WHAT WE STAND FOR
OUR EXPERTISE
PROJECT SUN WATER
IN SHORT
HELLA
BOCCARA
FOUNDATION
Development of target group-adaptable products and services, to promote decentralized systems for energy, food, water and medicinal plants by using the only freely available energy source, the sun.
CONTACT
IMPRINT & CONTACT INFORMATION
Hella Boccara Foundation
EN - Tax number: 516680528
PT - NIF: 516680528
Note:
We do not make financial contributions to external projects. The financial support of external projects does not correspond to our foundation purpose.
Pictures: adobe stock, unsplash, koppert.media
PRIVACY POLICY
1. Data Controller
The entity responsible for the processing of personal data on this website is:
Hella Boccara Foundation
Stiftung
Rebgasse 46
CH-Arlesheim
www.boccara.org
info@boccara.org
Authorized representative or authorized body:
Urs Endress
2. Applicable Data Protection Law
The data controller is based in Switzerland. We process personal data in particular in accordance with the Swiss Federal Act on Data Protection and the associated Data Protection Ordinance. To the extent that the territorial scope of the General Data Protection Regulation (GDPR) also applies in individual cases, we additionally comply with its requirements. To the extent that other international or national data protection regulations apply, we comply with them to the extent required by law.
Personal data refers to any information relating to an identified or identifiable natural person.
3. General Principles of Data Processing
We process personal data only to the extent necessary for the operation of this website, communication with interested parties, project partners, or other contacts, the provision of our services, the publication of editorial content, or the fulfillment of legal obligations and the assertion of legal claims and defense in connection with legal disputes and administrative proceedings.
To the extent that the GDPR applies, processing is based in particular on one of the following legal grounds:
-
Consent of the data subject pursuant to Art. 6(1)(a) of the GDPR;
-
Performance of a contract or pre-contractual measures pursuant to Article 6(1)(b) of the GDPR;
-
Compliance with a legal obligation pursuant to Article 6(1)(c) of the GDPR;
-
Protection of our legitimate interests or the interests of third parties pursuant to Article 6(1)(f) of the GDPR.
Our legitimate interests lie, in particular, in the secure and efficient operation of the website, the processing of inquiries, the maintenance of business relationships, the prevention of misuse and attacks, and the analysis and improvement of our offerings.
To the extent that Swiss data protection law applies, we process personal data in accordance with the statutory principles of processing. Where a legal basis is required for processing, we base such processing in particular on consent, an overriding private or public interest, or a statutory basis.
To the extent that you have given us consent to process your personal data for specific purposes (for example, when you sign up to receive newsletters), we process your personal data within the scope of and based on this consent, provided we have no other legal basis and such a basis is required. Consent that has been given may be revoked at any time; however, this has no effect on data processing that has already taken place.
4. Website Provision and Hosting by Wix
This website is operated using the Wix platform. The platform is provided by Wix.com Ltd., 5 Yunitsman St., Tel Aviv, Israel, as well as its affiliates and subcontractors.
When you visit the website, the following data, in particular, may be processed:
-
IP address;
-
Date and time of access;
-
Page or file accessed;
-
Amount of data transferred;
-
Referrer URL;
-
Browser type and version;
-
Operating system;
-
Device information;
-
Language settings;
-
Approximate geographic region;
-
Technical error and security information;
-
Interactions with the website;
-
Cookie and device identifiers.
This processing is necessary for the delivery and display of the website, the establishment of a secure connection, technical administration, error analysis, the prevention of attacks and misuse, and ensuring the stability and functionality of the website.
To the extent that the GDPR applies, the processing of technically necessary data is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and functional operation of the website. To the extent that processing is necessary for the performance of a contract or pre-contractual measures, Article 6(1)(b) of the GDPR applies in addition.
To the extent that Wix processes personal data on our behalf, this is done on the basis of a data processing agreement. Wix may use affiliated companies and subcontractors in various countries to provide its services.
In particular, data may be processed in Israel, the European Union, the United States, or other countries. To the extent that data is disclosed or transferred to a country without a legally recognized adequate level of data protection, the safeguards provided by law will be applied. These may include, in particular, standard data protection clauses, supplementary safeguards, or other legally permitted transfer mechanisms. Please refer to Section 15 regarding data processing abroad.
5. Domain, DNS, and Technical Infrastructure
Our domain is registered with united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany. DNS entries and other technical infrastructure services are managed by Wix.
In particular, IP addresses, domain queries, technical connection data, and security information may be processed. This processing is necessary to ensure the website’s accessibility, secure delivery, and technical stability.
To the extent that the GDPR applies, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, fast, and reliable operation of the website.
6. Cookies and Similar Technologies
This website uses cookies and similar technologies. These may include local storage technologies, pixels, tags, scripts, device identifiers, or comparable methods. We distinguish in particular between the following categories:
Essential Technologies
These are necessary to provide the website, security features, language settings, user logins, forms, consent management, or other explicitly requested features.
To the extent that German law applies, the storage of information on the end device or access to information already stored is governed by Section 25(2) of the TDDDG, provided that the technology is strictly necessary. The subsequent processing of personal data, to the extent that the GDPR applies, is based in particular on Article 6(1)(b) or (f) of the GDPR.
Functional Technologies
These enable additional features, such as embedded media, maps, chats, language settings, or external services.
Analytics Technologies
These help us understand how the website is used, which pages are visited, and how visitors interact with the site.
Marketing Technologies
These can be used to measure the effectiveness of advertising campaigns, attribute visits to specific campaigns, or enable interest-based advertising.
Non-essential technologies are used only after the data subject has given consent via the cookie banner. To the extent that the GDPR applies, the processing is based on Article 6(1)(a) of the GDPR. To the extent that German law applies, access to the end device is additionally governed by Section 25(1) of the TDDDG.
Consent is voluntary and may be revoked or modified at any time with future effect via the cookie settings available on the website. The lawfulness of processing carried out prior to revocation remains unaffected.
The cookie banner or cookie settings list the technologies currently in use, the providers, the purposes, and—where technically available—the storage periods.
To document consent or refusal, the selection made, a truncated or full IP address, device information, and the date and time may be stored. This documentation serves as evidence of consent management in compliance with data protection regulations.
7. Communication via Email and Microsoft Outlook or Microsoft 365
We use Microsoft Outlook or Microsoft 365 for our email communication. The provider is the Microsoft entity responsible for our contract.
When communicating via email, the following data in particular is processed: email address, name, subject line, message content, attachments, times of communication, and technical transmission data.
The data is used to process inquiries, for business and organizational communication, to carry out pre-contractual measures, to fulfill contractual obligations, and to document processes.
To the extent that the GDPR applies, processing is carried out, depending on the content, on the basis of Article 6(1)(b), (c), or (f) of the GDPR.
Microsoft may process data in data centers both within and outside the European Union or the European Economic Area. Where necessary, the appropriate data protection safeguards and transfer mechanisms are implemented.
Emails are retained for as long as necessary for communication, the respective business relationship, or for legal, contractual, and evidentiary purposes. Statutory retention and disclosure obligations remain reserved.
Please note that unencrypted email communication may pose technical security risks. For particularly confidential information, a suitable method of transmission should be agreed upon in advance. Please refer to Section 15 regarding data processing abroad.
8. Blog
We publish editorial articles, technical information, news, and other content on this website in a blog.
When you view a blog post, the data described in the sections on hosting, server logs, cookies, and analytics is processed.
9. Wix Analytics
We may use Wix Analytics to statistically analyze website usage. In particular, the following information may be processed:
-
pages viewed;
-
time and duration of the visit;
-
interactions and clicks;
-
referrers;
-
approximate location;
-
browser and device information;
-
IP address;
-
cookie or device identifiers;
-
campaign and traffic sources.
The analysis is used to measure reach, detect errors, and improve our content and offerings.
To the extent that the GDPR and the TDDDG apply, Wix Analytics is activated only after consent has been given for the “Analysis” category or a comparable category. The legal basis is Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG.
Consent may be modified or withdrawn at any time via the cookie settings.
10. Google Search Console
We use Google Search Console to analyze our website’s discoverability, indexing, and appearance in Google Search, and to identify technical issues.
Google Search Console provides us with the following information in particular:
-
Search terms used to find our website;
-
Number of impressions in Google Search;
-
Number of clicks on our search results;
-
Average positions in search results;
-
Information about indexed pages;
-
Technical errors and notes regarding display in Google Search;
-
Information about linking websites and internal links.
The reports provided generally contain summarized performance and search data. Simply using Google Search Console does not result in any additional Google Analytics script being executed on our website, nor does it set a separate cookie on the visitor’s device.
This processing serves to optimize our website from a technical and content perspective, as well as to improve its visibility in search engines.
To the extent that personal data is processed in this context, we rely on our legitimate interest (Art. 31(1) DSG; Art. 6(1)(f) GDPR, where applicable). Our legitimate interest lies in analyzing and improving the technical discoverability and presentation of our website in Google Search.
The provider is generally: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data collected in connection with its services through affiliated companies and service providers in other countries. The information provided in the section on data processing abroad applies.
11. External Videos and Audio Content
We may embed videos or audio content from the following providers: YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; for users outside the EEA, possibly Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and Vimeo (Vimeo.com, Inc., 555 West 18th Street, New York, NY 10011, USA).
When embedded content is loaded directly, the respective provider may receive, in particular, the IP address, browser and device information, the page accessed, cookie identifiers, and interactions. If the user is logged in to the provider’s service, the visit may be associated with their user account. The provider processes this data for its own purposes, in particular to provide and optimize its services, to measure reach, and, where applicable, for advertising purposes. Further information on this can be found in the providers’ privacy policies (YouTube/Google: https://policies.google.com/privacy; Vimeo: https://vimeo.com/privacy).
To the extent technically feasible, external media are loaded only after the data subject has given consent via the cookie banner or a comparable feature. The associated processing is based on the data subject’s consent pursuant to Art. 31(1) of the DSG. To the extent that the GDPR applies, it is additionally based on Art. 6(1)(a) of the GDPR.
12. External Documents, Forms, and Iframes
External documents, forms, PDF viewers, or other content may be embedded on the website via an iframe. Services such as Google Forms, Microsoft Forms, Adobe, DocuSign, Calendly, Typeform, or Jotform may be used for this purpose.
When external content is loaded, its provider may receive, in particular, the IP address, browser and device information, the page accessed, and interaction data. The provider processes this data for its own purposes, in particular to provide the respective service. The associated processing is based on the data subject’s consent pursuant to Art. 31(1) of the DSG. To the extent that the GDPR applies, it is additionally based on Art. 6(1)(a) of the GDPR.
13. Downloads
When files are downloaded, the access data described in the section on hosting may be processed. This is done for the purposes of technical provision, security, and statistical analysis of the service. The legal basis for this is our legitimate interest pursuant to Art. 31(2)(b) and (c) of the DSG and, to the extent the GDPR applies, Art. 6(1)(f) of the GDPR.
If downloads are made available only after contact information is provided, the information regarding forms and contact requests also applies.
14. Recipients of Personal Data
Personal data may be disclosed, to the extent necessary, in particular to the following recipients or categories of recipients:
-
Internally responsible employees and governing bodies;
-
Wix and its subcontractors;
-
Email, hosting, domain, IT, and security providers;
-
External consultants, accounting firms, legal counsel, or IT service providers;
-
Foundation bodies or project partners, to the extent necessary for the respective purpose;
-
Government agencies, foundation supervisory authorities, and courts, to the extent required by law;
-
Other recipients to whom the data subject has given consent.
Data will only be disclosed if there is a legal basis, a contractual necessity, a legitimate interest, or consent for doing so.
15. Data Processing Abroad
Due to the use of Wix, Microsoft, and other potential external services, personal data may be processed outside the country in which the data controller is based.
If the recipient is located in a country whose data protection laws do not guarantee a legally recognized adequate level of protection, the transfer will take place only under the conditions prescribed by law.
The following may be used as safeguards in particular:
-
Adequacy decisions or adequacy determinations;
-
Standard data protection clauses of the European Commission with the appropriate adaptations for Switzerland;
-
Supplementary technical and organizational safeguards;
-
Binding internal data protection policies;
-
Exceptions provided for by law for certain individual cases;
-
Express consent, to the extent permitted by law.
Despite contractual and technical safeguards, absolute protection against legally mandated access by foreign authorities cannot be guaranteed in every case.
16. Retention Period
As a general rule, we store personal data only for as long as is necessary for the respective purpose.
The specific duration depends in particular on:
-
the purpose of the processing;
-
the duration of a business or contractual relationship;
-
statutory retention obligations;
-
statutory statutes of limitations;
-
potential legal claims;
-
evidence of security and misuse;
-
consents granted;
-
the settings and deletion periods of the services used.
Once the purpose of processing no longer applies, data is deleted or anonymized, provided there is no obligation or authorization to retain it further.
Data in technical backup copies may remain there until the relevant backup copy is overwritten as part of a scheduled rotation. Access to backup copies is limited to necessary recovery and security incidents.
17. Data Security
We take appropriate technical and organizational measures to protect personal data from loss, misuse, unauthorized access, alteration, or disclosure. These measures are continuously reviewed and adjusted as necessary, taking into account the state of the art, the nature and scope of the processing, and the likelihood and severity of the risk to the data subjects (Art. 8 DSG; Art. 32 GDPR, where applicable).
These measures may include, in particular:
-
encrypted data transmission;
-
access and authorization policies;
-
secure passwords and multi-factor authentication;
-
regular system updates;
-
data backups;
-
restriction of administrative access;
-
logging of security-related events;
-
careful selection of service providers;
-
internal deletion and retention policies.
Despite these measures, data transmission over the Internet may still be subject to security vulnerabilities. Absolute protection is not technically possible.
Should a data breach nevertheless occur that is likely to result in a high risk to the privacy or fundamental rights of the affected individuals, we will report this to the competent authorities and, to the extent required by law, to the affected individuals.
18. Obligation to Provide Personal Data
As part of our business relationship, you must provide the personal data necessary for establishing and conducting a business relationship and fulfilling the associated contractual obligations (you generally have no legal obligation to provide us with data). Without this data, we will generally not be able to enter into or fulfill a contract with you (or the entity or person you represent). Furthermore, the website cannot be used if certain information necessary to ensure data transmission (such as an IP address) is not disclosed.
19. No Solely Automated Decisions
As a general rule, we do not make any solely automated decisions that have legal effects on a data subject or significantly affect them in a comparable manner.
Should such processing be used in an individual case, we will inform the data subject separately about the logic, significance, and intended effects of the processing, as well as about their existing rights. In this case, the data subject has the right to express their point of view, to request a review of the decision by a human, and to challenge the decision.
20. Rights of Data Subjects
Data subjects may have the following rights, in particular, under the applicable data protection law:
-
Access to the personal data being processed;
-
Rectification of inaccurate data or completion of incomplete data;
-
Erasure or destruction of data;
-
Restriction or cessation of certain processing activities;
-
Disclosure or transfer of certain data;
-
Withdrawal of consent;
-
Objection to certain processing activities;
-
Review of automated individual decisions;
-
Filing a complaint or report with a competent data protection supervisory authority;
-
Judicial enforcement of data protection claims.
These rights apply subject to the statutory requirements and may be restricted by legal exceptions, overriding interests of third parties, or retention obligations.
Requests may be directed to the contact information provided in the “Data Controller” section. To prevent unauthorized disclosure of information, we may require appropriate proof of identity.
Withdrawal of Consent
Consent may be withdrawn at any time with future effect. The withdrawal does not affect the lawfulness of processing that took place prior to the withdrawal.
Objection under the GDPR
To the extent that processing is based on Article 6(1)(e) or (f) of the GDPR, an objection to the processing may be lodged on grounds relating to the data subject’s particular situation.
If personal data is processed for direct marketing purposes, an objection to such processing may be raised at any time without providing specific reasons. Following such an objection, the data will no longer be used for direct marketing.
21. Competent Data Protection Supervisory Authority
The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch. To the extent that the GDPR applies, a complaint may also be filed with the data protection supervisory authority of the data subject’s usual place of residence, place of work, or the location of the alleged violation.
22. Changes to This Privacy Policy
We may update this Privacy Policy if our data processing activities, the services we use, or legal requirements change.
The version currently published on this website applies. In the event of significant changes, additional notice may be provided on the website or via another appropriate communication channel.
August 10, 2026
DISCLAIMER AND LEGAL NOTICES
1. General Information
The content of this website is intended to provide general information about the Hella Boccara Foundation, its services, projects, activities, and areas of focus.
We create and maintain the content with due care. However, we cannot guarantee that all content is at all times complete, accurate, up-to-date, error-free, or suitable for a specific purpose.
Binding information, commitments, or offers arise only if they are expressly designated as such or individually confirmed in writing.
2. No Individual Expert Advice
To the extent that this website contains medical, health-related, legal, tax, financial, technical, scientific, or other specialized information, such information is of a general nature.
The content is not a substitute for an examination, diagnosis, consultation, planning, or case-by-case assessment by a suitably qualified professional.
Decisions with legal, health, financial, safety-related, or similarly significant implications should not be made solely on the basis of the website’s content.
3. Timeliness and Completeness
Information may change after it is published. We are not obligated to continuously update all older content unless there is a legal or contractual obligation to do so.
When using the content, please take into account the dates provided and the respective context of publication.
We reserve the right to change, supplement, restrict, or remove content, features, and offers at any time.
4. External Links
This website may contain links to external websites and third-party offerings. We generally have no influence over their content, design, availability, or data processing.
At the time a link is established, we check, to a reasonable extent, whether any obvious legal violations are apparent. Continuous monitoring of the content of linked websites is not reasonable without concrete evidence.
The respective operators of external websites are generally responsible for their content.
If we become aware of a specific legal violation, we will review the link in question and remove it to the extent that this is legally required and technically feasible.
The inclusion of a link does not imply that we endorse or recommend all content on the linked website.
5. Availability and Technical Malfunctions
We strive to ensure that the website operates as smoothly as possible. However, we do not guarantee that the website will be available at all times, without interruption, or free of errors.
Maintenance work, technical malfunctions, outages on the part of Wix or other service providers, security incidents, force majeure, or events beyond our control may temporarily restrict use of the website.
6. Downloads and External Files
Files and downloads are provided with due care. Users are nevertheless responsible for checking files for technical suitability, currency, compatibility, and potential malware before use.
Templates, checklists, calculators, samples, or other tools must be adapted to the specific case and reviewed by a professional before being used.
7. AI-Generated or Automated Content
Individual pieces of content may have been created, translated, summarized, or edited, in whole or in part, using automated systems or artificial intelligence.
Such systems may produce inaccurate, incomplete, outdated, or misleading results. The content must therefore be independently verified before being used for professional or business purposes.
Where required by law, content that has been artificially generated or edited will be labeled accordingly.
8. Copyright and Rights of Use
The texts, images, photographs, graphics, videos, audio content, designs, logos, documents, and other content published on this website may be protected by copyright, trademark law, or other intellectual property rights.
Reproduction, adaptation, translation, distribution, public performance, or any other use beyond the scope of statutory exceptions is permitted only with the prior consent of the respective rights holder.
Downloads and copies for personal use are permitted only to the extent that no conflicting notices or rights exist. Commercial use generally requires express authorization.
Third-party content is identified as such to the extent that this is necessary and possible. Reports of potential legal violations may be sent to the contact information provided in the legal notice.
9. Trademarks and Logos
The company names, product names, logos, and other marks mentioned herein may be registered trademarks of their respective owners.
Mere mention does not imply that these trademarks may be used freely or that there is any economic, legal, or organizational connection with the respective rights holders.
10. Limitation of Liability
Our liability is governed by mandatory statutory provisions.
To the extent that an exclusion or limitation of liability is permitted by law, we are not liable for damages arising solely from the non-binding use of general website information.
Liability for intentional or grossly negligent conduct, for damage to life, limb, or health, for expressly assumed warranties, and under mandatory statutory liability provisions remains unaffected.
To the extent that German law applies and we breach a material contractual obligation due to slight negligence, liability is limited to the damages typical for the contract and foreseeable at the time the contract was concluded, to the extent permitted by law.
This liability provision applies mutatis mutandis to our legal representatives, executive bodies, employees, and vicarious agents.
11. Relationship to Contracts and Special Terms and Conditions
This disclaimer does not supersede any individual contracts, general terms and conditions, foundation bylaws, terms of participation, license terms, or special terms of use.
In the event of any conflict, individually agreed terms or terms published specifically for a service shall prevail, to the extent permitted by law.
12. Governing Law
To the extent permitted by law, the use of this website and this disclaimer are governed by Swiss law.
Mandatory legal provisions, in particular mandatory consumer protection provisions, remain unaffected.