Privacy

FC City Boys Zürich processes personal data in line with the revised Swiss Federal Act on Data Protection (revFADP) and, where it applies, the EU General Data Protection Regulation (GDPR). This page explains what that means in practice for visitors to fccbzh.ch.

Who is responsible

FC City Boys Zürich, Geroldsweg 13a, 8196 Wil ZH, Switzerland. Questions about your data go to info@fccbzh.ch.

What we collect

• Contact messages: name, email address and the message itself, so we can answer you.
• Server logs: our hosting provider records the IP address, the page requested, the time, and the browser and operating system of each request. These logs keep the site secure and available. They are deleted automatically within 30 days.
• Club and match data: results and squads come from the Swiss Tamil Football Association and from the club's own records. We publish names, shirt numbers, appearances and goals. We never publish dates of birth, addresses, phone numbers or identity documents.

Cookies and tracking

The public website sets no cookies and uses no advertising or analytics trackers. Nothing on these pages profiles you or follows you to other websites, which is why you are not asked to accept anything.

The dashboard used by coaches and the board sets a session cookie after sign-in. It is strictly necessary to keep that person signed in and is not used for any other purpose.

If we ever add visitor statistics, we will use a privacy-friendly, cookie-free tool, and this page will say so before it goes live.

Why we are allowed to process it

Registrations and contact messages are processed to answer your request or to carry out what you asked for. Server logs and club data rest on our legitimate interest in running a secure website and documenting the club's sporting activity.

Who else sees it

We do not sell or rent personal data. We use a small number of service providers who process data on our instructions:

• Vercel (hosting and delivery), United States and global edge network
• Supabase (database and authentication), servers in Zürich, Switzerland
• Resend (transactional email), United States

Data outside Switzerland

Because Vercel and Resend are based in the United States, some data, in practice your IP address and the email address you give us, may be processed there. These transfers are covered by the European Commission's standard contractual clauses, recognised by the Swiss authorities, together with the Swiss-US Data Privacy Framework.

How long we keep it

Contact messages are deleted once the matter is closed, and at the latest after two years. Server logs are deleted within 30 days. Published results and statistics form part of the club's history and are kept.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Write to info@fccbzh.ch and we will answer within thirty days, free of charge.

If you are not satisfied, you can complain to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, or, in the EU, to your national supervisory authority.

Players, parents and photos

Players, or the parents of junior players, can ask us to remove a name or a photograph from the site at any time. We act on those requests without asking for a reason.

We hold members’ dates of birth, which reach us with their registration through the Swiss Tamil Football Association. We publish only the day and the month, on our birthday page, and never the year or anyone’s age. The same request removes a birthday from the site as removes a name or a photograph.

Security

The site is served over HTTPS. Access to the dashboard is limited to people the board has added, and database rules deny access to everything by default.

Changes

If this policy changes we will update this page and the date below.

Last updated: 8 September 2026