Data Protection Statement

This Data Protection Statement serves to inform data subjects about their rights. The terms used correspond to the definitions set out in the Swiss Federal Data Protection Act (nLPD).

Name and Address of the Controller

The controller, as defined by the General Data Protection Regulation (GDPR), is:

Centre Sportif de Malley (CSM) SA Chem. du Viaduc 14, 1008 Prilly

Name and Address of the Data Protection Officer

Centre Sportif de Malley (CSM) SA Chem. du Viaduc 14, 1008 Prilly Phone: +41 21 315 55 00 Email: securite@vaudoisearena.ch Website: vaudoisearena.ch

Collection of Data and General Information

Our website collects general data during each access, which is stored in the server's log files, including:

Types and versions of browsers used.
Operating system of the connected device.
Website from which the connection was made.
Sub-sites visited.
Date and time of access.
IP address.
Internet service provider of the connected device.
Other data for preventing attacks.

This information is used to:

Display content correctly.
Optimise the website.
Ensure system functionality and security.
Assist in investigations in case of attacks.

These anonymous data is used for statistics and enhancing data security without revealing the identity of users. In general, it is not shared, except for legal obligations or judicial proceedings.

Systematic Deletion and Blocking of Personal Data

CSM SA retains the personal data of the concerned individual only for the time necessary to achieve the purpose of storing them or in accordance with applicable laws and regulations.

When the purpose of storage is no longer relevant or when the retention period set by the statutory authorities expire, personal data are either blocked or deleted in accordance with current laws.

Rights of the Data Subject

Individuals have various rights under the nLPD in Switzerland:

You can request access to your personal data (Article 25 – Right of Access).
If data are incorrect, you have the right to have them corrected (Article 32 – Claims).
You can request the deletion of your data in certain situations (Article 32 – Claims).
You have the right to object to the processing of your data (Article 32 – Claims).
You can transfer your data to other services (Article 28 – Right to Data Portability).

Additionally, if necessary, you can file a complaint with a data protection authority. You can also withdraw your consent for data processing at any time. However, this does not affect processing already carried out before the withdrawal.

Legal Basis for Processing

Under the nLPD in Switzerland (Article 6), we process your personal data based on different situations:

If you consent to specific use.
If processing is necessary to perform a contract with you, such as delivering products.
If processing is required prior to the conclusion of a contract, for example, when requesting information.
If personal data are processed solely in a professional context for statistical purposes.

Duration of Personal Data Storage

We adhere to the appropriate statutory retention periods when storing your personal data. Once these periods have expired, we systematically delete the data unless they are still needed for contract performance or preparation.

It is important to note that the law, including tax rules, may require the provision of personal data. Similarly, contractual provisions, such as information about another contracting party, may also impose this requirement. In certain situations, you may be required to provide us with personal data for further processing. For example, when our company enters into a contract with you, you may be required to provide certain personal information. Refusing to provide these data may prevent us from entering into a contract with you.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses cookies, which are small text files stored on your computer, to analyse your use of the site. The information generated by the cookie about your use of our website (including your IP address) is transmitted to Google and stored on servers in the United States. Google uses this information to evaluate your use of our website, compile reports on website activity for us and provide other services related to website activity and internet usage.

Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for us, and providing other services related to website activity and internet usage. If required by law, these data will be processed on behalf of Google by third parties.

You can prevent the storage of cookies by configuring your browser settings accordingly. However, please note that in this case, you may not be able to use all the features of our website. You can also prevent Google from collecting and processing the data generated by the cookie regarding your use of our website (including your IP address) by downloading and installing the browser plug-in available here.

For more information about the terms of use and data protection provisions of Google Analytics, please see Terms of Service | Google Analytics - Google, or Privacy Statement & Terms of Use - Google.

Cookies

Our website uses cookies. Cookies are data that the website visited or its server stores on your computer through your browser to recognise it later. When you revisit this website, your computer will resend the cookie information to the server each time. Cookies are used, for example, to display complex and dynamic content, to recognise you on your next visit to the website and to improve user-friendliness. You can prevent the installation of cookies at any time by configuring your browser accordingly or receive a warning before accepting a cookie to decide for yourself whether or not to allow cookies. In principle, you can also use our website without accepting cookies, but some features may be restricted.

Contact via the Website

The website contains information, including a general email address, for quick electronic contact. When a person contacts us by email or via a contact form, the personal data provided are automatically saved. The information voluntarily provided by the person is stored for processing and subsequent communication, without being shared with third parties.

If you use our contact form, the data you provide, including your contact details, are stored to respond to your request and for possible follow-up. Your information is used solely for these purposes. Data processing is carried out in accordance with data protection regulations and based on legitimate interests.

In cases of fraud detection or abuse, such as the detection of hacker attacks, we reserve the right to retain your network data for a brief period, usually less than 30 days, solely for this purpose.

Online Ticketing

Website visitors have the option to purchase entry tickets and/or subscriptions by providing personal data through a form. The required information depends on the product purchased. These data are collected and stored for our company’s internal purposes. In some cases, we may share these data with subcontractors, such as a delivery service, who also use them solely for internal purposes related to our company.

Online purchasing allows access to exclusive content or services, including newsletters. It also allows the opportunity to respond to satisfaction surveys. Lastly, it enables users to receive information by email related to the service, such as changes to the offer or technical conditions. Any individual can modify or delete their personal data from our database at any time.

On request, we will provide information about the personal data stored and, where possible, correct or erase it according to the individual's request or notification, unless statutory obligations prevent us from doing so.

Newsletter Subscription

Users have the option to subscribe to our institution's newsletter on our website. The personal data transmitted during the newsletter subscription process depends on the form used.

The newsletter is used to inform our customers and partners about offers, news and events at the Vaudoise aréna. To receive the newsletter, two conditions must be met:

The individual must have a valid email address.
The individual must subscribe to the newsletter.

When subscribing to the newsletter, we also record the IP address and the date/time of registration. This is done to prevent future misuse of the email address, providing legal protection.

If applicable, newsletter subscribers may receive information by email related to the service, such as changes to the offer or technical conditions. Data collected for the newsletter are not shared with third parties.

Newsletter subscriptions can be cancelled at any time. The individual can also withdraw their consent to storing personal data for newsletter delivery. Consent may be withdrawn using the link provided in each newsletter. It is also possible to unsubscribe directly on our website or inform us by other means.

Personal Data Protection during Applications and Recruitment Procedures

We collect and process the personal data of applicants for managing recruitment procedures. Processing begins on receipt of an application, regardless of the channel, and is in line with this policy.

When applying electronically through the web form available on our website, the conditions for data processing and retention are set out in detail and require the approval of the applicants.

If an employment contract is agreed with an applicant, the data transmitted will be stored for the purpose of managing the employment relationship in accordance with legal provisions.

If no employment contract is agreed between the applicant and us, the application will be automatically deleted, unless there is a specific agreement from the applicant for future recruitment and no other legitimate interests oppose deletion. The data controller anonymises the data as soon as the purpose of processing allows it, and personal data continue to be processed exclusively for statistical purposes in a professional context.

Ice Day game and prize draw

During Ice Day on 8 November 2026, CSM SA offers a game accessed by QR code and a prize draw to win tickets to the ice rink.
The game does not ask for any personal data. It uses no cookies or tracking tools, and the score only exists during the game, on the player's device. Access to the page is recorded in the server log files, as described in the section on general data and information collection.

Entering the prize draw is optional and takes place on a Google Forms form. We collect your email address and your consent there. This data is used for the draw, to contact you if you win and to send you a satisfaction form. Processing is based on your consent, which you can withdraw at any time.

Google processes this data as a service provider, and it may be stored abroad, including in the United States
The data is kept for 1 month, then deleted. A child who wants to enter does so through a parent. To exercise your rights: securite@vaudoisearena.ch.

Dive into the backstage of our professions

Aquatic Center Careers

Ice Center careers

Customer Service careers

Building Services Careers

Communication careers

Events careers

Support and Management Functions