World Economic Forum Privacy Policy
Last updated: 8 March 2021
1. Scope of this Privacy Policy
The World Economic Forum and its offices worldwide (the “Forum”, “we”, “us” and
“our”) are committed to safeguarding your privacy and ensuring that you continue to trust the
Forum with your personal data.
ESMS is a staff and event registration and management system. This application is developed, owned
and used by the Forum to register staff and external resources to Forum events, including related
activities like hotel bookings, flight bookings and venue access (“ESMS Platform”).
This Privacy Policy (“Policy”) informs our external staff (“you”, “your”) about
how and what type of personal data the Forum collects about you when accessing the ESMS Platform a
in accordance with the Swiss Federal Act on Data Protection of 19 June 1992 (Status as of 1 January
2014) as well as any other applicable data protection laws and for the purposes described in this
Policy.
2. What information do we collect and for what purposes?
Personal data that you provide for your registration to this service, in particular name, address,
email, copy of passport, date of birth, are used by the Forum for the purposes of concluding event
registration and related activities like hotel bookings, flight bookings and venue access.
3. On what legal basis are we processing your personal data?
The processing of your personal is necessary for the performance of a contract to which you are a
party or in order to take steps at your request prior to entering a contract and our legitimate
interest as an organization to organize the events and manage the security at the events.
The Forum may use the personal data that you provide to us with your consent for a specified
purpose.
4. Who do we share your personal data with?
The Forum operates at a global level and, as a result, your personal data may be transferred to, and
processed in, countries that are located outside the European Union / European Economic Area
(EU/EEA).
Specifically, the personal data that you provide in connection of your access to ESMS Platform is
stored and processed by the Forum in Switzerland and/or EEA. If applicable, your personal data may
be transferred to the United States where it may be processed by the World Economic Forum LLC (USA)
and to other countries outside the EU/EEA where the Forum entities are established.
The Forum shares your personal data with third party service providers (e.g. to host your data, for
security purposes or to provide any other support services to the Forum). For example, your data
will be accessed and processed by our third-party data processor, PublicisLive, based in
Switzerland, as our official provider for logistics and support services for our Events, who also
manages the ESMS Platform on behalf of the Forum. The Forum will ensure that any third parties who
are given access to your personal data are only permitted to process the personal data exclusively
for the purposes set out in this Policy and in accordance with the instructions provided by the
Forum.
Finally, the Forum may share your personal data with local authorities to the extent deemed
necessary by the Forum for the purposes set forth in this Policy, in particular for security
reasons, or as required by mandatory applicable local laws and regulations.
5. How do we store and transfer your personal data?
The Forum will retain your personal information for the period necessary to fulfil the purposes
outlined in this Policy.
For example, we may retain personal data we obtain from you where we have an ongoing legitimate
business need to do so (for example, to manage our relationship with you, to provide you with
service(s) you have requested or to comply with applicable legal requirements).
When transferring personal data internationally according to section 4 of this Policy, we make sure
that we comply with applicable laws and regulations, for example, by entering into agreements that
will ensure that the recipients of your information maintain an adequate level of data protection.
For example, we may utilize standard contract clauses approved by the European Commission, adopt
other means under Swiss and European Union law and/or obtain your consent to legitimize data
transfers from the EEA to the United States and other countries.
6. “Cookie Notice”
6.1 About cookies
A cookie is a small piece of information that a web server asks the user’s browser to store on the
user’s local computer, and then later their browser presents this information to the web server. In
its simplest form, a cookie is an identifying number.
6.2 What type of cookies do we use?
ESMS uses session cookies for tracking user logins and ensuring that the authenticated user is
allowed to access to authenticated services. Session cookies only last as long as the session
(usually the current visit to a website or a browser session).
6.3 How do we use cookies?
The Forum does not know the identity of a person based on the ID. The cookies used by the Forum do
not contain any personal data about you nor are they used to look up your personal data. Even if you
have entered personal data about yourself in one of the Forum’s registration forms, the Forum does
not relate that information to the cookie data.
7. Your data protection rights
You have the following data protection rights:
- You may request access to and obtain a copy of your personal data.
- You may also request that any personal data that is inaccurate or incomplete be rectified or
completed.
- You may request that your personal data be erased under certain legal conditions (for example,
where the personal data is no longer needed to achieve the purposes for which the information
was initially collected).
- In addition, you may object to the processing of your personal data, ask us to restrict
processing of your personal data or request portability of your personal data under certain
legal conditions.
- You can withdraw your consent at any time. Withdrawing your consent will not affect the
lawfulness of any processing we conducted prior to your withdrawal, nor will it affect
processing of your personal data conducted in reliance on lawful processing grounds other than
consent.
- You have the right to complain to a data protection authority about our collection and use of
your personal data. For more information, please contact your local data protection authority.
Contact details for data protection authorities in the European Economic Area, Switzerland and
certain non-European countries (including the US and Canada) are available here.
You may exercise any of the rights above at any time by contacting us as described under the “How to
contact us” section below. We will respond to your request in accordance with applicable Data
Protection Laws.
8. How can you contact us?
If you have any queries regarding the processing of your personal data, or if you wish to exercise
your rights, please contact us by filling in the form at https://wef.ch/MyData
9. Data Controller details
The Forum is the data controller for personal data we collect through means stated in this Policy.
Our address is:
World Economic Forum
91-93 Route de la Capite
CH-1223 Cologny/Genève
Switzerland