Privacy Policy for the Processing of Personal Data on the Website www.biodivearth.org In accordance with Article 19 of the FADP and Article 13 of Regulation (EU) 2016/679 (GDPR).
In accordance with Article 19 of the Federal Act on Data Protection (FADP) and Article 13 of Regulation (EU) 2016/679 (GDPR), we provide you with the necessary information regarding the processing of personal data collected during your experience on our website www.biodivearth.org
The personal data you provide – or that is otherwise obtained in accordance with the applicable legal and contractual provisions – will be processed in connection with the evaluation of your experience on our website. This processing will be carried out in full compliance with privacy regulations and the confidentiality obligations that apply to you.
Personal data: Any information relating to an identified or identifiable person. In particular, we will process the following personal data: browsing data (for more information on data collected through cookies, please read the Cookie Policy), personal identification data, contact information.
Data subjects: Individuals whose data are subject to processing (hereinafter referred to as “You”).
Processing: Any operation related to personal data, regardless of the means and procedures adopted, including the collection, storage, use, revision, communication, archiving, or destruction of data.
Communication: Making personal data accessible. For example, by enabling access, transmission, or publication.
The entity that determines the purposes and means of the processing (hereinafter referred to as the “Data Controller” or “we”) is BiodivEarth, a non-governmental organization under Swiss law with its registered office in Le Petit-Essert 1, 1147 Montricher, Canton of Vaud, Switzerland. BiodivEarth c/o Paule Gros provides another address for the receipt of documents at Chemin d’Echenoz 2, 1147 Montricher, Canton of Vaud, Switzerland.
A) Purpose of processing: Indispensable activities for the user’s navigation on this website and to ensure its proper functioning.
The IT systems that operate this website collect certain personal data during normal operation. The data transmission is implicit in the use of Internet communication protocols.
This includes IP addresses or domain names of users’ computers and devices, URI/URL addresses of requested resources, the time of the request, the method used to send the request to the server, the file size received in response, the numeric code indicating the server’s response status (success, error, etc.), and other parameters related to the user’s operating system and environment.
Legal basis: Overriding legitimate Interest of the Data Controller | Legitimate Interest of the Data Controller.
Data retention period: The data will be retained until the end of the browsing session.
For data processed with cookies, please refer to our Cookie Policy.
Nature of the data provision: The provision of data is necessary for browsing the website.
B) Purpose of processing: To obtain anonymous statistical information about the use of the site.
Legal basis: Overriding legitimate Interest of the Data Controller | Legitimate Interest of the Data Controller.
Data retention period: Please refer to our Cookie Policy.
Nature of the data provision: The provision of data is necessary for browsing the website.
C) Purpose of processing: Responding to requests received through the “Contact” section available on the website.
Legal basis: Legitimate interest of the Data Controller.
Data retention period: The data will be retained for a maximum of 12 months if the request does not lead to an established work relationship. In this latter case, the data may be retained for up to 10 years.
Nature of the data provision: The provision of data is necessary to achieve this purpose.
The processing will be conducted both automatically and manually, using methods and tools designed to ensure the highest level of security and confidentiality, carried out by individuals specifically trained for this purpose. The personal data collected will be retained in a form that allows the identification of data subjects only for as long as necessary to fulfil the purposes for which the data was collected.
We may share personal data with duly trained employees acting under the authority of the Data Controller. We may also share data with third parties bound to the Data Controller by contractual relationships, to fulfil contractual obligations and pursue one or more of the purposes described above. These third parties will process the data either as data processors or as independent data controllers.
Specifically, we may share the collected personal data with the following categories of recipients:
- providers of services related to the operation of this website (e.g., hosting providers, webmasters).
- support and consulting companies (e.g., web and digital marketing agencies).
- competent authorities, where required to comply with legal obligations and/or requests from public bodies.
The website is hosted in Switzerland; therefore, the data will not be transferred abroad.
Under the FADP, you are entitled to the following rights:
- Right to obtain the rectification of inaccurate or outdated personal data.
- Right to be informed in written form and free of charge if your personal data is being processed.
- Right to prevent the disclosure of any sensitive personal data to third parties.
- Right to request the portability of your personal data or ask for it to be transferred to third parties.
- Right to request the restriction or blocking of data processing, prevent the disclosure of data to third parties, or request the correction or deletion of personal data.
- Right to request the prohibition of a specific personal data processing or the disclosure of personal data to third parties, or the deletion or destruction of certain personal data.
- If the accuracy or inaccuracy of the personal data cannot be proven, the right to request the addition of a note indicating the dispute.
- Right to request that the rectification, destruction, blocking, or particularly the communication to third parties, as well as the dispute note or ruling, be communicated to third parties or published.
- Right to have declared the unlawfulness of a personal data processing.
Under the GDPR, you are entitled to the following rights:
- Right to obtain from the Data Controller confirmation as to whether personal data concerning you is being processed, and if so, to access the personal data.
- Right to obtain from the Data Controller the rectification of inaccurate personal data concerning you.
- Right to obtain from the Data Controller the erasure of personal data concerning you.
- Right to obtain from the Data Controller the limitation/restriction of the processing of personal data.
- Right to receive personal data concerning you, provided to a Data Controller, in a structured, commonly used, and readable format, and to transfer that data to another Data Controller without any obstruction from the original Data Controller.
- Right to object at any time, on grounds relating to your situation, to the processing of personal data concerning you.
Without prejudice to any other administrative or judicial remedy, if the user believes that the processing of their personal data violates the provisions of the FADP and the GDPR, they have the right to file a complaint with the competent supervisory authority (For Switzerland: Federal Data Protection and Information Commissioner (FDPIC); for the European Economic Area, the website of the European Data Protection Board can be consulted here: https://edpb.europa.eu/about-edpb/about-edpb/members_en).
The user can exercise its rights under the FADP and GDPR (as applicable) by addressing the following contact in charge of privacy matters: paulegros@biodivearth.org.
The Data Controller reserves the right to review, update, add, or remove any part of this privacy notice at their discretion at any time. In the event of changes, the update date will be indicated.
Last Update: Wednesday, the 11th of February 2026