.svg)
Privacy Policy
Effective date: June 23, 2026
Swiss Financial Innovation Lab - a Think&Do Tank for Financial Innovation (TDT)
TDT is a non-profit association under Swiss law dedicated to research, dialogue and knowledge transfer on innovation in the Swiss financial sector. We take the protection of your personal data seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in connection with it.
This Privacy Policy applies to our website, our newsletter, our events and conferences, our membership relationships, and any other interaction you have with us. It is drafted with reference to the Swiss Federal Act on Data Protection (“FADP”). Where European data protection law (the General Data Protection Regulation, “GDPR”) applies to specific processing activities – for example because you are located in the EU or EEA – we also take its requirements into account.
Contact details
Name: Swiss Financial Innovation Lab - a Think&Do Tank for Financial Innovation (TDT)
Legal form: Association as per art. 60 et seqq. of the Swiss Civil Code
Registered address: Stockerstrasse 38, 8002 Zurich, Switzerland
Email: info@tdt.ch
Website: www.tdt.ch
A. What personal data do we process, and why?
We collect and process personal data depending on how you interact with us – for example as a visitor to our website, a subscriber to our newsletter, a participant in our events, or a member of the association. The purposes for which we process personal data include the following:
- Communication: to respond to enquiries and to communicate with you by e-mail, telephone or post.
- Newsletter and information: to send you newsletters, publications, position papers and other information about our activities, if you have subscribed or otherwise consented to this.
- Events: to organise, administer and follow up on conferences, workshops, working groups and other events, including registration, attendance lists, and – where applicable – photographs or recordings made for documentation purposes.
- Membership administration: to manage our relationship with active, passive, honorary and corporate members, including processing membership applications, maintaining our membership register, collecting membership fees, and organising the General Meeting.
- Expert Council and working groups: to manage the nomination, participation and contributions of members of our Expert Council and other contributors to our research and policy work.
- Operation of our website: to ensure the secure and stable operation of our website and to analyse and improve its use (see Section C below).
- Legal and regulatory obligations: to comply with applicable legal, regulatory and accounting obligations.
- Any other purpose for which personal data was provided to us, or any purpose reasonably related to the foregoing.
Where required by law, we will ask for your consent before processing your personal data for a specific purpose (for example, sending you marketing communications). You may withdraw such consent at any time, as described in Section F below.
Personal data we collect
Depending on the context of your interaction with us, we may process the following categories of personal data:
- Contact details, such as your first and last name, e-mail address, postal address, telephone number, employer and job title;
- Membership data, such as your membership category, membership history, and information relevant to the General Meeting and voting rights;
- Communication content, such as the content of enquiries, correspondence and feedback you send us;
- Event-related data, such as registration details, attendance records and, where applicable, photographs or video and audio recordings taken at our events;
- Technical data collected automatically when you visit our website (see Section C); and
- Any other personal data you choose to provide to us.
Photographs and recordings at events
As part of organising conferences, workshops and other events, we may take photographs or, in some cases, audio or video recordings to document the event. By registering for an event, you agree to such recordings being made and to their subsequent publication for documentation purposes, for example on our website, in newsletters, or on our social media channels. You may withdraw this consent at any time before the event by contacting us using the details in Section A above.
B. Do we share your personal data with third parties?
We only disclose your personal data to third parties where one of the following applies: you have given your express consent; there is a legal obligation or permission to do so; the disclosure is necessary to assert, exercise or defend legal claims; or the disclosure is necessary to perform a contract or otherwise manage our relationship with you (for example, to administer an event registration or membership).
We work with a limited number of service providers who process personal data on our behalf, for example providers of website hosting, newsletter distribution, membership administration and analytics tools. These service providers are listed in Sections C and D below. We enter into appropriate data processing agreements with these providers and only permit them to process personal data for the purposes we specify.
Cross-border transfer of data
Some of our service providers are located outside Switzerland, including in the European Economic Area (EEA) and, in some cases, the United States. Where personal data is transferred to a country without an adequate level of data protection recognised by the Swiss Federal Data Protection and Information Commissioner (“FDPIC”), we take appropriate measures – such as standard contractual clauses – to ensure an adequate level of protection for your personal data, unless a statutory exception applies.
C. Our website
When you visit our website, our servers automatically collect certain technical data that your browser transmits to us, such as your IP address, browser type, the website you came from, the date and time of access, and the pages you view. We use this data to ensure the secure and stable operation of our website and for statistical purposes. We do not use this data to identify you personally or to create individual user profiles.
Hosting
This website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When you visit this website, Webflow automatically collects and processes technical data (such as IP address, browser type, device information, and access timestamps) in server log files, for the purpose of delivering the website reliably and securely.
Webflow acts as a processor on our behalf; we remain the controller for personal data collected through this site. Because Webflow is based in the United States, it may host, transfer, and process personal data in the United States or other countries outside the EU/Switzerland. For this transfer, Webflow is certified under the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, and the UK Extension to the EU-U.S. Data Privacy Framework, and its Data Processing Addendum additionally incorporates the EU Standard Contractual Clauses and the UK International Data Transfer Agreement as a transfer safeguard. WebflowWebflow
We have entered into a Data Processing Agreement with Webflow, which is available to all customers regardless of plan and is incorporated by reference into Webflow's Terms of Service. A list of Webflow's subprocessors is available at webflow.com/legal/subprocessors. Webflow's own privacy policy is available at webflow.com/legal/privacy. Webflow
The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR) in operating a stable, secure, and performant website / Art. 31(1) revDSG, where Swiss data protection law applies.
Cookies
We use cookies and similar technologies on our website to ensure its functionality and to analyse and improve its use. A cookie is a small file stored on your device that allows us to recognise your browser on subsequent visits.
We distinguish between the following categories of cookies:
- Essential cookies: required for the basic functioning of the website (for example, to remember your cookie preferences).
- Performance and analytics cookies: used to understand how visitors use our website, so that we can improve it. These are only set with your consent.
- Functionality cookies: used to enable certain features, such as embedded videos.
You can manage or withdraw your consent to non-essential cookies at any time through the cookie banner shown when you first visit our website, or through your browser settings. Please note that blocking certain cookies may affect the functionality of our website.
Links to other websites
Our website may contain links to third-party websites. We have no control over the privacy practices of these third parties and recommend that you review their privacy policies before disclosing any personal data to them.
D. Newsletter, events and social media
Newsletter
If you subscribe to our newsletter, we process your name and e-mail address to send you updates about our research, publications and events. You may unsubscribe at any time using the link provided in every newsletter, or by contacting us directly.
Event registration
If you register for one of our events, we process your name, e-mail address and any other information you provide during registration in order to organise and administer the event. We may use a third-party event management platform for this purpose.
Social media plug-ins
We may use social media plug-ins (for example, LinkedIn or X/Twitter) on our website, identified by the respective logos. When you interact with these plug-ins while logged into the corresponding platform, data may be transmitted to that platform. Responsibility for data protection-compliant operation of these plug-ins lies with the respective providers; we have no influence over the processing of your personal data on their platforms.
- LinkedIn: further information at linkedin.com/legal/privacy-policy
- X (Twitter): further information at twitter.com/en/privacy
E. How long do we keep your data?
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, or to protect our legitimate interests (for example, for evidentiary purposes). In particular:
- Newsletter data is kept for as long as you remain subscribed, and is deleted promptly after you unsubscribe;
- Membership data is kept for the duration of your membership and for a reasonable period thereafter to comply with our legal and accounting obligations, generally not exceeding ten years;
- Event registration data is generally kept for the duration of the event and a limited period afterward for documentation and accounting purposes;
- Technical website data (e.g., server logs) is generally retained for a short period for security purposes.
Where personal data is no longer necessary for these purposes and we are not subject to a legal retention obligation, we delete or anonymise it.
F. What rights do you have?
Subject to the conditions set out in applicable data protection law, you have the following rights in relation to your personal data:
- Right to information: you may request information about whether, and which, personal data we process about you.
- Right to rectification: you may request that we correct inaccurate personal data.
- Right to deletion: you may request the deletion of your personal data, subject to any legal retention obligations.
- Right to restriction or objection: under certain conditions, you may object to the processing of your personal data or request that it be restricted.
- Right to data portability: you may request that we provide your personal data in a structured, commonly used and machine-readable format.
- Right to withdraw consent: where we process your personal data on the basis of your consent, you may withdraw that consent at any time, with effect for the future.
To exercise these rights, please contact us using the details in Section A above. To protect you against unauthorised requests, we may need to verify your identity before responding.
If you believe that your data protection rights have not been respected, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Bern (www.edoeb.admin.ch). If the GDPR applies to you, you may also have the right to lodge a complaint with the supervisory authority of your country of residence in the EU or EEA.
G. Automated decision-making
We do not use fully automated decision-making that produces legal effects concerning you or significantly affects you. Should this change, we will inform you separately, as required by law.
H. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. This includes, among other things, the use of encryption (such as SSL/TLS) for data transmitted through our website. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
I. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The version published on our website is the version that applies. We encourage you to review this page periodically.
I. Cookie Policy
Effective date: June 23, 2026
Last updated: June 23, 2026
What are cookies?
This Cookie Policy explains what cookies are, how we use them, the types of cookies we use (i.e., the information we collect using cookies and how that information is used), and how to manage your cookie settings.
Cookies are small text files used to store small pieces of information. They are stored on your device when a website loads in your browser. These cookies help ensure that the website functions properly, enhance security, provide a better user experience, and analyse performance to identify what works and where improvements are needed.
How do we use cookies?
Like most online services, our website uses both first-party and third-party cookies for various purposes. First-party cookies are primarily necessary for the website to function properly and do not collect any personally identifiable data.
The third-party cookies used on our website primarily help us understand how the website performs, track how you interact with it, keep our services secure, deliver relevant advertisements, and enhance your overall user experience while improving the speed of your future interactions with our website.
Types of cookies we use
Necessary
Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
CookieDurationDescription_cfuvidsessionCloudflare sets this cookie to track users across sessions to optimize user experience by maintaining session consistency and providing personalized servicescookieyes-*1 yearCookieYes sets this cookie for consent solution management.
Manage cookie preferences
You can modify your cookie settings anytime by clicking the 'Consent Preferences' button above. This will allow you to revisit the cookie consent banner and update your preferences or withdraw your consent immediately.
Additionally, different browsers offer various methods to block and delete cookies used by websites. You can adjust your browser settings to block or delete cookies. Below are links to support documents on how to manage and delete cookies in major web browsers.
Chrome: https://support.google.com/accounts/answer/32050
Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac
Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc
If you are using a different web browser, please refer to its official support documentation.
Cookie Policy generated by CookieYes - Cookie Policy Generator
Last updated: June 23, 2026
