Privacy Policy

Global Crewing Association, Seestrasse 353, 8038 Zürich, Switzerland, UID CHE-474.504.442 (association registered in the Commercial Register of the Canton of Zurich) (“GCA”, “we”) is the controller for the personal data described here. Contact: office@crewing.global.

This policy covers crewing.global and the GCA Member Portal at portal.crewing.global. We process personal data in line with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

• Account data: name, e-mail address, company, role in the company and in GCA.
• Membership data: company name, country, membership status and validity, dues status.
• Application data: information you submit when applying to join GCA, including company details and declarations.
• Sign-in data: if you sign in with Google, we receive your name and e-mail address from Google. We do not receive your Google password.
• Technical data: log data such as IP address, time of access and browser type, kept for security and troubleshooting.
• Communications: e-mails you send us and e-mails we send you (sign-in links, invitations, notifications about new materials).

• To run the membership: admit members, manage accounts, show member companies to the GCA board and secretariat. (FADP; GDPR Art. 6(1)(b) — contract/membership)
• To provide the portal and keep it secure, including bot protection. (GDPR Art. 6(1)(f) — legitimate interest)
• To send service e-mails and, if you keep the option on, notifications about new materials. You can switch notifications off in the portal at any time. (GDPR Art. 6(1)(b) and (f))
• To comply with legal obligations. (GDPR Art. 6(1)(c))

We do not sell personal data and do not use it for advertising.

We use the following providers, who process data on our behalf:

• Supabase (database and authentication) — servers in Frankfurt, Germany (EU).
• Hetzner Online GmbH (website and portal hosting) — Germany (EU).
• Resend (transactional e-mail delivery).
• Cloudflare, Inc. (Turnstile bot protection on sign-in forms).
• Google (optional “Sign in with Google”).

Some providers may process data outside Switzerland and the EU/EEA, in particular in the United States. In such cases we rely on an adequacy decision (including the Swiss-U.S. and EU-U.S. Data Privacy Framework where the provider is certified) or on standard contractual clauses.

• Members see their own company and its people.
• The GCA board can view all member companies (read-only).
• GCA administrators manage memberships and applications.

• Account and membership data: for the duration of the membership and up to 12 months after it ends, unless law requires longer.
• Rejected or withdrawn applications: up to 12 months.
• Technical logs: up to 90 days.

The portal stores a sign-in session in your browser so that you stay signed in. This is strictly necessary for the service. We do not use advertising or tracking cookies.

You can request access to your data, correction, deletion, restriction, data portability, and object to processing based on legitimate interest. Write to office@crewing.global. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you are in the EU/EEA, with your local data protection authority.

We may update this policy. The current version is always published on this page with its date.