Institute of European Standards and Quality 
Responsible controller
The identity and contact details of the controller determine responsibility for the processing described in this notice.
The controller for website correspondence is Institute of European Standards and Quality (IESQ), c/o Dominik Betschart, Einschlagweg 12, 4153 Reinach BL, Switzerland. Email: info@iesq.org. For correspondence that requires a reference, use the enquiry form.
Address privacy correspondence to the Institute through the privacy enquiry route.
Information and sources
A request, application or subscription can involve contact details, professional information and the information supplied about the matter. Technical website information is addressed alongside the actual technologies used. The processing schedule identifies the categories and sources for each activity.
The website records the name, email address, subject, professional details and message entered in a form, together with a submission reference and date. A short-lived hash derived from the connection address is used to limit abusive submissions. Cloudflare processes connection and request information to deliver and protect the website. Information comes from you and from the connection used to access the service.
Purposes and legal basis
Personal information is handled for identified purposes connected with the relevant activity. A business request, an application and an optional subscription are not a single processing purpose. The applicable basis and the consequences of providing or withholding information are specified for each activity.
Contact details and message content are used to record, route and respond to a request and take steps requested in relation to an arrangement. Security information is used to prevent abuse and maintain reliable services. Required fields are marked on each form; without them the request cannot be recorded. Newsletter interest is recorded separately from a business request and is not treated as consent to unrelated marketing. No payment or identity-document collection takes place through these forms.
Recipients and service providers
Access and disclosure must relate to the purpose and the responsibilities of the recipient. A request may require information to be considered by the relevant function or authorised provider. The schedule identifies the actual recipients or categories involved.
The Institute receives correspondence. Cloudflare provides website delivery, form processing, database hosting and email routing. Mail addressed to info@iesq.org is forwarded to the Institute’s designated mailbox hosted by NetEase (126.com). Access is limited to the handling of the correspondence concerned. Technical material requiring a separate confidentiality arrangement should not be uploaded or included in a general enquiry.
International transfers
Where information is transferred across relevant legal boundaries, the applicable arrangements and means of obtaining information about safeguards must be identified. The use of an international institutional name does not determine where data is stored or processed.
Cloudflare operates an international network. The designated correspondence mailbox is provided by NetEase in China. Sending email or using a form may therefore involve processing outside Switzerland and the European Economic Area. Do not send sensitive personal information or confidential technical files through these channels. Ask the Institute about a suitable arrangement before exchanging restricted material. See Cloudflare’s data processing information for its provider terms.
Retention
Retention is linked to the purpose, applicable obligations and the need to maintain appropriate records. News preferences, unsuccessful applications and issued-result records may require different treatment.
Online form records are automatically removed from the website database after 365 days. Security rate-limit records expire after one hour. Correspondence retained separately for an active matter is kept for the duration of that matter and any applicable record-keeping obligation. You may request review of the information retained about your request.
Rights and requests
Depending on the applicable law and circumstances, rights can concern access, correction, erasure, restriction, objection, portability and withdrawal of consent. Their availability and limits differ. A request should identify the processing concerned; proportionate identity checks may be necessary.
Use the privacy enquiry route or info@iesq.org to request access, correction or deletion, or to raise another applicable data-protection right. Identify the request or information concerned. Rights are handled subject to applicable law and any obligation to retain particular records.
Complaints and oversight
A privacy concern can be raised through the identified controller contact. Applicable law may also provide a right to complain to a competent supervisory authority. That route depends on the relevant facts and jurisdiction.
In Switzerland, information about data protection and oversight is available from the Federal Data Protection and Information Commissioner. You may contact the competent authority where applicable.
Notice information
The notice should be read with any activity-specific information provided when data is collected. A material change in processing requires corresponding review of that information.
The website does not make automated decisions on membership, applications, assessments or appeals. A submission receipt confirms recording only.
Effective date: 19 October 2026.