Privacy Policy
H4 – Hands-on Human Health Hub, affiliated with La Source Institute, places particular importance on the protection of personal data. Personal data collected in connection with Défi Source are processed solely for the purposes of organising the event, managing its administrative and operational aspects, communicating with the individuals concerned, and implementing activities and services related to the event. Such data are processed in accordance with applicable Swiss data protection legislation.
For the purposes of this Privacy Policy, the term “Défi Source Organisers” refers to H4 and the Institut et Haute Ecole de la Santé La Source.
By using our website, you accept this Privacy Policy. The Défi Source Organisers are committed to processing personal data in compliance with:
- the revised Swiss Federal Act on Data Protection (FADP);
- its implementing ordinance (Data Protection Ordinance, DPO);
- and the requirements applicable to higher education and research institutions.
Data Controller
The data controller within the meaning of applicable data protection regulations is:
Institut et Haute École de la Santé La Source
Data Protection Officer
Av. Alexandre Vinet 30
1004 Lausanne
Phone: 021 556 40 00
Email: dpo@ecolelasource.ch
1. Personal Data Collected
1.1 Categories of Data
Personal data are collected and processed (manually or automatically) in whole or in part when you browse the website and/or provide information through forms available on the site, as well as in connection with your registration for, participation in, and interactions with the Défi Source Organisers.
Several categories of personal data may be collected, including:
- identification data, such as your title, first name, last name, contact details (email address, telephone number, postal address), and professional information;
- data relating to your interactions with the Défi Source Organisers, including requests for information, correspondence, communications, and communication preferences;
- data relating to your application to or participation in Défi Source, including information provided in application, registration or team formation forms;
- data relating to your participation in Défi Source activities, such as workshops, coaching sessions, expert clinics, the hackathon, and the closing event;
- data relating to projects submitted or developed as part of Défi Source, to the extent that such information constitutes personal data;
any other personal information you may provide in the course of your interactions with the Défi Source Organisers.
1.2 Purpose of Processing
Personal data are processed, in whole or in part, for the following purposes:
- managing, processing and monitoring your requests, applications, registrations and communications with the Défi Source Organisers, including those submitted through the website;
- organising, coordinating and delivering Défi Source activities, including project selection, team formation, workshops, coaching sessions, expert clinics, the hackathon and the closing event;
- communicating with participants, project holders, experts, coaches, partners, jury members and any other individuals involved in the event;
- managing the administrative and operational aspects of Défi Source, including the allocation of awards and distinctions and the follow-up of participant relations;
- pursuing the legitimate interests of the Organisers in connection with the organisation, improvement, evaluation and promotion of Défi Source;
- complying with applicable legal and regulatory obligations.
1.3 Disclosure
The Défi Source Organisers do not disclose your personal data to third parties, except where required by a legally competent authority pursuant to a legal obligation, or where disclosure is necessary to protect your vital interests.
1.4 Retention Period
We retain your personal data in a form permitting identification only for as long as necessary to fulfil the purposes for which the data were collected.
| Category of Data | Retention Period |
|---|---|
| Contact and information requests | 12 months after the request has been processed |
| Unsuccessful applications | 12 months after the selection decision |
| Participation data and project submissions | 5 years after the relevant edition |
| Newsletter subscriptions | Until you unsubscribe |
| Website analytics data | [X] months, automatically deleted thereafter |
| Server log data | [X] months |
You may exercise your right to request deletion of your personal data at any time, as described in the section “Rights of Data Subjects” below.
1.5 Processors
Where the Défi Source Organisers delegate processing activities to third parties, they ensure that such processing is governed by a written agreement containing provisions that provide a level of protection for personal data at least equivalent to that described in this Privacy Policy and compliant with Swiss data protection legislation.
1.6 Data Protection Measures
The Défi Source Organisers implement security measures in accordance with Swiss data protection requirements. Appropriate technical and organisational measures are maintained to ensure the confidentiality, integrity and availability of data, as well as the resilience of systems and services.
1.7 Data Transfers
Information relating to your registration may be transferred to servers operated on behalf of the Organisers and hosted outside Switzerland. Such transfers are carried out only to countries providing an adequate level of protection or subject to safeguards recognised under Swiss data protection law.
2. Rights of Data Subjects
The Défi Source Organisers wish to ensure that you are fully aware of your rights under applicable Swiss data protection legislation. You are entitled to:
- access, amend, update and correct any personal data we hold about you;
- request the deletion or restriction of processing of your personal data, or exercise your right to data portability via the contact details provided above;
- withdraw at any time any consent you have previously given for the processing of your personal data.