Privacy Policy

This notice explains how Innixus Group Sàrl collects, uses, discloses and protects personal data in connection with the Halif Hatch website, the application process and the delivery of the Halif Hatch program.

It has been prepared to ensure compliance in particular with the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection.

1. Who we are

The controller of your personal data for the application process is:

Halif Hatch is a venture-building program operated by Innixus Group Sàrl in partnership with Tahaluf Al Emarat Technical Solutions LLC, based in the United Arab Emirates.

Tahaluf takes part in the design and delivery of the program and, for selected applicants, may act as a separate controller of personal data for the purpose of program delivery. Innixus and Tahaluf have entered into a written data protection agreement governing how personal data is processed and protected between them.

2. What personal data we process

Identity and contact details

  • First and last name
  • Email address
  • Phone number
  • Country and city

Professional and project information

  • Links you provide, for example to a website, profile, portfolio or other relevant material
  • The program path (track) you select
  • The field in which you work
  • Answers about your work, team, project, startup or idea
  • Information about your time availability, readiness to work in English and flexibility of location
  • Any other information you choose to include in your application

Optional materials

  • Files, documents, presentations or other materials you choose to upload as part of your application

Consent records

  • A time-stamped record of the consents you gave in the application
  • A record of any withdrawal of consent

When you visit the website we may also process standard analytics data, but only on the basis of your prior consent given through the cookie banner. This may include, for example, an anonymised IP address, the pages you visit, your device or browser type and the source from which you reached the website.

We do not knowingly collect special categories of personal data such as health data, political opinions, religious beliefs, ethnic origin or other sensitive data under Article 9 GDPR. If you voluntarily provide such data, we process it only to the extent necessary to assess your application and on the basis of your explicit consent, which you may withdraw at any time.

3. Why we use your data and on what legal basis

We process your personal data only for specific, explicitly defined and legitimate purposes. Where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.

4. Who we disclose your personal data to

We disclose your personal data only to the extent necessary to process applications, evaluate projects and deliver the program.

During the application and evaluation process your personal data may be disclosed to:

  • Authorised employees of Innixus Group Sàrl involved in reviewing applications
  • Wix.com Ltd, which provides the website and application-form infrastructure and acts as a processor under a data processing agreement
  • Professional advisers where necessary, such as legal counsel, bound by a duty of confidentiality
  • SmartEmailing, which provides email communication and marketing infrastructure and acts as a processor under a data processing agreement

If you are selected for the program and you gave the relevant conditional consent in your application, we may disclose your identifying data to Tahaluf Al Emarat Technical Solutions LLC, based in the United Arab Emirates. Tahaluf processes this data as a separate controller under the data protection agreement for the purpose of program delivery.

If you are not selected for the program, your identifying data is not disclosed to Tahaluf.

We may share aggregated and anonymised information about applications with our program partner Tahaluf and, where relevant, with other ecosystem partners.

We do not sell, rent or otherwise provide your personal data to third parties for commercial purposes. Disclosure occurs only where required by law, court decision or a regulatory authority.

5. International transfers of personal data

Innixus Group Sàrl is based in Switzerland. The European Commission recognises Switzerland as a country ensuring an adequate level of data protection, so transfers from the EU/EEA to Innixus require no additional safeguards.

If you are selected for the program and give the relevant conditional consent, your identifying data may be transferred to Tahaluf Al Emarat Technical Solutions LLC, based in the United Arab Emirates. The UAE does not currently have a European Commission adequacy decision.

Such transfers are based in particular on:

  • Your explicit consent given in the application form
  • Standard Contractual Clauses (SCC) and further protective measures agreed in the data protection agreement with Tahaluf
  • The legal framework of the United Arab Emirates, in particular Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data

Our processors, Wix and SmartEmailing, may also process personal data outside Switzerland and the EU/EEA in accordance with data processing agreements and applicable international transfer safeguards.

6. How long we retain your personal data

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law.

Applicants who are not selected

If you are not selected for the program, we retain your application and related personal data for 24 months from submission. After this period the data is deleted, unless you have consented to receiving information about future program calls or related opportunities, in which case the relevant contact details are kept until you withdraw that consent.

Selected participants

If you are selected for the program, we retain your personal data for the whole duration of your participation in Halif Hatch. After the program ends, we keep it only for as long as necessary to meet legal, tax, accounting, contractual or record-keeping obligations, generally for a maximum of 10 years.

Tahaluf retains the personal data it processes as a separate controller in accordance with its own retention rules and the data protection agreement.

Analytics and cookies

We retain data obtained through cookies for the lifespan of each individual cookie. Essential technical cookies are generally kept for the duration of the session. Cookies used to remember settings or consent are kept for a maximum of 6 months. Analytical and marketing cookies are kept for a maximum of 13 months.

Backups

Your personal data may also be stored in backup systems in accordance with technical and security rules. Data in backups is deleted or overwritten as soon as technically possible.

7. Security of personal data

We store your personal data securely and apply appropriate technical and organisational measures to protect it. These include in particular:

  • Management of access permissions
  • Restricting access to authorised persons only
  • Encryption of data in transit
  • Contractual obligations imposed on processors and partners

Access to personal data is limited to persons who genuinely need it to carry out their tasks in relation to the application process, project evaluation, communication or program delivery.

No information system is entirely free of risk, but we take reasonable measures to minimise risks and to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

8. Automated decision-making and profiling

In connection with your application we do not carry out automated decision-making that produces legal effects or similarly significant consequences for you.

We may assess your application against program criteria such as the relevance of the project, its potential, readiness, time availability, the selected program path or suitability. Such an assessment does not, however, constitute fully automated decision-making.

We do not carry out profiling for the purposes of automated decision-making.

9. Children and persons under 16

The Halif Hatch program is intended exclusively for adult applicants. We do not knowingly collect personal data of persons under 16.

If we discover that we have inadvertently obtained personal data of a person under 16, we will take reasonable steps to delete it without undue delay.

10. Your rights

Under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection you have the following rights:

Right of access

You have the right to obtain confirmation of whether we process your personal data and, if so, to access that data and information about how we process it.

Right to rectification

You have the right to request correction of inaccurate personal data or completion of incomplete personal data.

Right to erasure

You have the right to request deletion of your personal data. This right is not absolute and does not apply where we are required to retain certain data for legal, accounting, tax or contractual obligations.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data, for example if you contest its accuracy.

Right to data portability

Under certain conditions you have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format, or to request its transfer to another controller. This right applies to data processed on the basis of consent or a contract and by automated means.

Right to object

You have the right to object to processing of personal data based on legitimate interest. If you object, we will assess your objection in light of the specific circumstances.

Right to withdraw consent

Where we process your personal data on the basis of consent, you have the right to withdraw that consent at any time. You can withdraw consent by contacting us at community@innixus.tech or by another method indicated at the point where consent was given. Withdrawal does not affect the lawfulness of processing before it was withdrawn.

Right to lodge a complaint

If you believe that we process your personal data in breach of applicable law, you have the right to lodge a complaint with the competent supervisory authority. In particular you may contact:

  • The Swiss Federal Data Protection and Information Commissioner
  • The competent supervisory authority in your country within the European Union or the European Economic Area (EEA)
  • The supervisory authority based on your place of residence

In Slovakia, you may contact the Office for Personal Data Protection of the Slovak Republic.

11. How to exercise your rights

If you wish to exercise any of your rights or have questions about the processing of your personal data, contact us at community@innixus.tech.

We will generally respond to your request within 30 days of receipt. For a complex or extensive request, this period may be reasonably extended in accordance with applicable law.

If your request concerns personal data that Tahaluf processes as a separate controller, we will coordinate with Tahaluf in handling it.

12. Cookies

On the Halif Hatch website we use cookies and similar technologies to ensure the proper functioning of the website, to improve the user experience, to analyse traffic and, where you give us consent, for marketing purposes.

Detailed information about the use of cookies is available in our separate Cookie Policy.

13. Changes to this notice

We may update this notice from time to time, in particular where there is a change in the way personal data is processed, in the involvement of partners, in the technical tools used or in legal requirements.

The current version will always be available on the website. If there are material changes, we will inform you in an appropriate manner.

14. Contact

If you have any questions about the processing of your personal data, you can contact us at community@innixus.tech.