Privacy Policy
Last updated: 26 August 2026
Who is responsible for your data
Estée Lauder GmbH Puls 5, Hardturmstrasse 11 8005 Zürich Switzerland
Privacy Portal: ELC Privacy Portal
ELC Switzerland Consumer Privacy Policy: Switzerland All Brands Consumer Privacy Policy
Estée Lauder is the controller of the personal data collected through this registration site. The site is operated on their behalf by ZAAK Zurich GmbH, Zurich, Switzerland, acting as a processor under a written agreement.
What this site does
This site lets invited guests register for One in Eight. Registration is only possible for people whose email address appears on the guest list provided by Estée Lauder.
What we collect and why
| Data | Required | Why we need it |
|---|---|---|
| First name, surname | Yes | To identify you at the event and prepare name badges |
| Email address | Yes | To match your invitation and send you a confirmation |
| Allergies and dietary restrictions | No | To inform catering |
We also record the date and time of your registration and confirmation.
About the allergies field. Information about allergies and dietary restrictions may reveal something about your health. Under Swiss data protection law this is sensitive personal data, and under the GDPR it falls under Article 9. The field is optional. If you complete it, you consent to us processing this information for the sole purpose of catering at the event. It is visible only to the people organising catering, it is never shown in general attendance lists, and it is deleted directly after the event. You do not need to give medical details — a short note such as “vegetarian” or “no nuts” is enough.
Technical data
To protect the guest list against automated probing, we count requests per visitor. Your IP address is not stored: it is converted into an irreversible cryptographic value that cannot be turned back into an address. These values are deleted after 24 hours.
This site uses no advertising, no analytics and no tracking cookies.
Legal basis
We process your data on the basis of your consent, which you give by submitting the registration form and confirming it by email, and because the processing is necessary to organise an event you have been invited to. For the allergies field, we rely on your explicit consent.
You may withdraw your consent at any time. Withdrawing consent does not affect processing that has already taken place.
Privacy Portal: ELC Privacy Portal
ELC Switzerland Consumer Privacy Policy: Switzerland All Brands Consumer Privacy Policy
Who else sees your data
Your data is stored and transmitted using the following service providers, each bound by a data processing agreement:
| Provider | Role | Location of processing |
|---|---|---|
| Supabase | Database | Zurich, Switzerland |
| Vercel | Website hosting | Frankfurt, Germany |
| Mailjet | Sending confirmation emails | France |
Within Estée Lauder, your data is accessible only to the people organising the event. It is not passed to any other party, and it is not used for marketing.
How long the data is kept
On this site. ZAAK Zurich GmbH, which operates this registration site as a processor, deletes all personal data held here 30 days after the event you registered for. The allergies field is deleted directly after the event. No copy is kept beyond those periods, other than where the law requires one.
At Estée Lauder. Data passed to Estée Lauder so that they can organise and run the event is held and deleted under their own policies. See the Switzerland All Brands Consumer Privacy Policy.
Your rights
You have the right to:
- ask what data we hold about you and receive a copy
- have inaccurate data corrected
- have your data deleted
- withdraw your consent
- object to the processing of your data
To exercise any of these, use one of the channels below. We will respond within 30 days.
Privacy Portal: ELC Privacy Portal
ELC Switzerland Consumer Privacy Policy: Switzerland All Brands Consumer Privacy Policy
If you are not satisfied with our response, you may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), or with the supervisory authority in your country of residence if you are in the EU or EEA.
Changes to this policy
We may update this policy. The current version is always the one published on this page.