Legal

Swiss & EU Data Protection

Last updated: January 2026

The Odegard Foundation maintains its registered seat in Zug, Switzerland, and operates internationally. This notice summarizes how we comply with Swiss and European data protection law and addresses cross-border data transfers. It supplements our Privacy Notice.

1. Applicable frameworks

  • Switzerland — the revised Federal Act on Data Protection (revFADP) and its implementing ordinance.
  • European Union / EEA — the General Data Protection Regulation (GDPR), where our processing falls within its scope.
  • United Kingdom — the UK GDPR and Data Protection Act, where applicable.

2. Representative and contact

For matters concerning Swiss and EU data protection, our data protection contact can be reached at [email protected]. Where required, we maintain a representative in the European Union; details are available on request.

3. International data transfers

Because we operate offices in Switzerland and the United States, personal data may be transferred across borders. Where we transfer personal data from Switzerland or the EEA to a country without a recognized adequacy decision, we rely on appropriate safeguards — principally the European Commission's Standard Contractual Clauses, supplemented by the Swiss addendum and additional measures where necessary.

4. Your rights under Swiss and EU law

You may request access to your personal data, its correction or deletion, restriction of or objection to processing, and data portability. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.

5. Supervisory authorities

You have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with the competent supervisory authority in your EU member state of residence, place of work, or the place of the alleged infringement.

6. Automated decision-making

We do not make decisions producing legal or similarly significant effects based solely on automated processing of your personal data.