This is a translation for your convenience. The German version is legally binding.
This privacy policy explains which personal data we process in connection with EventLounge – our platform for on-site events and events in Microsoft Teams – for what purposes, and what rights you have. It is governed by the Swiss Federal Act on Data Protection (FADP, “revDSG”) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Controller
dotCLOUD GmbHBahnhofstrasse 9
8952 Schlieren, Switzerland
UID: CHE-450.836.600
For any questions about data protection and to exercise your rights, contact us at privacy@dotcloud.pro.
2. Data we process
| Area | Data |
|---|---|
| Registration and waitlist | First name, last name, email address, chosen language, status of your registration, time of your consent and the version of this privacy policy or of the Terms you agreed to |
| Paid tickets | Amount, currency, VAT, payment status, payment method (e.g. TWINT or card) and Stripe reference numbers (payment, invoice). Card and TWINT details as well as billing address, company name and UID/VAT number are collected exclusively by Stripe on its checkout page. |
| Email delivery | Type and time of the emails sent (confirmations, access links, changes, cancellations) – without a copy of their content |
| Cookie choice | Your selection, a random session identifier and the version of this policy – without IP address and without any link to you as a person |
| Technical data | When you visit the website, our hosting provider processes technically necessary data (e.g. IP address, time, page requested, browser type) in server logs, which we only evaluate to ensure operation and security. |
We do not collect sensitive personal data and do not use analytics or advertising trackers. Our emails contain no tracking pixels and load no external images.
3. Purposes and legal bases
We process your data in order to
- manage your registration, waitlist spot and ticket and reserve a seat for you,
- send you the related emails (confirmation, personal link, Microsoft Teams access, calendar entry, programme changes, cancellations),
- process payments, invoices and refunds,
- prevent abuse (e.g. automated sign-ups) and keep the platform secure,
- comply with statutory retention and documentation obligations.
Where the GDPR applies, we rely on the performance of a contract (Art. 6(1)(b) GDPR), your consent (point a), legal obligations (point c) and our legitimate interest in secure operation (point f). We do not use your data for advertising, do not pass it on for advertising purposes and never sell it.
4. Recipients and processors
We use carefully selected service providers who process data on our behalf and according to our instructions:
| Provider | Purpose | Location of processing |
|---|---|---|
| Microsoft Ireland Operations Ltd. (Microsoft Azure) | Hosting of the website, database and file storage | Data centres in the EU (region “West Europe”, Netherlands) |
| Microsoft Ireland Operations Ltd. (Microsoft 365) | Sending emails, sign-in of our staff; running online events in Microsoft Teams | Switzerland/EU according to Microsoft’s data residency commitments |
| Stripe Payments Europe, Ltd. (Ireland) | Payment processing (TWINT, credit and debit cards) and invoicing | EU; transfer to Stripe, Inc. (USA) possible |
| TWINT AG (Switzerland) | Processing of TWINT payments | Switzerland |
Stripe and TWINT are independently responsible for certain processing (e.g. fraud prevention, their own legal obligations); their privacy notices apply in addition. When you take part in an event in Microsoft Teams, other participants and the organisers see the name you display in Teams.
5. Transfers abroad
Our database and file storage are located in the EU (Netherlands). The Swiss Federal Council recognises the EU and EEA states as countries with an adequate level of data protection. Where data reaches the USA (in particular with Stripe, Inc. and Microsoft Corporation), this is based on the Swiss-U.S. and EU-U.S. Data Privacy Framework, under which the recipients are certified, and additionally on standard contractual clauses.
6. Retention and deletion
| Data | Retention |
|---|---|
| Unconfirmed registrations and waitlist requests | Deleted no later than 8 days after the request |
| Name and email address of attendees and waitlist entries | Anonymised 90 days after the end of the event |
| Log of emails sent (without content) | 90 days |
| Accounting records (invoices, payment and refund records) | 10 years under Art. 958f of the Swiss Code of Obligations |
| Anonymous record of your cookie choice | Without any personal reference, as proof of consent |
7. Cookies
We only use cookies that are necessary to run the website or that store your settings. Cookies for analytics or marketing are only set with your explicit consent; we currently use no such services.
| Cookie | Purpose | Duration |
|---|---|---|
| el_consent | Stores your cookie choice | 180 days |
| el_locale | Stores the chosen language | 1 year |
| el_currency | Stores the chosen currency (CHF or EUR) | 1 year |
| authjs.* | Sign-in of our staff to the administration area (not used for visitors) | Session, max. 8 hours |
You can change or withdraw your choice at any time via “Cookie settings” in the footer. Stripe’s cookie notices apply on Stripe’s checkout page.
8. Data security
We protect your data with appropriate technical and organisational measures: encrypted transmission (TLS), storage that is not publicly accessible, access to the administration area only for authorised staff signing in with Microsoft Entra ID, personal links whose keys are only stored in hashed form, and removal of metadata (e.g. location data) from uploaded images.
9. No automated individual decisions
We do not make automated individual decisions and do not create personality profiles. Seats are allocated in the order of registration or of the waitlist.
10. Your rights
Within the scope of applicable law, you have in particular the right to
- access the data processed about you (Art. 25 FADP, Art. 15 GDPR),
- rectification of incorrect data,
- erasure or anonymisation of your data, unless a retention obligation applies,
- receive or transfer your data in a common electronic format (Art. 28 FADP, Art. 20 GDPR),
- object to processing and withdraw consent with effect for the future.
You can cancel a registration for a free event yourself at any time via your personal link. For all other requests, write to privacy@dotcloud.pro; we may ask for proof of identity. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or – where the GDPR applies – with the competent supervisory authority in the EU.
11. Changes
We update this privacy policy when our processing or the legal situation changes. The version published on this page applies; each version has a version number that we store together with your consent.