Privacy notice.

Privacy Notice · Updated: 11 October 2026

1. Data controller

The controller responsible for personal data processing in connection with this website is GFM-Stiftung, Fuchsiastrasse 19, 8048 Zurich, Switzerland. Privacy enquiries may be sent to info@gfm-stiftung.com.

2. Scope and purposes

This notice describes the processing of personal data when you visit gfm-stiftung.com, communicate with the Foundation, or follow links to external Infomaniak services. Processing supports the delivery and security of the website, the handling of correspondence and related administrative activities.

3. Technical connection data

When you access this website, the hosting infrastructure may process technically necessary information, including your IP address, the date and time of access, requested files, browser and system information, and error reports. These data support website delivery, troubleshooting, service availability and protection against misuse. Retention depends on the hosting and security procedures in use and any legitimate need to investigate incidents or retain evidence.

4. Email correspondence

If you contact us, we process your contact details, message content, attachments where applicable and technical delivery information in order to receive and handle your enquiry. Our public email address is info@gfm-stiftung.com. Please do not send original artworks, confidential documents or sensitive personal data unless specifically requested.

5. Hosting and service providers

We use services provided by Infomaniak Network SA, Switzerland, for our domain, web hosting and email. Where needed, kDrive and SwissTransfer may be used for internal collaboration or secure file transfers. Meyer IT Consulting provides technical support for the website. Authorised persons and service providers may have access to information necessary for their assigned duties. Actual processing depends on the functions used and applicable contractual arrangements.

6. Private access via Infomaniak

The “Login” link opens Infomaniak’s own sign-in service. GFM’s public website does not collect passwords or operate a separate authentication system. Identity verification, organisation and product permissions, and any processing of internal documents are handled within the relevant Infomaniak service. The privacy information provided by that service also applies. Signing in to Infomaniak does not in itself grant access to confidential Foundation materials.

7. Cookies and external content

This website itself uses no advertising or analytics cookies and loads no external fonts, social media feeds or map embeds. When you move to Infomaniak, that provider may use technically necessary cookies and carry out other processing associated with its services.

8. Recipients and international transfers

Where necessary, personal data may be disclosed to authorised persons within the Foundation and to appointed IT, hosting and communications providers. Processing or transmission outside Switzerland cannot always be excluded in the context of electronic communications. Where legally required, the Foundation observes the applicable conditions and safeguards for such disclosures.

9. Retention and security

Personal data are generally retained only for as long as necessary for the relevant purpose, statutory retention obligations or legitimate documentation and security needs. We apply appropriate technical and organisational safeguards and review their suitability in the course of our operations.

10. Individual rights

Subject to applicable law, individuals may request access to their personal data and, where appropriate, seek correction or deletion. Reasonable identity verification may be required to protect confidentiality. Please contact info@gfm-stiftung.com.

11. Updates

We may amend this privacy notice to reflect legal requirements, technical services or changes to our processing activities. The version published on this website applies.