Information document on the processing of personal data

In compliance with the provisions of the Federal Data Protection Act (hereinafter also DPA) and the European Data Protection Regulation – EU Reg. 2016/679 (hereinafter also GDPR), we provide you with the necessary information regarding the processing of personal data provided in the course of browsing this website. This information does not apply to other websites (e.g. other websites that can be accessed via links on this page).  ALMA Impact AG (hereinafter also referred to as company or data controller) is in no way responsible for the websites of third parties. In particular, the Company:

– Is not responsible for the content of hyperlinked websites outside its own circuit and does not assume responsibility for their content, for the product or services offered thereon or for other offers.

– It cannot and does not assume any guarantee or liability for data passed on to third parties mentioned on this website.

Data controller

The data controller is ALMA Impact AG, with registered office in Via Cantonale 19, CH-6900 Lugano. ALMA Impact AG handles data protection with the utmost professionalism in order to enable users to benefit from the online services in complete safety.


What is meant by personal data and the processing of personal data.

Personal data is any information concerning an identified or identifiable natural person.

Processing of personal data shall mean any operation or set of operations, carried out even without the help of electronic means, concerning the collection, recording, organisation, keeping, interrogation, elaboration, modification, selection, retrieval, comparison, utilization, interconnection, blocking, communication, dissemination, erasure, and destruction of data, even if not yet recorded, and the processing of personal data deletion and destruction of data, even if not registered in a database.

Type of data processed and purpose of processing

1) Processing of navigation data for activities strictly necessary for the operation of the site and the provision of the website navigation service.

The computer systems and software procedures used to operate this site acquire, during normal operation, some personal data that are then implicitly transmitted.

in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. All our activities are governed by strict ethical principles,and we are committed to protecting the

privacy of all visitors to our website. For this reason, the way we collect and store data is closely linked to the way you use our website and its services. Data that are strictly related to navigation on the website are stored until the navigation session is closed.

2) Processing of data provided voluntarily by users/visitors

to send requests for information to the contact addresses on the website.  If users/visitors connect to this website and send their personal data for the purpose of making e-mail enquiries, ALMA Impact AG acquires the sender’s address and/or any other personal data, which will be processed exclusively for the purpose of responding to the enquiry. The data is stored for the time required to process your request.

3) Processing of personal and contact data (e.g. first name and surname, billing address, e-mail address and, date of birth, mobile phone number

for natural persons) for the purpose of creating an account on the website and administrative and accounting management of the order placed (e.g. payment, invoicing, order confirmation). Account-related data is stored until the account is deleted. The data acquired therein for administrative and accounting purposes are kept for 10 years following termination of the relationship with the Company (order and purchase data, invoicing data).

4) Processing of e-mail/phone contact data for the management of service communications related to your registrations: communication of the status of your registrations to courses, conventions or webinars, confirmations of registration to training initiatives in which you have enrolled, communications of modification or cancellation of training initiatives in which you have enrolled. The data is kept as long as the service you have purchased is in existence.

5) Processing of e-mail contact data in the context of soft spam.

If you have provided us with your personal data, e.g. on the occasion of a promotional initiative, an event, we may send you e-mails or other messages relevant to the service you have requested.

If you have provided us with your personal data when registering for an educational initiative, we will inform you about similar initiatives. If necessary, we will contact you after your participation in a training initiative or another type of event to find out what you think about it. You can remove yourself at any time, free of charge and with immediate effect, from the list of recipients of these communications: just send us an e-mail (as provided in the Rights of the Data Subject section). The data are stored until you unsubscribe from the service (opt out).

6) Subject to your explicit consent, direct marketing activities – we may contact you via the contact data provided by you (by post, e-mail, telephone or other electronic means) for the purposes of marketing, advertising and surveys. This will be, for example, information on training initiatives, webinars, etc., special offers, promotional initiatives.

In order to be able to communicate information of interest to you, data about your interaction with ALMA Impact AG, e.g. your participation in training programmes, your evaluations and reviews of courses or conferences, will be analysed and used in combination.  You may revoke your consent at any time (as provided in the section Rights of the Data Subject). The data is stored until you revoke your consent.

Method of processing 

Personal data is processed using paper, computer, telematic and automated tools. All in compliance with the confidentiality guarantees and security measures provided for by the regulations in force, with logic strictly related to the purposes of processing. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access.  

Categories of recipients

Data of a personal nature supplied will be communicated to recipients, who will process the data in their capacity as data processors for the purposes listed above or as data controllers, or to authorised personnel acting on the instructions of the data controller. Specifically, the data will be communicated to – subjects that provide services for the management of the information system used by the Data Controller and of the telecommunications networks (including e-mail, the website); – firms or companies in the context of assistance and consultancy relationships, for example, for the purpose of managing the website; – competent authorities for compliance with legal obligations and/or provisions of public bodies, upon request; – partners including university bodies that provide the services requested.

Communication of Data Abroad 

Personal data is communicated abroad in accordance with the DPA and the GDPR. In particular, ALMA Impact AG is a company under Swiss law, located in the territory of the Swiss Confederation. The Data Controller uses validated suppliers for the provision of services. In particular, the website is allocated in Switzerland and the customer data are allocated on CRM located in Germany. The data therefore reside in countries that grant an adequate level of protection in accordance with the DPA and in compliance with the GDPR.  

Rights of the data subject

ALMA Impact AG reminds the data subject that it is possible at any time to obtain confirmation of the existence or non-existence of the data and to know its content and origin as well as the logic on which the processing is based, to verify its correctness or to request that it be supplemented, updated, or corrected.

The data subject also has the right to request the deletion, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing.

For processing relating to direct marketing (in ‘traditional’ and ‘automated’ form), it will always be possible to withdraw consent and exercise the right to object. The objection, in

absence of any indication to the contrary, will refer to both traditional and automated communications. In order to exercise the above rights, a request must be sent to the mailbox


Privacy policy update date: 26 March 2024