Recognised official federal institution EFCS & WFCS

Privacy Policy

Privacy Policy of the website of the Swiss Federation for Physical Activity and Company Sport (SAW). Legal basis: revised Federal Act on Data Protection (revFADP, SR 235.1), in force since 1 September 2023.

1. Controller

This privacy policy is established by:

ControllerSwiss Active Workplace (SAW) — Swiss Federation for Physical Activity and Company Sport
Host organisationAssociation Evaleo, governed by Swiss law
UID numberCHE-354.027.705 (Association Evaleo)
HeadquartersRue du Crêt-de-la-Fin 12, 2024 St-Aubin-Sauges, Switzerland
Contactinfo@saw-federation.ch

This entity decides how personal data linked to the website is processed. For any questions regarding the protection of your data, you can contact it at the address indicated above.

2. Scope of this policy

This policy applies to the SAW Federation website (presentation site — « site vitrine »). It informs you transparently about:

  • which personal data may be processed when you visit the site or contact the Federation;
  • why this data is processed;
  • where it is processed and stored;
  • what your rights are and how to exercise them.

3. What data is processed?

The site is a static presentation site: it has no user accounts, no database and no personal area. Data processing is therefore limited.

3.1 Contact by email (mailto: forms)

The site's contact forms and buttons (information request, event registration, newsletter sign-up, membership) open your email client with a pre-filled address: info@saw-federation.ch.

  • The site itself collects and stores no data: no data is recorded on the site's server when you use these forms.
  • Your message (and the information you enter in it — for example your name, your email address, your company name) passes through your own email provider and then arrives in the Federation's inbox.
  • This data is then processed solely to respond to your request (information, registration, membership, follow-up of the relationship with your company).

3.2 Technical data — server logs (« logs »)

When you visit the site, the web server (nginx) automatically records technical information:

  • IP address;
  • date and time of the request;
  • page requested (URL);
  • browser and operating system (« user-agent »);
  • HTTP response code.

These logs are used solely to ensure the proper functioning and security of the site (monitoring, troubleshooting, protection against abuse). They are not cross-referenced with other data and not used to create individual profiles.

3.3 Cookies and audience measurement tools

  • The site uses no tracking cookies and no audience measurement tools (such as Google Analytics). This point was confirmed by the Federation on 5 October 2026: no analytics tool or tracking cookie is installed to date.
  • The site works without placing cookies on your device.
  • If audience measurement tools or third-party services were added in the future, this policy would be updated before their activation and, where appropriate, a consent mechanism would be put in place.

4. Why is this data processed?

DataPurpose
Content of emails sent to the FederationRespond to your requests, manage registrations and memberships, follow up the relationship
Technical data (server logs)Operation, stability and security of the site

This processing is based on the Federation's legitimate interest in communicating about its activities, responding to its contacts and maintaining a secure website.

5. Where is your data processed?

The site is hosted by Infomaniak Network SA (Geneva, Switzerland), a Swiss hosting provider. The server's technical logs are stored on this infrastructure, in Switzerland.

Emails addressed to the Federation are processed in its professional mailbox, with due respect for the confidentiality of exchanges.

6. Transfers outside Switzerland

To date, your data is not transmitted outside Switzerland. The entire site infrastructure (hosting, log storage) is located in Switzerland.

If a transfer of data abroad were to be set up in the future, it could only take place in compliance with the revFADP (Art. 16 and 17), with appropriate safeguards, and this policy would be updated.

7. How long is your data retained?

DataRetention period
Server logs (nginx logs)30 days (duration recommended by legal counsel), then deletion or anonymisation
Emails received by the FederationFor the time taken to process your request and follow up the relationship, then archiving or deletion within 12 months (duration recommended by legal counsel)

📌 The periods above are the periods recommended by our legal counsel, at the Federation's request.

Data is only retained beyond this if a legal obligation requires it or if it is necessary for the defence of rights.

8. How is your data protected?

The Federation and its hosting provider implement appropriate technical and organisational measures to protect your data against loss, unauthorised access and unlawful disclosure, in accordance with Art. 8 revFADP:

  • hosting in Switzerland with a professional provider (Infomaniak);
  • access control to the servers and the Federation's inbox;
  • regular security updates;
  • minimisation of the data collected (the site collects only what is strictly necessary).

9. Your rights

9.1 Rights under the revFADP (Art. 25 to 29)

You notably have the right to:

  • request access to the personal data about you processed by the Federation (Art. 25);
  • request the correction of inaccurate data (Art. 26);
  • request the deletion of data where its processing is no longer necessary or is unlawful (Art. 27);
  • object to processing (Art. 28) or request its restriction;
  • request the delivery of certain data in a standard format where processing is automated and you have given your consent or the data is necessary for the performance of a contract (Art. 28, portability);
  • withdraw your consent at any time where processing is based on it.

9.2 Persons located in the European Union

The Federation maintains links with European partners (EFCS, WFCS, member companies). For persons located in the European Union, the equivalent rights provided for by the GDPR (access, rectification, erasure, objection, portability, withdrawal of consent) also apply.

9.3 How to exercise your rights

To exercise any of these rights, send your request to:

📧 info@saw-federation.ch

In order to protect the persons concerned, the Federation may ask you for proof of identity. Requests are processed as quickly as possible.

10. Complaint to a supervisory authority

If you consider that the processing of your data does not comply with data protection legislation, you may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC):

11. Updates to this policy

This privacy policy may be adapted, for example to reflect an evolution of the site, the services offered or the legislation. The version published on the site is the version in force.

Date of last update: 5 October 2026.

12. Contact

For any questions regarding this policy or the processing of your data:

Swiss Active Workplace (SAW) — Swiss Federation for Physical Activity and Company Sport
📧 info@saw-federation.ch

Legal notice

Find the site's imprint, publisher and hosting provider in our Legal notice (imprint).

Last updated: 5 October 2026.