1. Who is responsible
The controller for this website and for the processing described here is the International Self-Defence Federation (ISDF), Viganello, Ticino, Switzerland.
Contact for all privacy questions and requests: info@isdf.ch.
2. In short
- This website uses no advertising, no tracking and no analytics.
- It sets one cookie only: it remembers your cookie choice.
- There are no user accounts, no payment forms and no social-media plug-ins.
- Fonts are hosted on our own server, so your browser does not contact Google or any other font provider.
- The contact form does not send data to our server. It opens your own email program (see section 3).
3. What we process and why
| Situation | Data | Purpose and legal basis |
|---|---|---|
| Visiting the website | IP address, date and time, requested page, browser and device type, referring page. These technical data are created by our hosting provider when the page is delivered. | To deliver the website, keep it secure and prevent misuse. Legitimate interest (Art. 6(1)(f) GDPR); overriding private interest (nLPD). |
| Choosing cookie settings | Your choice, the date and the policy version, stored in a cookie on your device. | To respect and prove your choice. Necessary for the service you request; legal obligation to document consent (Art. 6(1)(c) and (f) GDPR). |
| Contacting us | Name, organisation, email address and the content of your message. When you press "Send request" on the contact page, your email program opens with the message already written. The message reaches us only when you send it from your own email account. | To answer your enquiry and prepare an agreement. Pre-contractual measures or legitimate interest (Art. 6(1)(b) and (f) GDPR). |
| Membership, courses and bodyguard services | Contact, organisation and billing details, and the information needed to deliver the service you ordered. | To conclude and perform the agreement with you. Contract (Art. 6(1)(b) GDPR); processing necessary for a contract (nLPD). |
| Credential lookup (verify page) | Name, role, qualification grade, reference number and issue date of people who hold an ISDF credential. Searches you type are handled in your browser and are not stored by us. | To let third parties check that a credential is genuine. Contract with the credential holder and legitimate interest. Holders may ask us to correct or remove their entry. |
We do not use your data for automated individual decision-making or profiling, and we do not sell personal data.
4. Cookies and similar technologies
Cookies are small text files stored on your device. Under EU law (ePrivacy Directive and GDPR) and Swiss law (Telecommunications Act and nLPD), we need your consent for anything that is not strictly necessary, and we must tell you clearly what we use. We follow the stricter rule: optional categories are off until you switch them on, and you can change your mind at any time.
| Name | Category | Purpose | Lifetime | Provider |
|---|---|---|---|---|
isdf_consent |
Strictly necessary | Stores your cookie choices so we do not ask again on every page. | 6 months | ISDF (first party) |
Categories you can control
- Strictly necessary. Always active. No consent needed.
- Analytics. Anonymous usage statistics. Not used at the moment.
- Marketing and external media. Third-party videos, maps or advertising. Not used at the moment.
If we ever add an analytics or marketing tool, it will stay switched off until you allow it, and this table will be updated before it goes live.
You can review or withdraw your choice at any time with the button here or in the footer of every page. You can also delete or block cookies in your browser settings. Withdrawing consent does not affect processing that took place before.
5. Who receives data
- Hosting provider. Our website is hosted by Railway. It delivers the pages to your browser and processes the technical data listed above on our behalf, as our processor.
- Email service provider. Messages you send us by email are handled by the provider of our email service.
- Authorities and advisers. Where the law requires it, or to protect our rights, we may disclose data to authorities, courts, auditors or legal advisers.
We do not use Google Fonts, Google Analytics, social-media buttons, advertising networks or other third-party tracking services on this website. Links to other websites lead to services we do not control; their own privacy policies apply.
6. Transfers abroad
Our hosting provider may process data in countries outside Switzerland and the European Economic Area, including the United States. Where it does, we rely on appropriate safeguards recognised under Swiss and EU law, such as standard contractual clauses or an adequacy decision (for example the Swiss-US and EU-US Data Privacy Frameworks).
7. How long we keep data
- Technical data (server logs): kept by the hosting provider for a limited period under its own retention rules.
- Cookie choice: 6 months, then we ask again.
- Enquiries: for as long as needed to answer them, then deleted unless an agreement follows.
- Agreements and billing records: for the periods Swiss law requires, generally up to 10 years.
- Credential records: for as long as the credential is valid, and afterwards as a permanent record unless the holder asks for removal.
8. Your rights
Under the nLPD and the GDPR you have the right to:
- be informed about, and receive a copy of, the personal data we hold about you (access);
- have inaccurate data corrected and incomplete data completed;
- have your data deleted, or its use restricted, where the law allows;
- receive your data in a common electronic format (portability);
- object to processing based on our legitimate interests;
- withdraw consent at any time, with effect for the future.
To exercise a right, email info@isdf.ch. We may ask you to prove your identity and will reply within 30 days.
Complaints. You may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch. If you live in the EU or EEA you may also contact the data protection authority in your country.
9. Security, children and changes
Security. The website is delivered over an encrypted connection (HTTPS). We limit access to personal data to people who need it and take technical and organisational measures to protect it.
Children. The website is not directed at children under 16, and we do not knowingly collect their data.
Changes. We may update this policy, for example when we add a service. The date at the top shows the latest version. If a change affects your cookie choices, we will ask you again.