1. Data Controller
The controller responsible for data processing under the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR) is:
Brain and Trauma Foundation Grison
Schulstrasse 1
CH-7302 Landquart, Switzerland
Phone: +41 81 322 28 28
Email: info@gtsg.ch
2. Server log data
When you visit this website our hosting provider collects standard access data in server log files (IP address, timestamp, page requested, referrer, browser identifier). This data is used for the technical operation of the website and to detect misuse. The legal basis is our legitimate interest in secure operation. Storage is limited to a few weeks at most.
3. Contact and registration forms
We use the form plugin WPForms for our contact form and workshop/course registration forms. Depending on the form, we collect name, email address, postal address, message content, and further course-related details for registrations. The data is used to respond to your inquiry or process your registration and is stored in our WordPress database. The legal basis is the initiation or performance of a pre-contractual relationship as well as our legitimate interest in responding to inquiries. Data is deleted as soon as it is no longer required, at the latest after any applicable statutory retention periods.
4. Newsletter
When you subscribe to our newsletter we collect your email address and optionally your name. Delivery is based on your explicit consent, which you may withdraw at any time (unsubscribe link in every newsletter email). We use the WordPress newsletter plugin together with the email delivery services listed below.
5. Email delivery
For reliable delivery of transactional emails (registration confirmations, form notifications) we use SendLayer (provider: SendLayer LLC, USA) as our primary sender and Brevo (provider: Sendinblue SAS, France) as a backup. Sender and recipient data as well as the content of the respective email are transmitted in this process. Transfers to SendLayer in the USA are based on the EU Standard Contractual Clauses.
6. Backups
We use UpdraftPlus for backups. Backups are stored encrypted at Dropbox (provider: Dropbox Inc., USA). The transfer is based on our legitimate interest in data protection through backups and on the EU Standard Contractual Clauses.
7. Hosting
Our website is hosted by Webland AG, Balz-Zimmermann-Strasse 34, 8302 Kloten, Switzerland. Servers are located in Switzerland.
8. Cookies and local storage
We use technically necessary cookies to enable basic functions (e.g. language selection, form processing). These cookies are set on the basis of our legitimate interest in the proper operation of the website. We currently do not use tracking or marketing cookies.
9. Embedded content and external services
To display external RSS content we use the Feedzy plugin. For preparing social media posts we use Blog2Social. Both services process only data intended for public sharing.
10. International data transfers
As described above, personal data may be transferred to the USA in individual cases (email delivery via SendLayer, backups via Dropbox). We have entered into the EU Standard Contractual Clauses with these providers or rely on their corresponding contractual assurances.
11. Your rights
You have the right to obtain information about the personal data we hold about you, to have inaccurate data corrected, to have data deleted, to restrict processing, to data portability, and to object to certain forms of processing. Consents that have been granted (e.g. newsletter) can be withdrawn at any time with effect for the future. Please contact us at the address given above. You also have the right to lodge a complaint with the competent supervisory authority (in Switzerland: Federal Data Protection and Information Commissioner FDPIC).
12. Changes to this privacy policy
We reserve the right to update this privacy policy in order to reflect changes to the legal framework or to our services. The version published on this page is always the applicable one.
Version: July 2026