This document constitutes the Data Protection Statement (hereinafter referred to as DPS) of the International Project Management Association (hereinafter referred to as the Association), with its registered office in Zürich, Switzerland. 

Each user of the website www.ipma.world is bound by the current DPS as published on the indicated website. 

If you do not agree with this DPS, please do not visit www.ipma.world.

 

1. Responsibility

Responsible for the data processing as described in this DPS is the Association. You can notify us of any data protection–related concerns using the following contact details: 

International Project Management Association (IPMA)
Legal address: Fraumünsterstrasse 17, 8001 Zürich, Switzerland 

Operational address: Berencamperweg 10, 3861 MC Nijkerk, The Netherlands 

Email: info@ipma.world 

The Association acts as a “data controller” within the meaning of the EU General Data Protection Regulation (GDPR) and the revised Swiss Federal Act on Data Protection (revFADP). 

 

 2. Types of Personal Data Collected

We may collect and process the following categories of personal data: 

• Directly provided data: such as name, surname, e-mail address and other contact details that you provide when subscribing to newsletters, contacting us via our website, telephone, or e-mail. 

• Technical data: automatically collected when you visit our website, including IP address, domain name, browser type, operating system, and similar technical information. 

• Communication-related data: content of correspondence, job applications, event registrations, and related submissions. 

 

 3. Purpose of Data Processing and Legal Grounds

We primarily process personal data to: 

• perform and administer contracts with clients, partners, and members, 

• support the advancement of project management as a profession, and 

• comply with our legal obligations under Swiss and EU law. 

Processing is based on one of the following legal grounds, as required by GDPR and revFADP: 

• performance of a contract, 

• compliance with legal obligations, 

• our legitimate interests (e.g., improving services, securing IT systems, defending against legal claims), or 

• your explicit consent (e.g., for newsletters or specific marketing activities). 

Consent may be withdrawn at any time without affecting the lawfulness of prior processing. 

 

 4. How the Data Are Used

All processing is carried out in accordance with the GDPR and the revFADP. Your data may be used for: 

• service provision and communication with you, 

• newsletters and marketing (only if you have not objected), 

• event organization, surveys, and promotional campaigns, 

• IT security and fraud prevention, 

• statistical analysis and website optimization (via tools such as Google Analytics). 

The Association is the sole controller of your personal data. Data are not sold or disclosed to third parties except where required by law or necessary for service provision (e.g., IT hosting providers bound by contracts ensuring adequate safeguards). 

 

 5. Use of Cookies

The website www.ipma.world uses cookies and similar technologies. Cookies help identify your browser, improve user experience, and ensure website functionality. 

By continuing to use this website, you consent to the use of cookies. You may disable cookies in your browser settings; however, certain website features may no longer function properly. 

 

 6. Retention Periods

We retain personal data only as long as necessary for the purposes for which they were collected or as required by statutory retention periods (e.g., tax and commercial laws). In most cases, operational data such as system logs are retained for no longer than 12 months. Data no longer required will be deleted or anonymized. 

 

7. Cross-Border Data Transfers

As an international association, the Association may transfer your personal data to recipients located outside Switzerland and the European Economic Area (EEA), including to countries that may not provide an equivalent level of data protection as under the GDPR or the Swiss Federal Act on Data Protection. 

Where such transfers are necessary, we ensure appropriate safeguards are in place, in particular through: 

• adequacy decisions of the European Commission or the Swiss Federal Council (where applicable), 

• the use of standard contractual clauses (SCCs) approved by the European Commission or the Swiss Federal Data Protection and Information Commissioner, 

• or other legally recognised transfer mechanisms, such as binding corporate rules or explicit consent of the data subject. 

You may request further information or a copy of the safeguards applied by contacting us at the addresses indicated in Section 1. 

 

8. Data Security

We implement appropriate technical and organizational measures (e.g., IT safeguards, access restrictions, encryption) to protect your personal data against unauthorized access, misuse, loss, or disclosure. 

 

9. Obligation to Provide Personal Data

To enter into or perform a contractual relationship, you may need to provide certain personal data. Without this data, we may be unable to provide services or enter into agreements. Certain technical information (e.g., IP address) is necessary for the functioning of the website. 

 

10. Your Rights

Under GDPR and revFADP, you have the right to: 

• access your personal data, 

• request rectification or deletion, 

• restrict or object to processing, 

• request data portability, 

• withdraw consent at any time (where consent is the legal basis), 

• lodge a complaint with the competent supervisory authority. 

In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch.
In the EU, you may contact your local data protection authority. 

Identity verification may be required before we can process your request. 

 

11. Deregistration from Marketing

You may at any time opt out of receiving marketing communications or newsletters by contacting the Association or using the unsubscribe function in our messages. 

 

12. Amendments to this DPS

We may update this DPS at any time. The current version published on our website applies. Where material changes are made, we will notify you by e-mail or other appropriate means.