Privacy Policy

1. Controller

2. Data processed when you visit

When the website is accessed, technical data may be processed automatically. This can include the IP address, date and time of access, requested page, referrer, browser and device information, operating system and response status. This data is required to deliver the website, maintain its stability and security, and investigate misuse.

3. Contact by email

If you contact us, we process the information you provide, such as your name, email address, organisation, message and related communication metadata. We use it to answer your enquiry, manage the relationship and, where relevant, prepare or perform agreed services or participation arrangements.

4. Purposes and legal grounds

We process personal data only for legitimate and proportionate purposes, including operating and securing the website, responding to enquiries, maintaining professional relationships and complying with legal obligations. Where the GDPR applies, processing is based as appropriate on our legitimate interests, steps taken at your request before entering into a contract, performance of a contract, compliance with legal obligations or your consent.

5. Hosting and service providers

The website is hosted and delivered using Vercel and its infrastructure partners. We may also use carefully selected providers for email, IT administration and security. These providers process data only to the extent required to perform their services and are contractually bound where required.

6. International data transfers

Service providers may process data in Switzerland, the European Economic Area, the United States or other countries. Where a recipient country does not provide an adequate level of data protection, we rely on recognised safeguards, such as contractual data-protection clauses, or an applicable legal exception.

7. Cookies and analytics

This website does not currently use advertising cookies or audience analytics. Essential technical mechanisms may be used where necessary to deliver and protect the website. If non-essential analytics or similar technologies are introduced, this policy and any required consent mechanism will be updated beforehand.

8. Retention

We retain personal data only for as long as necessary for the purposes described above or as required by law. Technical records are retained in accordance with operational and security requirements. Correspondence may be retained for the duration of the relationship and applicable statutory retention periods.

9. Your rights

Subject to applicable law, you may request information about your personal data and ask for access, correction, deletion, restriction or delivery of certain data. You may object to processing and withdraw consent with effect for the future. Requests can be sent to info@iwf.global. You may also contact the competent data-protection authority.

10. Security and updates

We use appropriate organisational and technical measures to protect personal data. No online transmission is completely risk-free. We may update this policy when our services or legal requirements change. The version published here is the current version.