This policy describes how GAIGI (Geneva AI Governance Institute) collects, processes and protects the personal data of users of the www.gaigi.org website and the learn.gaigi.org training platform, in accordance with the revised Swiss Federal Data Protection Act (FADP) and the General Data Protection Regulation (GDPR).
1. Data controller
GAIGI – Geneva AI Governance Institute, Geneva, Switzerland. Contact: training@gaigi.org
2. Data collected
- Identity: surname, first name, position, organisation
- Contact details: email address, phone, postal address
- Connection and browsing data (logs, IP address, cookies)
- Data relating to training courses taken and assessment results
- Payment data (processed exclusively by our banking provider)
3. Purposes
- Managing registrations and access to training
- Invoicing and accounting
- Issuance of certificates
- Institutional and educational communication
- Improving user experience
4. Legal basis
Processing is based on performance of the training contract, user consent, GAIGI’s legitimate interest, and compliance with Swiss legal obligations.
5. Retention period
Data is retained for the period necessary for the purposes described, and for a minimum of 10 years for accounting records, in accordance with Swiss law.
6. Recipients
Data is accessible to authorised GAIGI staff and its technical subcontractors (Infomaniak – hosting and email in Switzerland). No data is resold to third parties.
7. Transfers outside Switzerland / EU
Data is hosted in Switzerland. Any transfer to a third country is carried out with appropriate safeguards (standard contractual clauses).
8. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability. To exercise these rights: training@gaigi.org.
9. Cookies
The website uses technical cookies necessary for its operation and, subject to your consent, anonymised audience measurement cookies. See our Cookie policy.
10. Security
GAIGI implements appropriate technical and organisational measures: TLS encryption, backups, access controls, sovereign hosting in Switzerland.
11. Amendments
This policy may be updated. The version in force is the one published on this page.