Privacy Policy

1. General information
Data protection is important to us. We therefore process your personal data with great care and in accordance with the applicable legal requirements. VCHU – Unternehmerinnenverband Schweiz, P.O. Box, 8001 Zurich, Switzerland, processes your personal data for various purposes and provides transparent information about this processing below. „Personal data“ means any information that can be linked to an identified or identifiable natural person. „Processing“ covers any handling of personal data, e.g. collecting, disclosing, storing, deleting, etc.

Please read this entire privacy policy carefully. It explains how and why we process your personal data and what rights you have in connection with this processing.

This privacy policy is based on the Swiss Federal Act on Data Protection (FADP). It is also based on the EU General Data Protection Regulation (GDPR). Whether the GDPR applies at all depends on the individual case.

Who does this privacy policy apply to, and when?

• if you are a member of VCHU or have a contractual relationship with us
• visitors to our website www.vchu.ch
• if you receive information or marketing communications from us
• if you subscribe to our newsletter
• if you interact with us in the context of other data processing related to our offerings

2. Responsibility
The company or association that determines the purpose and means of processing personal data is responsible for that processing. For the data processing described in this privacy policy, the following entity is the „controller“ within the meaning of the FADP, i.e. the entity responsible under data protection law, unless otherwise communicated in a specific case (identity):

VCHU – Unternehmerinnenverband Schweiz, P.O. Box, 8001 Zurich, Switzerland

If you have any concerns or questions regarding data protection, you can contact us at: info@vchu.ch

3. Personal data processed
Depending on the purpose, we process different categories of personal data. For contractual partners that are companies, we process less personal data; here we mainly process data of contact persons (e.g. name, email address, position, communication data). You provide much of the following personal data to us yourself, although you are generally not obliged to do so. If you provide us with data about other persons, we assume that you are authorised to do so and that the data is correct. You confirm this automatically when you transmit data of such third parties to us. Please ensure that the third parties concerned have been made aware of this privacy policy.

3.1. Basic data and contact information
Basic data and contact information relate directly to you and your characteristics (e.g. so that we can contact you). For example, we process the following basic data:

• surname, first name
• email address

We receive this master data directly from you. Under certain conditions, however, we may also obtain personal data from third parties, such as our contractual partners, associations and address brokers, and from publicly accessible sources such as the internet.

3.2. Communication data
Communication data is data generated in connection with our communication with you, for example:

• contact details such as postal address, email address and telephone number
• the content of all correspondence
• information on the type, time and other metadata of the communication

3.3. Location data and technical data
When you visit our website, technical data is collected. This includes, for example:

• location and traffic data
• IP address of the device and device ID
• information about your device and its operating system
• information about your internet service provider
• content accessed, or logs recording the use of our systems
• date and time of access to the website

4. Purposes of our data processing
Where permitted, we process your personal data for various purposes in which we have a corresponding legitimate interest:

• for marketing and information purposes (e.g. so that we can inform you about offers or new activities in line with your personal interests)
• to administer memberships and maintain member relationships

5. Data processing in connection with social media and the newsletter
If you contact us via our LinkedIn profile, comment on content or share posts, we collect information that we may use, for example, for marketing purposes. LinkedIn also collects data itself when you visit our profile. Further information on data processing by LinkedIn can be found in its privacy policy.

On our website, we offer you the option of subscribing to our newsletter via SwissNewsletter. For this purpose, your details (e.g. name, email address) are transmitted to SwissNewsletter and processed there for sending the newsletter. Further information on data processing by SwissNewsletter can be found in its privacy policy. You can unsubscribe from the newsletter at any time via the unsubscribe link in each issue or by notifying us.

You may address requests for information and other data subject requests relating to LinkedIn or SwissNewsletter directly to the provider concerned.

6. Disclosure of data to other companies and other recipients
We disclose your personal data to service providers. This applies in particular to IT service providers but may, where necessary, also include analytics service providers, marketing service providers, etc. Insofar as these service providers process personal data as processors, they are obliged to process personal data exclusively in accordance with our instructions and to take data security measures. Data may also be disclosed to other recipients, e.g. to courts and authorities in the context of legal proceedings.

In individual cases, we may also pass on personal data to other third parties for their own purposes, e.g. if you have given us your consent to do so or if we are legally obliged or entitled to do so.

7. Duration of data processing
We store and process your personal data for as long as is necessary for the purpose of processing (for membership-related data, this is normally the duration of the membership), for as long as we have a legitimate interest in storing the data (e.g. to enforce legal claims or to ensure IT security), and for as long as the data is subject to a statutory retention obligation. We destroy or anonymise your personal data once the storage or processing period has expired, unless legal or contractual obligations prevent this.

8. Legal bases for data processing under the GDPR
In some cases, data processing is only permitted if the applicable law specifically allows it. This is not the case under Swiss data protection law, but it is under the EU GDPR, insofar as it applies. In that case, we base the processing of your personal data on the following legal bases:

• your consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR); processing is necessary for the performance of a contract or for pre-contractual measures (Art. 6(1)(b) GDPR)
• processing is necessary for a legitimate interest (Art. 6(1)(f) GDPR)
• processing is necessary for the establishment, exercise or defence of legal claims or civil proceedings (Art. 6(1)(f) and Art. 9(2)(f) GDPR)
• processing is necessary for compliance with domestic or foreign legal provisions (Art. 6(1)(c) and (f) and Art. 9(2)(g) GDPR)

9. Data subject rights
Under applicable data protection law, you have certain rights that allow you to obtain further information about our data processing and to influence it. These are in particular the following:

• You have a right of access. This means you can request information about our data processing, and we will be happy to assist you. You can also submit a formal access request if you would like further information and a copy of your data.
• You have a right to data portability. This means you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to have it transferred to a third party, insofar as the processing is based on your consent or is necessary for the performance of a contract.
• You have a right to erasure and to object. This means you can object to our data processing so that we can no longer process your data. You can also request that we delete your personal data. Please note, however, that we will continue to process and retain your data where we are obliged to do so.
• You have a right to rectification. This means you can have incorrect or incomplete personal data corrected or completed, or have a note of dispute added.
• You have a right to withdraw consent. This means you can withdraw your consent at any time if you have previously consented to data processing. The withdrawal takes effect from that moment, i.e. only for the future and not retroactively. In the event of withdrawal, we may continue to process your data on another legal basis.

When you exercise your data subject rights, we must verify your identity (e.g. by you sending us a copy of an identity document). The data subject rights listed are also subject to legal requirements and restrictions. This means that it may not always be possible to exercise these rights in full. For example, we may still need to continue processing your personal data to safeguard our own legitimate interests or to comply with legal obligations. Where legally permissible (e.g. to protect the privacy of third parties or to safeguard our own legitimate interests), we may restrict or refuse the exercise of your rights. You also have the option of contacting the competent data protection authority with your concern.

10. Liability for links
References and links to third-party websites lie outside VCHU’s area of responsibility. Any responsibility for such third-party websites and their content is declined. Access to and use of such websites is at your own risk.

11. Status of this privacy policy
This privacy policy is up to date and is dated

24.09.2026.