• for statistical purposes; ;

• to tailor the content of the newsletter; ;

• to improve its relevance.

This processing is based on our legitimate interest in optimizing our communication with our subscribers.
You may at any time refuse this analysis by unsubscribing from the newsletter or by configuring your email software so that images are not loaded automatically.

We retain your personal data only for the period necessary:

• for the use of the tracking, communication or analysis tools described above, in the context of our legitimate interests; ;

• for the provision of the services you have requested or for which you have given your consent (e.g. registration for an event, sending of newsletters); ;

• for compliance with our legal obligations (e.g. retention periods for accounting or tax purposes).

Contractual data (donations, invoices, accounting, etc.) are retained for as long as required by legal retention periods. In Switzerland, these periods are generally 10 years.

When the data are no longer necessary for the intended purposes, they are deleted or anonymized. Data that must be retained for legal reasons are «blocked» and are only used for the purposes provided by law (accounting, taxation, evidentiary requirements).

You have in particular the following rights, within the limits provided by applicable law:

• Right of access : to obtain information about the personal data we process concerning you.

• Right to rectification : to request the correction of inaccurate or incomplete data.

• Right to erasure : to request the deletion of your data, where this is possible and does not contravene legal retention obligations.

• Right to restriction of processing : to request the restriction of processing in certain cases (e.g. when the accuracy of the data is contested).

• Right to object : to object to certain processing based on our legitimate interest, in particular with regard to prospecting.

• Right to data portability (if applicable) : to receive the data you have provided to us, in a structured, commonly used and machine-readable format, or to request their transmission to another data controller.

To exercise these rights or for any question relating to data protection, you may contact us at the following address:

Summit Foundation
Quai Perdonnet 23
CH-1800 Vevey
E-mail: info@summit.ngo

We may, where necessary, ask you for proof of identity in order to process your request.

You may also inform us of what should be done with your data after your death, within the framework of applicable legal provisions.

If you believe that the processing of your personal data does not comply with applicable data protection laws, you have the right:

• in Switzerland, to contact the Federal Data Protection and Information Commissioner (FDPIC); ;

• if you reside in an EU member state, to lodge a complaint with the competent supervisory authority of your country of residence.

We may amend this privacy policy at any time to reflect changes to our website, our services or applicable legislation.

The version published on our website is authoritative. The date of the last update appears at the top of this document.