Data Protection Policy of Remote Roots
Version effective as of 01.07.2026
With this Data Protection Policy we, Remote Roots (hereinafter also we or us), describe how we collect and further process personal data. We respect and value the privacy of everyone who visits this website https://www.remoteroots.org/. Any Personal Data we collect via the Website will only be used as permitted by law and as set out in this Data Protection Policy for the Website (the “Policy”).
The term “personal data” in this Data Protection Policy shall mean any information that identifies, or could reasonably be used to identify any person.
If you provide us with personal data of other persons (such as family members, work colleagues), please make sure the respective persons are aware of this Data Protection Policy and only provide us with their data if you are allowed to do so and such personal data is correct.
This Data Protection Policy is based on the EU General Data Protection Regulation («GDPR») and the Swiss Federal Act on Data Protection («FADP»). However, the application of these laws depends on each individual case.
1. How to Contact Us
Remote Roots, Voltastrasse 40, 8044 Zurich, Switzerland, is the controller responsible for the processing described in this Policy. You can contact us as follows:
Name: Remote Roots
Address: Voltastrasse 40, 8044 Zurich
Attn: Leyla Schreiber
E-mail: [email protected].
2. Collection and Processing of Personal Data
This Policy applies to the processing of personal data in connection with the Website and communications or submissions made through it. The Website may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.
Depending on how you use the Website, we may process: (i) technical data generated when you visit the Website, such as your IP address, browser and device information, access date and time, requested pages, referring website, and server log data; (ii) contact and communication data that you provide to us; and (iii) information that you submit in connection with an internship, volunteering, participation in a project, or a donation. The Website may also use cookies and similar technologies as described in Section 4.
3. Purpose of Data Processing and Legal Grounds
We process personal data to operate, maintain, improve, and secure the Website; respond to inquiries and communicate with you; assess and administer internship or volunteer applications; organise project participation; process donation-related requests; comply with legal obligations; and establish, exercise, or defend legal claims where necessary.
If you have given us your consent to process your personal data for certain purposes, we will process your personal data within the scope of and based on this consent, unless we have another legal basis, provided that we require one. Consent given can be withdrawn at any time, but this does not affect data processed prior to withdrawal.
4. Cookies / Tracking and Other Techniques Regarding the Use of our Website
We typically use “cookies” and similar techniques on our websites, which allow for an identification of your browser or device. A cookie is a small text file that is sent to your computer and automatically saved by the web browser on your computer or mobile device, when you visit our website. If you revisit our website, we may recognize you, even if we do not know your identity. Besides cookies that are only used during a session and deleted after your visit of the website (“session cookies”), we may use cookies in order to save user configurations and other information for a certain time period (e.g., two years) (“permanent cookies”). Notwithstanding the foregoing, you may configure your browser settings in a way that it rejects cookies, only saves them for one session or deletes them prematurely. Most browsers are preset to accept cookies. We use permanent cookies for the purpose of saving user configuration (e.g., language, automated log in). If you block cookies, it is possible that certain functions (such as, e.g., language settings) are no longer available to you.
Where required, we activate non-essential cookies and similar technologies only after you have given your consent through our cookie settings. You may withdraw or change your consent at any time through those settings.
In addition, we use plug-ins from the social network Linkedin on our website. This is visible for you (typically based on the respective symbols). We have configured these elements to be disabled by default. If you activate them (by clicking on them), the operators of the respective social networks may record that you are on our website and where on our website you are exactly and may use this information for their own purposes. This processing of your personal data is the responsibility of the respective operator and occurs according to its data protection regulations. We do not receive any information about you from the respective operator.
5. Datatransfer and Processing Abroad
We use Bluehost to host the Website. Bluehost is a hosting provider based in the United States. In connection with hosting, technical data such as IP addresses, server log data, and Website content may be processed in the United States.
Bluehost may use affiliated companies and sub-processors to provide its services. Where required, transfers are protected by appropriate contractual safeguards, including recognised standard contractual clauses. We do not otherwise transfer personal data abroad in connection with the Website.
6. Retention Periods for your Personal Data
We process and retain your personal data as long as required for the performance of our contractual obligation and compliance with legal obligations or other purposes pursued with the processing. Personal data may be retained for the period during which claims can be asserted against our association or insofar as we are otherwise legally obliged to do so. As soon as your personal data are no longer required for the above-mentioned purposes, they will be deleted or anonymized, to the extent possible. In general, shorter retention periods of no more than twelve months apply for operational data (e.g., system logs).
7. Data Security
We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. We address personal-data breaches and notify affected persons and competent authorities where required by applicable law.
8. Obligation to Provide Personal Data To Us
Where you contact us, apply for an internship, volunteer, participate in a project or make a donation, certain information may be necessary to process your request or participation. If you do not provide the required information, we may be unable to respond, assess your application, process your donation-related request, or complete the relevant process.
9. Your Rights
In accordance with and as far as provided by applicable law (as is the case where the GDPR is applicable), you have the right to access, rectification and erasure of your personal data, the right to restriction of processing or to object to our data processing, in particular for direct marketing purposes and for other legitimate interests in processing in addition to right to receive certain personal data for transfer to another controller (data portability). Please note, however, that we reserve the right to enforce statutory restrictions on our part, for example if we are obliged to retain or process certain data, have an overriding interest (insofar as we may invoke such interests) or need the data for asserting claims. If exercising certain rights will incur costs on you, we will notify you thereof in advance. We have already informed you of the possibility to withdraw consent in Section 3 above. Please further note that the exercise of these rights may be in conflict with your contractual obligations and this may result in consequences such as premature contract termination or involve costs. If this is the case, we will inform you in advance unless it has already been contractually agreed upon.
In general, exercising these rights requires that you are able to prove your identity (e.g., by a copy of identification documents where your identity is not evident otherwise or can be verified in another way). In order to assert these rights, please contact us at the addresses provided in Section 1 above.
In addition, every data subject has the right to enforce his/her rights in court or to lodge a complaint with the competent data protection authority. The competent data protection authority of Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
10. Amendments of this Data Protection Policy
We may amend this Data Protection Policy at any time without prior notice. The current version published on our website shall apply. If the Data Protection Policy is part of an agreement with you, we will notify you by e-mail or other appropriate means in case of an amendment.
*****