Rebuilt for Distance
Privacy Policy
Last updated: 1 June 2026
This Privacy Policy explains which personal data Rebuilt for Distance processes, for which purposes this happens and which rights affected persons have.
1. Controller
The controller responsible for processing personal data is:
Rebuilt for Distance / RFD Bufalino
Christian Bufalino
Im Freienstein 8A
8330 Pfäffikon ZH
Switzerland
General contact: contact@rebuiltfordistance.com
Sponsorship and partnerships: sponsoring@rebuiltfordistance.com
Newsletter: newsletter@rebuiltfordistance.com
2. Purpose of Rebuilt for Distance
Rebuilt for Distance is a private project by Christian Bufalino. The website documents rehabilitation, athletic rebuild, personal development, an ultra-trail goal, a book project and the search for sponsors and partners.
The website currently serves in particular to provide information about the project, enable contact and handle sponsorship enquiries and sponsorship contributions.
3. Which personal data we process
Depending on how the website is used, we process in particular the following data:
- contact details such as name, email address, telephone number, company, function and address;
- information from contact forms, sponsorship forms, emails or messages;
- information about sponsorship interest, sponsorship amount, desired contact, company profile, website, social media profiles, logo or brand material;
- payment references, payment status, amount, currency, time of payment, Stripe references and allocation data;
- newsletter data such as email address, language, subscription status, unsubscribe status and time of subscription;
- technical data such as IP address, date and time of access, visited pages, browser, device type, operating system, referrer URL and server log data;
- security and error data where this is necessary for operation, abuse protection and stability.
We do not request health data from sponsors. If persons voluntarily transmit sensitive information, for example about health, rehabilitation, injuries or personal life circumstances, we process it only to the extent required to handle the enquiry or where consent exists.
4. Purposes of processing
We process personal data in particular for the following purposes:
- operation and security of the website;
- handling contact and sponsorship enquiries;
- preparing, managing and documenting sponsorship relationships;
- processing sponsorship contributions via Stripe or other agreed payment channels;
- communication with sponsors, interested persons and partners;
- sending newsletters if a subscription has been made;
- technical improvement of the website;
- abuse prevention, security and error analysis;
- fulfilment of legal, tax, accounting or documentation obligations;
- safeguarding legitimate interests, in particular evidence, communication, project organisation and protection of our own rights.
5. Legal bases
Where the Swiss Data Protection Act applies, we process personal data according to the principles of lawfulness, good faith, transparency, purpose limitation, proportionality and data security.
Where the EU General Data Protection Regulation applies, we rely in particular on:
- consent;
- performance of a contract or pre-contractual measures;
- legal obligations;
- legitimate interests;
- establishment, exercise or defence of legal claims.
6. Payments via Stripe
Sponsorship contributions may be processed via Stripe.
Stripe processes payment data so that payments can be securely carried out, confirmed, checked and documented. This may include in particular name, email address, payment amount, currency, payment time, payment status, payment references, invoice data and technical payment data.
Rebuilt for Distance does not store complete credit card, Apple Pay, Google Pay or bank details.
Stripe’s privacy and terms of use also apply to payment processing.
7. Newsletter
If you subscribe to the newsletter, we process your email address and, where applicable, language, subscription time, confirmation, unsubscribe status and technical sending data.
The newsletter is sent only if you have subscribed or another permissible basis exists.
You can unsubscribe at any time via the unsubscribe link in the newsletter or by sending a message to newsletter@rebuiltfordistance.com.
8. Cookies and local storage
The website may use technically necessary cookies, local storage or similar technologies so that the website works securely and reliably.
This concerns in particular:
- security;
- form protection;
- language settings;
- technical sessions;
- consent status;
- error analysis;
- abuse protection.
Non-essential analytics or marketing services are used only where valid consent exists, if such consent is legally required.
9. Analytics and Google services
The website may use internal technical analytics functions to improve stability, errors, form use, security events and user guidance.
Google Analytics 4 or Google Tag Manager may be technically prepared or used. Such services are loaded on the public website only if they are correctly configured and required consent exists.
Without corresponding consent, no optional analytics or marketing cookies are set where such consent is legally required.
10. Recipients and service providers
Personal data may be disclosed to service providers where this is necessary for operation, security, communication or payment processing.
This may include in particular:
- hosting providers;
- email and newsletter service providers;
- payment service providers such as Stripe;
- IT and security service providers;
- analytics and consent service providers, where used;
- fiduciary services, accounting, legal advice or authorities, where required;
- social media platforms if you interact with our profiles or embedded content.
Service providers may process personal data only within the respective purpose where they act as processors.
11. Disclosure abroad
Individual service providers may process personal data in Switzerland, the EU, the EEA, the USA or other countries.
If personal data is transferred to a country without an adequate level of data protection, we ensure suitable guarantees, contractual safeguards or other legally provided bases where required.
12. Retention
We retain personal data only as long as required for the respective purpose.
Contact and sponsorship enquiries are deleted or anonymised when they are no longer needed, unless statutory retention obligations or legitimate interests prevent this.
Payment, sponsorship, tax, accounting and evidence data may be retained longer where legally required or necessary for documentation.
Technical log data is stored only as long as required for security, error analysis and operation.
13. Your rights
Affected persons may exercise the following rights where legally provided:
- access to processed personal data;
- correction of inaccurate data;
- deletion of data;
- restriction of processing;
- objection to certain processing;
- release or transfer of data;
- withdrawal of consent granted for the future.
Requests can be sent to contact@rebuiltfordistance.com.
To process a request, proof of identity may be required so that personal data is not disclosed without authorisation.
14. Right to complain
Affected persons may contact the competent data protection supervisory authority where legally provided.
In Switzerland this is the Federal Data Protection and Information Commissioner FDPIC.
15. Data security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unauthorised disclosure, alteration or destruction.
These include in particular access restrictions, secure transmission, careful selection of service providers, technical safeguards and organisational controls.
No system is absolutely risk-free. Security, permissions and technical processes are therefore reviewed and improved on an ongoing basis.
16. External links and social media
The website may contain links to external websites, social networks or platforms.
The respective providers are responsible for the privacy, security and content of external providers. When visiting external pages, their privacy policies apply.
17. No automated individual decisions
Rebuilt for Distance does not make automated individual decisions with legal effect or similarly significant impairment for affected persons.
18. Changes to this Privacy Policy
This Privacy Policy may be adjusted if the website, project, service providers, technology, payment processing or legal requirements change.
The current version is available on the website.
