The purpose of this Privacy Policy is to inform you regarding data security, the processing of data in connection with the use of our websites and your rights with regard to the processing of data.
Overview using Privacy Icons
Type of personal data
General Data We process general personal data about you, such as your name and contact details. |
No Financial Data We do not process your financial data. |
No Health Data We do not process your health data. |
No Location Data We do not process your location data. |
No Biometric Data We do not process your biometric data. |
No Intimate Data We do not process intimate data about you. |
Source of personal data
Provided Data We process personal data that you provide to us. |
Collected Data We process personal data that we collect about you. |
No Received Data We do not process personal data about you that we receive from third parties. |
Purpose of processing
Marketing We use your personal data for marketing and advertising. |
Product Development We use your personal data for the development and improvement of products and services. |
No Other Purposes We do not use your personal data for other purposes without direct connection with the core service. |
Special processes
No Automated Decision-Making We do not make significant decisions based on fully automated processing. |
No Profiling We do not analyze your behaviour and do not make assumptions about your interests and preferences. | |
Passing on to third parties
No Data Transfers We do not transfer your personal data to other companies that decide themselves how to use the data. |
No Data Sale We do not sell your personal data. | |
Place of processing
Worldwide We also process your personal data outside of Switzerland and the EU. |
A.
Responsible for the described data processing is:
Universität St.Gallen
Dufourstrasse 50
CH-9000 St.Gallen
+41 71 224 21 11
info@unisg.ch
in the context of your visit to the accessible Internet pages under the domain "unisg.ch" and its subdomains.
B.
The privacy policy of the University of St. Gallen (hereinafter "HSG") refers exclusively to the processing and protection of your personal data within the scope of the mentioned online presence. The German version is binding. The data protection declaration does not apply to other processing of personal data, for example in the context of studies at the HSG. If applicable, some of the HSG's websites have their own data protection declarations. Should this be the case, the present declaration will apply in a subsidiary manner. The University of St. Gallen accepts no liability for any (data protection) legal deficiencies of third-party websites.
C.1. DPO/ Data Protection Information Office
Switzerland: datenschutz@unisg.ch
EU: RA Frank Diem fdiem@diempartner.de
C.2. Legal basis of data collection
All data processing is based on:
- DSG SG (Datenschutzgesetz des Kantons St.Gallen, sGS 142.1): Art. 4, Art. 5, Art. 11, Art. 13
- DSG CH (Bundesgesetz über den Datenschutz): Art. 6, Art. 19, Art. 31
- DSGVO/ GDPR (EU General Data Protection Regulation): Art. 6, Art. 7, Art. 13
specifically:
a.) HSG – Website
Outweighing legitimate interest, guaranteeing data security and ensuring the performance of a task of public interest
b.) HSG – Your information request and voluntary contributions
Voluntary disclosure of your personal data as well as (thus also implied) consent through your voluntary active participation or explicit consent
c.) HSG – Your Contacting
Voluntary disclosure of your personal data and thus also implied consent through your voluntary active participation
d.) HSG – Third Parties
Voluntary consent in the consent menu of this online presence
C.3. Method of collecting the data
a.) HSG – Website
Automatic collection of technically necessary data each time the HSG's online presence is called up:
- IP address
- Date and time of the visit
- Time zone difference to GMT time zone
- Content of the request
- Access status / http status code
- TYPO3 session cookie: activities and amount of data transferred
- Internet page from which the request originated (page path and URL)
- TYPO3- Session Cookie: Browser (incl. language and version)
- Operating system and device information
- Storage of consent
- Consent status to cookies of the current domain
The hosting of the online presence takes place at the Swiss provider:
CS2 AG
Gerbegässlein 1
4450 Sissach
The provider is contractually bound by a data processing agreement (DPA). Log file data etc. are therefore accessible to the HSG and the data processor. The data is not passed on to other third parties.
b.) HSG – Your information request and voluntary contributions
A standardized information request by you, e.g. in the form of a newsletter, is currently not possible. Comments or similar are not possible.
c.) HSG – Your Contacting
If you contact the HSG via a specified e-mail address and / or via a provided contact form, data is collected:
- which you specify yourself
- Your e-mail address, if given
Data entered via the contact form is transmitted unencrypted.
d.) HSG – Third Parties
This information is provided in the Consent Menu at featured third parties.
C.4. Purpose of the processing of personal data
a.) HSG – Website
The purpose of collecting data for you is:
- an optimal use of the online presence
- a correct display of the online presence
- reliable operation of the site
- to ensure stability and security as well as protection against misuse
- proof of consent status
b.) HSG – Your information request and voluntary contributions
A standardized information request by you, e.g. in the form of a newsletter, is currently not possible. Comments or similar are not possible.
c.) HSG – Your Contacting
The purpose of processing your provided and transmitted data when contacting us is strictly to process your request.
d.) HSG – Third Parties
This information is provided in the Consent Menu at featured third parties. The HSG uses the information that is made available by using third-party services for:
- optimizations
- statistics
- marketing
C.5. Place of storage
a.) HSG – Website
The data is stored exclusively in Switzerland, there is no data transfer abroad.
b.) HSG – Your information request and voluntary contributions
A standardized information request by you, e.g. in the form of a newsletter, is currently not possible. Comments or similar are not possible.
c.) HSG – Your Contacting
The data is stored exclusively in Switzerland, there is no data transfer abroad.
d.) HSG – Third Parties
Third parties shown in the Consent Menu provide information in their data protection statements about the locations where data is stored. They may also transfer personal data abroad, in particular also to the USA, and store it there. Regarding the guarantee of compliance with Swiss data protection law as well as compliance with the GDPR, based on the effectiveness of specific agreements and possibly applicable additional guarantees, these third parties provide information in their data protection statements.
Information that is made available to the HSG by using third-party services is stored in Switzerland.
C.6. Duration of storage
As soon as the legal basis for data processing ceases to exist or the collected data no longer pursue a specific purpose of the HSG, they will be deleted, unless there are legal or contractual reasons against the deletion. In addition, the following applies specifically:
a.) HSG – Website
- Log file data for statistics: anonymous unlimited
- Logfile data for provability of events: pseudonymized six [6] months
- Log file data for troubleshooting: thirty [30] days
- Consent information: three [3] years
b.) HSG – Your information request and voluntary contributions
A standardized information request by you, e.g. in the form of a newsletter, is currently not possible. Comments or similar are not possible.
c.) HSG – Your Contacting
Data in web forms: as long as the CMS author does not actively delete the list of sent forms.
d.) HSG – Third Parties
Third parties presented in the Consent Menu inform in their data protection provisions about a corresponding duration of the storage of data. Information that is made available to the HSG by using third-party services is retained indefinitely, provided that the data is anonymous.
C.7. Information about the rights of data subjects
- Right to information
- Right to correction (or also completion) of your data
- Right to delete data
- Right to restriction of data processing
- Right to data portability (data transferability)
- Right to revoke a previously given consent (also unsubscribe newsletter)
- Right to object to data processing
To assert your rights, you can use the contact options specified under point C.1. The exercise of these rights requires that you clearly prove your identity.
Please note that the HSG reserves the right to assert the restrictions provided for by law, for example if it is obliged to retain or process certain data, has an overriding interest in doing so (as far as it is entitled to rely on this) or if it is required for the assertion of claims.
The HSG may support the rights of data subjects vis-à-vis third parties to the extent that this is objectively possible.
C.8. Right of appeal
Right of appeal in case of applicability of the DSG SG:
Fachstelle Datenschutz Kanton St.Gallen
Regierungsgebäude
9001 St. Gallen
+41 58 229 14 14
datenschutz@sg.ch
Right of appeal in case of applicability of the DSG CH:
Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter (EDöB)
Feldeggweg 1
CH - 3003 Bern
+41 58 462 43 95
Kontakt
In case of applicability of the GDPR, there is a right of appeal to the competent data protection supervisory authority.
C.9. Automated decision making and profiling
In the context of this online presence, no personal data is collected or centrally compiled to create a profile with analyzable data or to conduct behavioral control. Automated decision-making does not take place.
C.10. Further information
The HSG does not apply any social media plugins. Bouncing links exist, for:
When clicking on the links, the data protection provisions of these third parties apply, not those of the HSG.
The displayed social media wall does not collect any personal data from users of the HSG's online presence.
In areas of the website that are accessible via general passwords, no additional data are collected than those mentioned in point C.3.a.