Menu

Privacy policy

Last updated 26 September 2026.

1. Who is responsible

The controller is the Association for the International Distribution of Medical Devices (AIDMD), a non-profit association under Swiss law, Château du Rosey, 1180 Rolle, Switzerland. For anything about your data, write to connect@aidmdch.org.

This policy follows the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, for example to visitors in the EU, it follows the GDPR as well.

2. What we collect

  • Contact form: name, email address, organisation (optional), topic and message.
  • Pledge form: name, email address, pledged amount, frequency and message (optional).
  • Online donations: you pay on a secure page run by Stripe. Stripe collects your payment details. We receive your name, email address, the amount, date and frequency, and limited payment information such as the card type and last four digits. We never receive your full card number.
  • Technical data: when you visit the site or send a form, our hosting provider processes your IP address and basic request data to deliver the site, keep it secure and stop spam.

This website does not use analytics, advertising or tracking cookies. Stripe's payment page and, if enabled, Cloudflare's spam check may use strictly necessary cookies for security and fraud prevention.

3. Why we use it, and on what basis

  • To answer your message or follow up on your pledge (steps you asked for; GDPR Art. 6(1)(b)).
  • To process your donation and send your receipt (GDPR Art. 6(1)(b)).
  • To keep the financial records the law requires (legal obligation; GDPR Art. 6(1)(c)).
  • To keep the site and forms secure and free of spam (legitimate interest; GDPR Art. 6(1)(f)).

We do not sell your data, share it for marketing or use it for automated decisions about you.

4. Who processes it for us

These providers process data on our behalf and only as needed for their service:

  • Supabase: stores form submissions in a database located in Zurich, Switzerland.
  • Vercel: hosts this website and runs the form handling (servers in Frankfurt, Germany).
  • Resend: sends notification and confirmation emails.
  • Stripe: processes online donations. For fraud prevention and its legal duties, Stripe also acts as an independent controller under its own privacy policy.
  • Cloudflare (if enabled): checks that a form is sent by a person, not a bot.
  • Google Workspace: our email, where your messages are received.

5. Transfers abroad

Some of these providers are based in the United States or may process data there. Where data leaves Switzerland or the EU/EEA, we rely on the recipient's certification under the Swiss-US or EU-US Data Privacy Framework, or on standard contractual clauses approved by the Swiss and EU authorities.

6. How long we keep it

  • Messages and pledges: up to 24 months after our last contact with you, then deleted.
  • Donation and accounting records: 10 years, as Swiss accounting law requires (Art. 958f Code of Obligations).
  • Technical logs: kept by our hosting provider for a short period only.

7. Your rights

You can ask for a copy of your data and have it corrected or deleted. Where the GDPR applies, you can also restrict or object to processing and ask for your data in a portable format. Write toconnect@aidmdch.org; we reply within 30 days. We may need to confirm your identity, and we cannot delete records we are legally required to keep.

You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU, to your local data protection authority.

8. Security

Data is sent over encrypted connections. Form submissions are stored in a database that cannot be read from the website, and only authorised committee members can access them. No system is completely secure; if a breach puts your data at high risk, we will inform you and the authorities as the law requires.

9. Children

Our forms and donations are meant for adults. If you are under 16, please ask a parent or guardian before sending us personal data.

10. Changes

We will update this page if the way we handle data changes. The date at the top shows the current version.