Privacy policy

What data the club processes, why, and what rights members have.

1. Controller

2. What data is processed

• Name, address, date of birth, phone number and e-mail address
• Type of membership, car (make, model, year) or recommending member
• Username and password (stored as a hash, never in clear text)
• Event registrations and attendance
• Fees, invoices and payment status
• Photos of club activities, as far as used under Art. 11 of the club rules

3. Why

To establish and run the membership, organise events, issue invoices and collect fees, and to communicate with members. The basis is the contract with the member (Art. 31 para. 2 lit. a of the Swiss Data Protection Act) and, for accounting, the statutory retention duty.

4. Who else sees the data

• Stripe (Stripe Payments Europe, Ireland, with processing also in the United States): name, e-mail address, invoice data and payment status, as processor for payments. Card details are processed by Stripe only, never by the club.
• Infomaniak (Switzerland): hosting of the website and the database.

Data is not passed on for advertising and is never sold.

5. How long

Member data for the duration of the membership and afterwards as far as needed to wind it up. Invoices and payment records for ten years, as the statutory retention duty requires. After that the data is deleted or anonymised.

6. Cookies

The website sets only one technically necessary session cookie for the members' area. There is no tracking and no third-party analytics.

7. Visit counting

The club counts for itself how often its pages are read. This happens without cookies, without recognising anyone beyond the day and without a third-party service: there is no Google Analytics and no other provider reading along. What is kept, per day and per page, is the number of views, the referring site in rough form (Instagram, Google or direct, for example), the language, and whether the visit came from a phone or from a computer.

The IP address is not stored. So that two views on the same day can be recognised as coming from the same person, a checksum of sixteen characters is formed from the address, the browser identification and a key that changes every night. The key is deleted after two days, and after that the checksum can no longer be matched to any address. Daily figures are condensed into monthly totals after thirteen months.

8. Members' rights

Every member may ask what data is held, have it corrected or deleted, and ask for it in a common format, as far as the law provides. An e-mail to club@ladiesonwheels.ch is enough. Complaints may be addressed to the Swiss Federal Data Protection and Information Commissioner (FDPIC).

9. Changes

This policy may be adapted. The version published on this page applies.