Who is responsible
Rue du Marché 32, 1204 Genève, Switzerland
Swiss UID: CHE-278.279.361
Legal form: Association
Privacy enquiries can be sent using the form below or by post to the registered address. IAHPM is responsible for the purposes of processing described here.
Information and purposes
Contact forms collect the details you provide, such as your name, work email, organisation, subject and message. These records are used to handle the request and its follow-up. Membership applications collect organisational activities, category and relevant interests for assessing the application and administering the relationship.
Member accounts store contact details, organisational permissions and a protected password representation. They support authorised access and account security. The website also processes connection information needed to deliver pages and protect the service.
Required fields identify information needed to process the request. Optional information can be left blank. Do not submit personal health records, payment-card details or confidential product dossiers.
Processing basis
Processing is limited to responding to a request, taking steps towards or administering a membership relationship, protecting the service and meeting applicable obligations. Where consent is required for an optional use, that use is explained separately and consent can be withdrawn. Where the GDPR applies, the relevant bases are Article 6(1)(b) for requested contractual steps and administration, Article 6(1)(f) for proportionate service security and correspondence, and Article 6(1)(c) where a legal obligation applies. Swiss data-protection requirements also apply.
Who receives information
Authorised Association administrators can access records needed for their duties. Cloudflare supplies website hosting, security and database infrastructure. Public pages are delivered through its global network; request and account records are held in its database service, with the initial database location in the Asia-Pacific region. This arrangement is not a commitment to storage in Switzerland.
Cloudflare’s processing terms describe its subprocessors and international-transfer safeguards, including standard contractual clauses where applicable. See Cloudflare’s data processing terms and subprocessor information. IAHPM does not sell contact information or use advertising trackers.
Retention
Open requests remain available while they are being handled. Closed or declined website requests and their follow-up messages are scheduled for deletion after 12 months. An unsuccessful membership application follows the same schedule after closure. An active account and organisational record are retained for the relationship and any applicable recordkeeping requirement; requests to delete or restrict them are assessed individually.
Member sessions expire after 12 hours. Unused account activation links expire after three days and password-recovery links after one hour. Expired access tokens are removed after seven days. Duplicate-submission records are removed after seven days; security audit entries after 90 days. A legal preservation duty or a specific dispute may require a relevant record to be retained separately for longer.
Your requests
You can ask for access, correction or deletion and raise an objection concerning the handling of your information. Other rights, including restriction or portability, depend on the law and processing concerned. Reasonable identity checks may be needed. A request does not require a member account.
For Swiss data-protection concerns, information is available from the Federal Data Protection and Information Commissioner. Where applicable, you may also contact your local supervisory authority.
Private follow-up links
A request link grants access to its correspondence record. Store it securely and share it only with someone authorised to see that record. Request references alone do not grant access. Contact IAHPM if a link may have been disclosed.