Privacy notice

1. Controller

The controller responsible for processing personal data on this website is:

Until further notice, BREAKOUT GmbH is also responsible for data processing in connection with House of Innovation Switzerland. The mailbox hoi@houseofinnovation.ch is managed by Katja Zwilling.

2. Scope

This privacy notice applies to houseofinnovation.ch, the Global Innovation Week page, the House of Zurich page and the contact, community and participation forms provided on those pages. It describes the data processing currently carried out.

3. Visiting the website

When you access the website, technically necessary data is processed. This may include your IP address, date and time, requested address, browser and device information, referrer, transmission status, and security or error data. We use this information to provide the website, resolve faults, prevent abuse and maintain security.

The website is delivered through Cloudflare. Cloudflare processes technical connection, security and log data as a processor or infrastructure provider.

4. Forms and applications

House of Innovation Community

When you register for updates, we process your name, email address, optional organisation, selected areas of interest, language, and the wording, version and time of your consent. We use this data to manage your interest and send relevant House of Innovation updates.

Global Innovation Week

When you request an invitation, we additionally process your role and job title, organisation, country, participant type, strategic theme, described opportunity, technology or need, and preferred participation days. We use this information for human review, curation, communication and preparation of possible conversations or participation.

Please do not include trade secrets, sensitive personal data or information that is not required for an initial assessment in free-text fields.

Form data is stored in a Cloudflare D1 database. New submissions are also reported through the email infrastructure to hoi@houseofinnovation.ch, a mailbox managed by Katja Zwilling.

5. Direct contact and external services

If you contact us by email, telephone or WhatsApp, we process your contact details, the content of your message and information needed to respond. When you select a WhatsApp link, you leave our website; subsequent processing is also governed by the terms of WhatsApp or Meta.

Partner and other external links are only accessed when selected. The respective providers are responsible for processing on their destination pages.

6. Purposes and legal bases

We process personal data to provide and secure the website, respond to enquiries and applications, organise our services, manage business relationships and – with your consent – send updates.

Processing is governed by the Swiss Federal Act on Data Protection. Where the EU General Data Protection Regulation applies, processing is based, depending on the situation, on your consent, steps before entering into or performing a contract, compliance with legal obligations, or our legitimate interests in a secure website, efficient communication and delivery of our services.

7. Recipients and processors

Access is limited to people and service providers who need it for the purposes described. These include authorised staff and project leads of BREAKOUT GmbH or House of Innovation, Cloudflare for hosting, database, security and technical email transmission, and providers of our email infrastructure.

Sanity is used as an editorial system for website content. Form submissions are not stored in the Sanity CMS.

We do not sell personal data.

8. International processing

Technical service providers may process data in Switzerland, the European Economic Area, the United States or other countries in which they or their subprocessors operate. For transfers to countries without a recognised adequate level of protection, we use appropriate safeguards where required, such as recognised standard contractual clauses with Swiss adaptations, or rely on a statutory exception.

9. Retention

• Technical log and security data is kept only for as long as required for operation and security, generally no longer than 30 days. Security incidents may require longer retention.
• General enquiries are normally deleted no later than 24 months after the matter is closed, unless a business relationship or legal retention obligation applies.
• Community contacts remain stored until consent is withdrawn. If no updates are sent for 24 consecutive months, we delete the data or request renewed confirmation.
• Applications for Global Innovation Week 2027 that are not pursued are normally deleted no later than twelve months after the event. If a collaboration develops, the retention periods of that business relationship apply.
• Business and accounting records are generally retained for ten years in accordance with legal obligations.
• After withdrawal, we may retain minimal evidence of the withdrawal and consent for up to three years to respect the withdrawal and demonstrate compliance.

10. Cookies and analytics

We currently do not use advertising, profiling or audience analytics cookies and do not deploy marketing pixels. If this changes, we will update this notice and obtain any required choice or consent before activating the relevant technologies.

11. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or release of your personal data and object to processing. You may withdraw consent at any time with effect for the future.

Send requests to katja.zwilling@breakout.ch. You may also contact the Swiss Federal Data Protection and Information Commissioner or, where applicable, a competent European supervisory authority.

12. Security and decisions

We take appropriate technical and organisational measures to protect personal data from loss, misuse and unauthorised access. Participation applications are reviewed by people. We do not use solely automated decisions that produce legal or similarly significant effects.