This privacy policy describes the personal data we process when you visit this website and the purposes for doing so. It follows the revised Swiss Federal Act on Data Protection (revFADP). The General Data Protection Regulation (GDPR) also applies to visitors from the European Economic Area.
Last updated: November 2026
1. Controller
The controller responsible for processing personal data on this website is:
Eventforum Bern
Fabrikstrasse 12
3012 Bern
Switzerland
Email: info@eventforumbern.ch
VAT number: CHE-106.255.585
The controller is the person or entity that, alone or jointly with others, determines the purposes and means of processing personal data.
2. Principles
We process personal data only to the extent necessary to operate this website, respond to your enquiries and provide our services. We do not sell personal data. We disclose it to third parties only in the cases described in this policy, for example to Google when measuring our advertisements (section 12).
Personal data means any information relating to an identified or identifiable person, such as a name, address, email address or telephone number.
Analytics and audience measurement
This website measures its audience and analyses usage. We use Google Analytics 4 and Google Ads with conversion measurement for this purpose. Without your consent, both operate without cookies and without a device identifier (Google Consent Mode). Google nevertheless technically receives your IP address.
We also count visits using our own cookieless measurement on our server. It sets no cookies and stores no IP addresses: an identifier is generated from the IP address, browser and a random value that changes daily, and cannot be linked to anyone the following day. To group the pages of a single visit, it stores a random visit identifier (efb_sid) in the browser’s session storage; it expires when you close the tab. We record pages viewed, the source of the visit (such as a search engine or advertisement), device type, country, time spent, scroll depth and button clicks. In the booking form, it records which fields are selected and at which field a submission fails, but never what you enter. This measurement does not take place if your browser sends a ‘Do Not Track’ or ‘Global Privacy Control’ signal.
Sections 11 and 12 explain which information is processed, how long it is retained and how to withdraw your consent.
Sections 7 to 10 describe other third-party services: event broadcasts via Vimeo, the map on the ‘Contact’ and ‘Directions’ pages, the timetable search on the ‘Directions’ page and appointment booking via Calendly.
3. Your rights
Under applicable law, you have the following rights in particular:
- Access to information on whether and which personal data we process about you
- Rectification of inaccurate data
- Erasure of your data, unless a statutory retention obligation prevents it
- Delivery or transfer of data you have provided to us
- Objection to processing
- Withdrawal of consent at any time, with effect for the future
To exercise these rights, simply send a message to info@eventforumbern.ch. We may request proof of identity to avoid disclosing another person’s data.
If you believe that our processing of your data breaches data protection law, you may contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. Visitors from the European Economic Area may also contact their competent data protection authority.
4. Hosting and delivery
This website is hosted by an external service provider:
Hostinger International Ltd., Jonavos g. 60C, 44192 Kaunas, Lithuania
All data generated in operating this website is stored on the provider’s servers. The provider processes this data on our behalf and is contractually bound to maintain confidentiality and comply with data protection law.
The website is delivered through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare speeds up access to the site and protects it against denial-of-service attacks. Your IP address is processed in doing so. Cloudflare operates locations worldwide, including in Switzerland and Europe; processing generally takes place at the nearest location.
Server log files
When you access a page, the server automatically collects information transmitted by your browser:
- IP address
- Date and time of access
- Address accessed and volume of data transferred
- Browser type and version, and operating system used
- Previously visited page, if your browser transmits it
We need this information to deliver the page technically and identify faults and attacks. It is not combined with other data or used to identify individuals. The logs are automatically deleted after a short time.
5. Cookies
Cookies are small text files stored on your device. Without your consent, this website sets only its own cookies. The following are necessary for its operation:
- WordPress session cookies when you log in as an editor
- An access cookie for protected livestreams, see section 7
There is also a cookie recording your consent. It records which services you have accepted so that we do not have to ask again on every visit. It is also set if you reject everything, as we need to remember that decision too. This cookie is stored for one year.
Our own cookies recording the source of your enquiry. On your first visit, this website stores the source of the visit in its own cookies: the landing page accessed, the referring website, any campaign parameters in the address (utm) and the click identifier of a Google or Microsoft advertisement (gclid, msclkid).
The cookies are named efb_landing, efb_channel, efb_referrer, efb_utm_source, efb_utm_medium, efb_utm_campaign, efb_gclid and efb_msclkid. They are retained for 90 days, read only by us and never disclosed to third parties. Their content is used only when you submit an enquiry through the booking form. The enquiry’s source is then also saved so that we know how enquiries reach us.
When you submit the form, we also briefly set the efb_cw cookie for no more than 15 minutes, containing a rough estimate of the order value based on participant numbers and duration, a random submission receipt and the counting status. This assigns a value to a successfully submitted enquiry and prevents it from being counted again when the page is reloaded. Names, email addresses and form contents are not stored in it. The legal basis is our legitimate interest in managing our advertising and visibility cost-effectively.
We set analytics and advertising cookies only if you have agreed in the consent dialogue. Sections 11 and 12 explain which cookies these are.
You can change your decision at any time using the ‘Change privacy settings’ link further up this page. Cookies can also be deleted or blocked in your browser settings. Blocking necessary cookies may prevent some parts of the website from working.
6. Enquiries via forms and email
This website provides forms for booking and consultation enquiries. They use Fluent Forms software operated on our own server. The information is not transmitted to an external form service. So that we can process your enquiry, an automated workflow on our own server at Contabo in the EU transfers the information to our internal event management in Microsoft 365.
We process the information you enter in the form, particularly your company, address, email address, telephone number and details of your planned event. We use it solely to answer your enquiry and prepare the event. Submissions are also delivered to our inbox as emails. Together with the enquiry, we store the source of the visit (section 5). Google only receives notice that an enquiry was submitted, with an estimated value, never the information you entered in the form (section 12).
The legal basis is taking steps to enter into or perform a contract and our legitimate interest in answering enquiries. We retain the data until your enquiry has been fully handled. If it results in an order, statutory retention periods apply, particularly the ten-year period for business records under the Swiss Code of Obligations. Enquiries that do not result in an order are deleted no later than twelve months after the last contact.
The same applies if you contact us directly by email: we process your information only to respond to your request.
7. Livestream area
We provide broadcasts through this website for selected events. Access may be open or protected, depending on the event.
Access to protected broadcasts
For a protected broadcast, depending on the event, we require a password-protected user account, your first and last names, or both before granting access. The organiser of the relevant event provides your access details.
- Name details are stored in our database together with the date and time. The event organiser receives this participant list. The basis is our legitimate interest and that of the organiser in knowing who attended a closed event. We delete the list no later than twelve months after the event.
- A technical cookie remembers for twelve hours that access has been granted, so you do not need to re-enter the details whenever you open a page. It contains no plain-text data and is protected against alteration.
- Your IP address is stored briefly if login fails. This prevents automated attempts to guess passwords. The information is automatically deleted after fifteen minutes.
Vimeo
The broadcasts themselves use Vimeo. The provider is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA.
When you open a page with a broadcast, your browser connects to Vimeo’s servers. Vimeo receives your IP address and information on which page you visited, and may set cookies on your device. If you are logged into Vimeo, it may associate this information with your account. We have no influence over the scope or purposes of Vimeo’s processing.
We use Vimeo to make events accessible to people who cannot attend in person. The connection to the USA relies on Vimeo’s standard contractual clauses. Details are available in Vimeo’s privacy policy at vimeo.com/privacy.
8. Map on the ‘Contact’ and ‘Directions’ pages
On the ‘Contact’ and ‘Directions’ pages, we show a map section to help you find us. The map image is stored on our own server and is based on OpenStreetMap data (© OpenStreetMap contributors, OpenMapTiles, OpenFreeMap). Displaying it does not connect to any map service.
Google Maps loads only if you want it to: when you click ‘Show interactive map’ or if you have agreed to Google Maps in the consent dialogue. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your browser then connects to Google’s servers. Google receives your IP address and technical information about your device and browser, and may set cookies. If you are logged into your Google account, Google may associate usage with that account.
The legal basis is your consent, given by clicking the button or agreeing in the consent dialogue. You can withdraw it at any time using the ‘Change privacy settings’ link further up this page. The route planning button opens Google Maps in a new window, where Google’s privacy policy applies.
Google also processes data outside Switzerland and the EEA, including in the USA, India, Singapore, Taiwan, Australia, Brazil, Chile, Hong Kong, Indonesia and Qatar. Some of these countries have no adequacy decision. Transfers rely on the European Commission’s standard contractual clauses and Google’s certification under the EU-US Data Privacy Framework.
Details of Google’s processing are available at policies.google.com/privacy.
9. Timetable and car park occupancy on the ‘Directions’ page
On the ‘Directions’ page you can search for a public transport connection to Eventforum Bern. As soon as you enter a place, start a search or choose ‘Use my location’, your browser sends this information directly to the timetable service transport.opendata.ch, a service of the Opendata.ch association in Switzerland; the timetable data comes from opentransportdata.swiss. The service receives your IP address, technical information about your browser and the search details (starting point, date and time).
Without your input, no connection to the timetable service is made. Your browser only asks for your location when you click the button, and only with your permission; the coordinates go only to the timetable service to find the nearest stop. Eventforum Bern neither receives nor stores any of this information. The basis is your request: you start the search yourself.
The calendar file and the link for sharing are created in your browser; no data is transmitted. If you choose ‘Open on sbb.ch’ or ‘Start navigation’, you move to the SBB or Google Maps website, where their privacy policies apply.
Our server fetches the free spaces at P+R Neufeld from the Bern parking guidance system (parking-bern.ch). No data about you is transmitted.
10. Appointment booking via Calendly
You can book an appointment directly on the event consultation page. We use Calendly for this purpose. The provider is Calendly LLC, 271 17th St NW, Atlanta, Georgia 30363, USA.
Calendly loads as soon as you open the page. Calendly receives your IP address, technical information about your browser and information on which page you visited, and may set cookies on your device. When booking an appointment, you also provide your name, email address and preferred time. Calendly processes this information on our behalf so that we can confirm the appointment.
The basis is our legitimate interest in straightforward appointment scheduling and taking steps to enter into and perform the contractual relationship. Calendly also processes data in the USA and relies on the European Commission’s standard contractual clauses for transfers.
If you do not wish to connect to Calendly, please do not book an appointment through this page. Instead, email us at info@eventforumbern.ch or use the booking form. Details of Calendly’s processing are available at calendly.com/de/privacy.
11. Google Analytics
This website uses Google Analytics 4, an audience measurement service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics helps us understand which content is in demand and where visitors encounter difficulties. Cookies are set and the following information is analysed:
- Pages viewed and time spent
- Approximate city or regional location, derived from the IP address
- Device, operating system and browser used
- The page from which you reached us
- Completed enquiries through our forms
According to Google, Google Analytics 4 does not store IP addresses; they are used only to derive the approximate location. We do not associate it with you personally. If you are logged into your Google account, Google may associate usage with that account; we have no influence over this.
Google may also process data outside Switzerland and the EEA. Transfers rely on the European Commission’s standard contractual clauses and Google’s certification under the EU-US Data Privacy Framework.
Before you give consent, the Google tag transmits only signals without cookies or a device identifier (Google Consent Mode). Technically, Google receives your IP address in the process. Google uses these signals to estimate usage in aggregate. Google Analytics sets cookies only after you agree in the consent dialogue; only then is the information listed above analysed for each visit. The legal basis for cookieless measurement is our legitimate interest in a functioning and cost-effective website; your consent is the basis for all further processing. You may withdraw your consent at any time with effect for the future using the ‘Change privacy settings’ link further up this page.
The data collected is automatically deleted after 14 months. Details of Google’s processing are available at policies.google.com/privacy. You can prevent collection generally using the browser add-on at tools.google.com/dlpage/gaoptout.
12. Google Ads and conversion measurement
We advertise using Google Ads. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
If you reach this website through one of our advertisements, Google sets a cookie that shows us which advertisement led to an enquiry. We see only the total number of enquiries per advertisement, not which individual clicked. If you have consented, we can show you advertisements again if you have previously visited our website.
Before you give consent, the tag reports an enquiry to Google only without cookies or a device identifier (Google Consent Mode), together with an estimated value and a random receipt number; technically, Google receives your IP address in the process. Google sets the cookie that attributes the advertisement only after your consent. The legal basis for cookieless reporting is our legitimate interest in cost-effective advertising. The provider, transfers to third countries and withdrawal of consent are as described for Google Analytics in section 11.
Clicks from Google advertisements: If a visit originates from a Google advertisement, the browser stores Google’s click identifier (gclid) in session storage for the duration of the visit. When the page changes, we report this identifier, the page path and the seconds since access to our server. No cookie is set and no IP address is stored. The entry is used solely to assess whether an advertisement generates useful visits. The legal basis is our legitimate interest in cost-effective advertising.
13. File delivery
On the ‘Files’ page, you can send us files for your event, such as presentations, videos or logos. Conversely, we provide files there for you to download. We process your email address, optionally your name or company and a comment, and the files themselves with their name, size, date and time.
- Storage: files first arrive in a Cloudflare storage service in the EU (Cloudflare R2). Our own server at Contabo in the EU then copies them to your event’s folder in our Microsoft 365 storage (SharePoint). Shortly before the event, we also place them in our Dropbox so that they are available on site.
- Retention: files are deleted automatically from the interim storage after 30 days. In our storage, they remain with your event’s documents for as long as we need them for the event and its follow-up. Files we provide to you can be downloaded via the link for 14 days.
- Access: only our staff looking after your event have access.
- Sign-in: if you sign in with a link sent by email, a cookie in the ‘Files’ area remembers the sign-in for 30 days.
The legal basis is the preparation and running of your event. Cloudflare, Contabo, Microsoft and Dropbox process the data on our behalf. Microsoft and Dropbox may also process data in the USA; transfers rely on the European Commission’s standard contractual clauses and on certification under the Data Privacy Framework.
14. Disclosure to third parties
We disclose personal data where necessary to provide our services or where required by law. Recipients may include:
- Service providers working on our behalf, for example in hosting, website maintenance or accounting
- Providers with whom we store files, emails and documents, such as Microsoft 365 and Dropbox
- Event organisers, in relation to the participant list for a protected broadcast
- Authorities and courts where we are legally required to disclose data
Service providers may process data only in accordance with our instructions.
15. Data security
This website is transmitted using encryption, indicated by ‘https’ in the address bar and the padlock symbol in your browser. This prevents third parties from readily reading data you send to us.
We also take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. However, complete security cannot be guaranteed for transmission over the internet.
16. Changes to this policy
We may amend this privacy policy if our website, services or legal requirements change. The version published here is the applicable version. The date at the beginning indicates when it was last updated.
