Privacy Policy
H4 – Hands-on Human Health Hub, affiliated with La Source Institute, places particular importance on the protection of personal data. Personal data collected in connection with Défi Source are processed solely for the purposes of organising the event, managing its administrative and operational aspects, communicating with the individuals concerned, and implementing activities and services related to the event. Such data are processed in accordance with applicable Swiss data protection legislation.
For the purposes of this Privacy Policy, the term “Défi Source Organisers” refers to H4 and the Institut et Haute Ecole de la Santé La Source.
The data is processed in accordance with:
- the revised Swiss Federal Act on Data Protection (FADP);
- its implementing ordinance (Data Protection Ordinance, DPO);
- and the requirements applicable to higher education and research institutions.
Data Controller
The data controller within the meaning of applicable data protection regulations is:
Institut et Haute École de la Santé La Source
Data Protection Officer
Av. Vinet 30
1004 Lausanne
Phone: 021 556 40 00
Email: dpo@ecolelasource.ch
1. Personal Data Collected
1.1 Categories of Data
Personal data are collected and processed (manually or automatically) in whole or in part when you browse the website and/or provide information through forms available on the site, as well as in connection with your registration for, participation in, and interactions with the Défi Source Organisers.
Several categories of personal data may be collected, including:
- identification data, such as your title, first name, last name, contact details (email address, telephone number, postal address), and professional information;
- data relating to your interactions with the Défi Source Organisers, including requests for information, correspondence, communications, and communication preferences;
- data relating to your application to or participation in Défi Source, including information provided in application, registration or team formation forms;
- data relating to your participation in Défi Source activities, such as workshops, coaching sessions, expert clinics, the hackathon, and the closing event;
- data relating to projects submitted or developed as part of Défi Source, to the extent that such information constitutes personal data;
any other personal information you may provide in the course of your interactions with the Défi Source Organisers.
1.2 Purpose of Processing
Personal data are processed, in whole or in part, for the following purposes:
- managing, processing and monitoring your requests, applications, registrations and communications with the Défi Source Organisers, including those submitted through the website;
- organising, coordinating and delivering Défi Source activities, including project selection, team formation, workshops, coaching sessions, expert clinics, the hackathon and the closing event;
- communicating with participants, project holders, experts, coaches, partners, jury members and any other individuals involved in the event;
- managing the administrative and operational aspects of Défi Source, including the allocation of awards and distinctions and the follow-up of participant relations;
- the measurement and improvement of website traffic, user experience, and usability;
- pursuing the legitimate interests of the Organisers in connection with the organisation, improvement, evaluation and promotion of Défi Source;
- complying with applicable legal and regulatory obligations.
1.3 Disclosure
The Défi Source Organisers do not disclose your personal data to third parties, except where required by a legally competent authority pursuant to a legal obligation, or where disclosure is necessary to protect your vital interests.
1.4 Retention Period
We retain your personal data in a form permitting identification only for as long as necessary to fulfil the purposes for which the data were collected.
| Category of Data | Retention Period |
|---|---|
| Contact and information requests | 12 months after the request has been processed |
| Unsuccessful applications | 12 months after the selection decision |
| Participation data and project submissions | 5 years after the relevant edition |
| Newsletter subscriptions | Until you unsubscribe |
| Website analytics data | 2 months, automatically deleted thereafter |
| Server log data | 7 days |
You may exercise your right to request deletion of your personal data at any time, as described in the section “Rights of Data Subjects” below.
1.5 Processors
Where the Défi Source Organisers delegate processing activities to third parties, they ensure that such processing is governed by a written agreement containing provisions that provide a level of protection for personal data at least equivalent to that described in this Privacy Policy and compliant with Swiss data protection legislation.
The categories of data processors engaged are as follows:
- Website hosting: Infomaniak Network SA, Geneva, Switzerland;
- Website technical maintenance: Stimul, Fribourg, Switzerland;
- Audience measurement and analytics: Google Ireland Limited, as described in Section 1.8.
1.6 Data Protection Measures
The Défi Source Organisers implement security measures in accordance with Swiss data protection requirements. Appropriate technical and organisational measures are maintained to ensure the confidentiality, integrity and availability of data, as well as the resilience of systems and services.
1.7 Data Transfers
Information relating to your registration may be transferred to servers operated on behalf of the Organisers and hosted outside Switzerland. Such transfers are carried out only to countries providing an adequate level of protection or subject to safeguards recognised under Swiss data protection law.
1.8 Cookies and Audience Measurement
The website uses cookies, which are small files stored on your device when you visit the site.
Strictly Necessary Cookies. These cookies enable the website to function properly, remember your cookie preferences, and ensure the security of online forms. They are essential and cannot be disabled.
Audience Measurement Cookies. We use Google Analytics 4, a service provided by Google Ireland Limited, to understand how the website is used and to improve its content. The data collected may include pages visited, duration of visits, traffic sources, device type, browser information, and a truncated IP address. This data does not directly identify you.
These cookies are only placed after you have provided your consent during your first visit to the website. Until such consent is given, no audience measurement data is collected or transmitted.
You may change or withdraw your consent at any time via the [cookie settings link] available at the bottom of each page. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
You may also install the Google Analytics opt-out browser add-on provided by Google.
Audience measurement data is retained for 2 months and then automatically deleted.
1.9 Images and Image Rights
Photographs and video recordings may be taken during the Défi Source event and used by H4 for information, communication, promotional, and archival purposes. Participants who do not wish to appear in such materials are invited to inform the organizers in accordance with the procedures set out in the event rules and regulations. Reasonable measures will then be taken to respect this preference during both the recording and dissemination of content.
For any questions regarding the use of your image, you may contact the organizers at contact@h4vd.ch.
2. Rights of Data Subjects
The Défi Source Organisers wish to ensure that you are fully aware of your rights under applicable Swiss data protection legislation. You are entitled to:
- access, amend, update and correct any personal data we hold about you;
- request the deletion or restriction of processing of your personal data, or exercise your right to data portability via the contact details provided above;
- withdraw at any time any consent you have previously given for the processing of your personal data.
3. Amendments to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to the website, the tools and services used, or applicable legal requirements. The version published on this page is the version currently in force.
Last updated: October 1, 2026