Privacy Policy

**Our promise:**
Your privacy is non-negotiable. We are committed to treating your personal data with the respect and protection they deserve.

**Our fundamental principles:**
• **Total transparency**: We clearly explain what we do with your data
• **User control**: You always keep control over your personal information
• **Data minimization**: We only collect strictly necessary data
• **Enhanced security**: Your data is protected by the best technologies
• **Rights respect**: We respect all your data protection rights

**Our solidarity mission:**
• Facilitate donation and exchange of items with confidence
• Create a caring and secure community
• Promote circular economy while respecting privacy
• Connect people while protecting their intimacy

**Certification and compliance:**
• GDPR compliance (General Data Protection Regulation)
• Compliance with Swiss data protection laws
• Regular security audits
• Ongoing team training on privacy

**Technical security measures:**
• **Advanced encryption**: All your data is encrypted with AES-256
• **Secure connections**: HTTPS/TLS 1.3 protocol for all exchanges
• **Protected servers**: Infrastructure hosted in Switzerland with high security
• **Encrypted backups**: Automatic and secure backup copies
• **24/7 monitoring**: Continuous monitoring against intrusions

**Organizational security measures:**
• **Restricted access**: Only authorized employees access data
• **Strong authentication**: Two-factor authentication for all admin access
• **Security training**: Regular awareness training for our teams
• **External audits**: Security controls by independent experts
• **Response plan**: Emergency procedures in case of incident

**Threat protection:**
• **Advanced firewalls**: Intelligent network traffic filtering
• **Intrusion detection**: Automated anomaly detection systems
• **DDoS protection**: Defense against denial of service attacks
• **Enterprise antivirus**: Protection against malware
• **Penetration testing**: Regular assessments of our defenses

**Location and sovereignty:**
• **Data in Switzerland**: Your information stays on Swiss territory
• **Swiss laws**: Enhanced protection by local legislation
• **No transfer**: No personal data sent outside EU/Switzerland
• **Total control**: Complete mastery of our infrastructure

**Responsible data collection:**
• **Necessity principle**: We only collect data essential to the service
• **Informed consent**: You always know why we collect your data
• **Voluntary opt-in**: No collection without your explicit agreement
• **Sensitive data**: Enhanced protection for personal information
• **Anonymization**: Removal of identifiers when possible

**Ethical use:**
• **Limited purpose**: Your data only serves announced objectives
• **No sale**: We never sell your personal data
• **No spam**: Communications only with your authorization
• **Preference respect**: Honor your privacy choices
• **Total transparency**: Access to all information about you

**Controlled sharing:**
• **Trusted partners**: Rigorous selection of our providers
• **Strict contracts**: Contractual obligations for data protection
• **Minimization**: Sharing the strict minimum necessary
• **Traceability**: Tracking of all access to your data
• **Revocation**: Ability to withdraw your consent at any time

**Limited retention:**
• **Defined periods**: Clearly established retention periods
• **Automatic deletion**: Scheduled erasure of obsolete data
• **Secure archiving**: Enhanced protection of retained data
• **Right to be forgotten**: Deletion of your information on request

**Your fundamental rights:**
• **Right of access**: View all your personal data
• **Right of rectification**: Correct your inaccurate information
• **Right to erasure**: Delete your data (right to be forgotten)
• **Right to portability**: Retrieve your data in a standard format
• **Right to object**: Refuse certain processing of your data
• **Right to restriction**: Restrict the use of your data

**Facilitated exercise of your rights:**
• **Dedicated interface**: Control panel in your account
• **Simplified requests**: Clear and accessible forms
• **Quick response**: Processing within 30 days maximum
• **Support**: Personalized support for your requests
• **Free of charge**: No fees to exercise your rights

**Dedicated privacy support:**
• **Specialized team**: Data protection experts
• **Direct contact**: privacy@gibgib.ch
• **Guaranteed response**: Acknowledgment within 48h
• **Personalized follow-up**: Support until resolution
• **Escalation**: Access to Data Protection Officer

**Appeals and mediation:**
• **Internal complaint**: Amicable resolution process
• **Control authority**: Right to contact PFPDT (Switzerland)
• **European mediation**: Appeal to GDPR authorities
• **Legal action**: Right of appeal before courts
• **Compensation**: Repair in case of proven damage