Data protection provisions of HSG Alumni

1     Controller for data processing

The controller institution for the recording, processing and use of personal data is:

Firm: HSG Alumni

Address: Dufourstrasse 50, 9000 St. Gallen

Country: Switzerland

Telephone: +41 71 224 30 10

E-mail: datenschutz@hsgalumni.ch

Web: www.hsgalumni.ch

HSG Alumni’s business activities do not require the appointment of a representative in the European Union in accordance with Art. 27 GDPR.

If you should have questions about the protection and security of your data or would like to assert your rights and claims in connection with data protection, please contact us by telephone or by e-mail through the contact data indicated above.

2     Recorded data

When we record and process personal data, we comply with the statutory precepts of the applicable data protection laws. The legal bases are constituted by Art. 13(1) of the Federal Act on Data Protection or, inasmuch as it is applicable, Art. 6(1)(b or f) of the EU’s GDPR.

2.1      General recording

Our internet pages record a number of general data every time they are selected. These general data and pieces of information are stored in the logfiles of the server. The following data are recorded:

  • IP address
  • Date and time of the enquiry
  • Time zone difference from the GMT zone
  • Content of the request
  • Access status/http status code
  • Data volume transmitted every time
  • Website from which the enquiry has been sent
  • Browser (including language and version)
  • Operating system

When these general data are used, they are not allocated to any specific person. Recording these data is a technical requirement for us to be able to display our website to you and to guarantee its stability and security.

2.2      Establishing contact

When you contact us through the contact form or the e-mail addresses indicated, we will always treat the data you have transmitted in compliance with the applicable data protection provisions. The data you have transmitted will exclusively be used to process your enquiry.

We will store that data you have input into the contact form until you submit a request for their deletion, revoke your consent to their storage or if the purpose of data storage has ceased to exist (for instance after your enquiry has been processed). Mandatory statutory provisions – retention periods, in particular – will remain unaffected.

Your e-mail address can be used to produce an anonymised string (also called hash) and forwarded to the Gravatar service to check whether you also use this service. The privacy policy of the Gravatar service can be found here: https://automattic.com/privacy/.     

2.3      WhatsApp

When you send us a message by WhatsApp (WhatsApp Inc., 650 Castro Street, Suite 120-219, Mountain View, California, 94041, USA; “WhatsApp”) or become a member of one of our WhatsApp groups, you disclose your telephone number to us. According to WhatsApp, this will be stored on secured servers and not forwarded to any third persons.

We will only use the number for WhatsApp communications with you and for analytical purposes. If you install and use WhatsApp on your mobile phone, you agree with WhatsApp’s general terms and conditions. These include, among other things, the fact that you provide WhatsApp Inc. with access to your telephone number and the contacts stored on your telephone. In the case of questions of a personal nature (i.e. with contents that concern personal data), you should indicate an e-mail address or telephone number for any further correspondence since we do not answer such questions by WhatsApp.

More detailed information about the recording and use of your data by WhatsApp can be found in their privacy policy: https://www.whatsapp.com/legal.

2.4      Audio and video conferences

We use services for audio and video conferences in order to be able to communicate with you. In particular, they enable us to run audio and video conferences, virtual meetings and educational sessions such as webinars.

We only use services which guarantee appropriate data protection. In addition to this data protection declaration, any possible terms and conditions of the services used will be applicable, such as their terms of use or privacy policies.

3     Log-in

To make use of certain functions, you can log into our website.

Personal data will be recorded when you log in if you provide us with these for the performance of a contract in the shop or for seminars and events, as well as for the management of your membership when you open a customer account. The data that are recorded can be seen in the relevant input forms. You can delete your customer account at any time by sending a message to the controller. We store and use the data you have provided us with for contract processing.

Once the contract has been fully processed or your customer account has been deleted, your data will be converted to inactive in compliance with statutory retention periods and deleted once these periods have expired unless you have given express consent to a further use of your data as a member or unless there is a statutorily permitted use of your data.

3.1      Payment transactions

We use payment service providers in order to be able to transact our customers’ payments securely and reliably. We only use payment service providers which guarantee appropriate data protection. All the transactions are subject to the terms and conditions of the payment service providers concerned, such as their general terms and conditions or data protection declarations.

4     Blogs and comments

If you use the comment function or the blog on this website, it will not only be your comment that is saved and published on the website, but also information about the time at which the comment was written and the commentator name you have chosen. Furthermore, your IP address will be logged and saved. The IP address is saved for reasons of security and for the case whereby the person concerned violates third parties’ rights with the comment posted or posts unlawful contents. We will require your e-mail address in order to contact you if a third party should object to the contents published by you as being unlawful. We reserve the right to delete comments if they are objected to as being unlawful by third parties.

Once the comment has been released, your name will be publicly visible in the context of your comment.

You can subscribe to new publications and follow-up comments in the blog. Users will receive confirmation by e-mail to check whether they are the owners of the e-mail address indicated. Users can cancel ongoing comment subscriptions at any time. Confirmation by e-mail will contain information about the options of revocation. For the purposes of providing evidence of users’ consent, we save users’ time of registration and IP address and delete this information when users cancel the subscription.

You can delete the receipt of the comment at any time. The unsubscribed e-mail addresses can be saved for the duration of two years in order to be able to provide evidence of previously given consent. The processing of these data will be limited to the purpose of a possible defence against claims. An individual request for deletion is always possible, provided that the previous existence of consent is confirmed at the same time.

5     SSL and TLS encryption

For reasons of security and for the protection of the transmission of confidential contents such as the enquiries you send to us as website operators, this website uses SSL and TSL encryption. You recognise an encrypted connection by the fact that the address line of the browser changes from “http://” auf “https://” and by the padlock symbol in your browser line.

When the SSL encryption is activated, the data that you are sending to us cannot be read by any third parties.

6     Cookies

Our website makes use of so-called cookies, i.e. small text files which are filed on your computer and can be retrieved from it again. Cookies serve to enable you to register for our services and to personalise the website for you. For this purpose, our website is supported by cookies, which gather information about your IP address, the time and duration of your visit, the number of your visits, the use of forms, your search settings, your display and your settings concerning favourites on our website. The storage period of cookies varies.

You can prevent cookies from being set by our website at any time by means of a corresponding setting of the internet browser used and thus veto the setting of cookies permanently. Furthermore, cookies that have already been set can be deleted through an internet browser or other software programs at any time. This is possible in all the common internet browsers. If the person concerned deactivates the setting of cookies in the internet browser used, this person may possibly be unable to make complete use of all the functions of our website.

6.1      Google Analytics

Our internet pages use Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies which allow for an analysis of the use of the website. The information generated by the cookie about the use of the website is transmitted to a server of Google in the USA in an anonymised form and stored there. Thanks to this anonymisation, these data cannot be allocated to any specific person. Google will use this information to evaluate the use of the website in order to compile reports on user activities and to provide further services related to the use of the website and the internet. If need be, Google may transmit this information to third parties if this is prescribed by law and in so far as third parties process these data on behalf of Google. The legal basis is constituted by Art. 6(1)(1)(f) of the EU’s General Data Protection Regulation and Art. 13(1) FADP.

You can prevent the recording of the data generated by the cookie and relating to your use of the website (including your IP address) and their transmission to Google and the processing of these data by Google by downloading and installing the browser plug-in available through the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Google is certified under the Privacy Shield agreement and thus provides the guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Further information about data processing by Google can be found in Google’s privacy policy: http://www.google.de/intl/de/policies/privacy.

6.2      Google Maps

We use a plug-in of the internet service Google Maps on your internet pages. Google Maps is operated by Google. If you use Google Maps on our website, information about the use of this website (including IP address) is transmitted to a Google server in the USA and also stored on that server. We do not have any knowledge of the precise content of the data transmitted, nor of their use by Google. If need be, Google may transmit this information to third parties if this is prescribed by law and insofar as third parties process these data on behalf of Google. If you deactivate JavaScript in your browser, you will prevent the execution of Google Maps. However, you will then also be unable to use any map display on our website. If you use Google Maps, you declare your consent to the above-mentioned recording and processing of information by Google Inc. Art. 6(1)(1)(f) of the EU’s General Data Protection Regulation. More details about the data protection provisions and terms of use can be found here: https://www.google.com/intl/de_de/help/terms_maps.html.

6.3      OpenStreetMap

This website uses map sections of OpenStreetMap (https://www.openstreetmap.de/).

OpenStreetMap is an open-source mapping tool. To enable the map to be displayed to you, your IP address is transmitted to OpenStreetMap. The way in which OpenStreetMap stores your data can be viewed in OpenStreetMap’s privacy policy at https://wiki.openstreetmap.org/wiki/DE:Datenschutz and at https://wiki.openstreetmap.org/wiki/DE:Legal_FAQ.

6.4      Google Adsense

This website uses Google AdSense, a service for the integration of advertisements of Google. Google AdSense uses so-called “cookies”, text files which are stored on your computer and allow for an analysis of the use of the website. Google AdSense also uses so-called web beacons (invisible graphs). Through these web beacons, information such as visitor traffic on these pages can be evaluated.

The information about the use of this website (including your IP address) generated by cookies and web beacons and the delivery of advertising formats will be transmitted to a server of Google in the USA and stored there. Google may forward this information to contracting partners of Google. However, Google will not conflate your IP address with any other data it has received from you and stored.

6.5      Google Web Fonts

For the standardised display of fonts, we set so-called web fonts on this website, which are available from Google. When you select a page, your browser will load the necessary web fonts into the browser cache in order to display the texts and fonts correctly.

For this purpose, the browser used by you will have to link up with the servers of Google. Through this, Google will learn that our website was selected through your IP address. Google Web Fonts is used in the interest of a standardised and appealing display of our online services.

If your browser does not support Web Fonts, a standard font from your computer will be used.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

6.6      Google Tag Manager

This website uses Google’s Google Tag Manager. Through this service, website tags can be managed via a surface. The Google Tag Manager only implements tags. This means: no cookies are used and no personal data are recorded. The Google Tag Manager triggers off other tags, which may possibly again record data. However, the Google Tag Manager does not access these data. If a deactivation was carried out at the domain or cookie levels, it will remain in force for all tracking tags inasmuch as they have been implemented by the Google Tag Manager.

6.7      Polyfill

On the website, JavaScript code of The Financial Times Ltd, Number One Southwark Bridge, London, SE1 9HL, Great Britain (“polyfill.io”) is downloaded. If you have activated JavaScript on your browser and have not installed a JavaScript blocker, the browser may transmit personal data to polyfill.io if need be. Further information can be found in polyfill.io’s privacy policy: https://polyfill.io/docs/privacy-policy. To prevent the execution of the JavaScript code of polyfill.io completely, you can install a JavaScript blocker such as www.noscript.net or www.ghostery.com.

7     Social media plug-ins

Plug-ins of various third-party providers of social media platforms (Facebook, Google, YouTube, Twitter, etc.) may be integrated in connection with services on offer on the website. If you visit services on offer on the website, these plug-ins may automatically transmit data to third-party providers. It is also possible that with individual services, only a simple linkage without any cookies has been installed and that you will leave the website of HSG Alumni’s website.

The legal basis of the above-mentioned instances of data processing is constituted by our justified interest.

7.1      Facebook

On our pages, plug-ins of the social network Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA (“Facebook”) are integrated. You can recognise the Facebook plug-ins by the Facebook logo and the “Like button” on our website. An overview of the Facebook plug-ins can be found here:
www.facebook.com/about/privacy/.

When you visit our pages, the plug-in establishes a direct connection between your browser and the Facebook server. Through this, Facebook receives the information that you have visited our website with your IP address. If you click on the Facebook “Like button” while you are logged in your Facebook account, you will be able to link up the contents of our pages with your Facebook profile. This enables Facebook to allocate your visit to our pages to your user account. We would like to point out that as the provider of the pages, we will not receive any information about the content of the data transmitted or their use by Facebook. You can find further information about this in Facebook’s privacy policy at www.facebook.com/about/privacy/. If you do not wish Facebook to be able to allocate your visit to our pages to your Facebook user account, then please log out of your Facebook user account.

7.2      Twitter

On our pages, functions of the Twitter service are integrated. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA, 94103, USA (“Twitter”). When you use Twitter and the “Re-Tweet” function, the websites visited by you are linked up with your Twitter account and made known to other users. In the process, data such as your IP address, browser type, selected domains, visited website, mobile providers, device and application IDs and search terms are transmitted to Twitter.

We would like to point out that as the provider of the pages, we do not receive any information about the content of the data transmitted and their use by Twitter. Owing to the ongoing updating of Twitter’s privacy policy, we would like to refer you to the latest updated version at http://twitter.com/privacy. You can change your data protection settings at Twitter in the account settings under twitter.com/account/settings. If you have any questions, please contact privacy@twitter.com.

7.3      Xing

This website uses social media plug-ins of the social network XING, which is operated by XING AG, Dammtorstraße 29-32, 20354 Hamburg (“XING”). The “social plug-ins” can be recognised by the XING logo, a stylised “X” made up of two opposing arrows in green.  If this internet site is selected, the user’s browser establishes a connection with the servers of XING for a short time, with which the “XING share button” functions (particularly the calculation/display of the counter value) are executed. XING does not store any personal data of the user about the selection of this service. In particular, XING does not store any IP addresses, nor does it evaluate the user’s behaviour with regard to the use of cookies in connection with the “XING share” button. Users can find the data protection information about the “XING share button” that is applicable at any time on this internet site: https://www.xing.com/app/share?op=data_protection.

7.4      LinkedIn

This website uses plug-ins of the social network LinkedIn, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). The plug-ins of LinkedIn can be recognised by the corporate logo or the “Recommend button”. Please note that when you visit our website, the plug-in will establish a connection between the internet browser you are using at the time and the server of LinkedIn. Thus LinkedIn will be notified of the fact that this website has been visited with your IP address. If you click on the “Recommend button” of LinkedIn while being logged into your LinkedIn account at the same time, it will be possible for you to link up a content of our website with your profile page in the LinkedIn profile. In doing so, you will enable LinkedIn to allocate your visit to our website to you and your user account. You have to know that we will not receive any information about the content of the data transmitted and their use by LinkedIn.

Further details about the recording of data and about your legal options and setting options can be learned from LinkedIn at http://www.linkedin.com/.

7.5      Instagram

This website contains plug-ins of the social network Instagram, which is operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

If you are logged into your Instagram account, you can link up the contents of our website with your Instagram profile by clicking on the Instagram button. Through this, Instagram will be able to allocate the visit to our website to your user account. We would like to point out to you that as the provider of the pages, we do not receive any information about the content of the data transmitted and their use by Instagram. If you want to prevent this, you can log out of Instagram before you visit this website. Further information about this can be found in Instagram’s data policy: https://instagram.com/about/legal/privacy/.

7.6      YouTube

This website uses plug-ins of the YouTube website, which is operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”). When you visit one of our pages that is equipped with a YouTube plug-in, a connection will be established with the servers of YouTube. In the process, the YouTube server will be notified about which of our pages you have visited.

If you are logged into your YouTube account, you will enable YouTube to allocate your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. Further information about the treatment of user data can be found in YouTube’s privacy policy at www.google.de/intl/de/policies/privacy.

7.7      Vimeo

On this website, we use the plug-in of the Vimeo video portal (Vimeo LLC, 555 West 18th Street, New York, NY 10011, USA; “Vimeo”) in order to improve the user experience by means of videos.

Whenever you select a page which offers one or more video clips, a direct connection will be established between your browser and a server of Vimeo in the USA. In the process, information about your visit and your IP address will be stored. If you interact with the Vimeo plug-ins (for instance by clicking on the start button), this information will also be transmitted to Vimeo and stored by Vimeo. If you have a Vimeo user account and do not want Vimeo to record data about you through this website and link them up with your membership data stored by Vimeo, you will have to log out of Vimeo before you visit this website.

Furthermore, Vimeo will select the analytical tool Google Analytics through an iFrame in which the video is selected. This is a tracking process of Vimeo’s own to which we do not have any access. You can prevent this tracking process by Google Analytics by using the deactivation tools which Google offers for some internet browsers.

Further information about the recording and use of your data by Vimeo can be found in its privacy policy: https://vimeo.com/privacy.

7.8      Flickr

This website uses plug-ins of the photo portal Flickr (Flickr, 475 Sansome St. 6F, San Francisco, CA 94111, USA is part of Yahoo Inc.; “Flickr”). Further information can be found in Flickr’s privacy policy: https://policies.yahoo.com/us/en/yahoo/privacy/products/flickr/index.htm.

8     Newsletter

With your consent, you are able to subscribe to our various newsletters, in which we provide you with information about interesting developments. To register, you can use the relevant web form. Compulsory information is marked separately; all other information is voluntary. The consent you have given us to send you the newsletter can be revoked at any time and thus the subscription to the newsletter can be cancelled. You can revoke your consent by clicking on the link provided in every newsletter e-mail or through the contact data of the controller indicated in this imprint.

Furthermore, we can send you our newsletter in the context of a business or contractual relationship with you. You can deregister from the newsletter at any time by clicking on the link provided in every newsletter e-mail or through the contact data of the controller indicated in this imprint.

To send newsletters, we use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, “The Rocket Science Group”. Data protection is safeguarded by the conclusion of a data protection agreement with standard contractual clauses.

In addition, The Rocket Science Group provides further-reaching data protection information at http://mailchimp.com/legal/privacy/.

If you register for our newsletters, the data required from you during the registration process, such as your e-mail address and your name, will be processed by The Rocket Science Group. In addition, your IP address, as well as the date and time of your registration will be stored. In the course of the further registration process, your consent to being sent the newsletter will be requested, the contents will be specifically described and you will be referred to this data processing declaration.

Additionally, the newsletter subsequently sent by The Rocket Science Group will contain a so-called tracking pixel, also called a “web beacon”. With the help of this tracking pixel, we will be able to evaluate whether and when you have read our newsletter and whether you have followed any possible further-reaching links provided by the newsletter. Besides further technical data, such as the data of your EDP system and your e-mail address, the data processed thereby are stored in order to enable us to optimise our newsletter service and to respond to our readers’ wishes. The data are thus recorded to boost the quality and attraction of our newsletter service.

9     Data transmission

HSG Alumni may transmit data to be processed by the University of St.Gallen or consult third parties for order processing. These are subject to the same strict data protection provisions.

10   Your rights

You have the following rights vis-à-vis us regarding personal data concerning you:

  • the right to information,
  • the right to correction or deletion,
  • the right to limitation of processing,
  • the right to object to processing.

Provided that data processing on our website is based on your consent, you can revoke this at any time for the future without giving any reasons. The revocation will have to be sent to the address datenschutz@hsgalumni.ch. To enable us to process your queries regarding the exercise of your rights, it may be necessary for you to identify yourself to ensure that we will be able to identify you unequivocally.

In Switzerland, there is no right of appeal to a supervisory authority. If the GDPR is applicable, there is a right of appeal to the competent data protection supervisory authority.

11   Data security

To protect your data, we have implemented numerous technical and organisational measures in order to ensure as complete a protection of the personal data processed through this website as possible. Communication by e-mail, mobile telephone or internet applications involves risks such as access to, changes to or loss of the content of the message. HSG Alumni does not assume any responsibility for this.

Daniel Knus

CEO

daniel.knus@unisg.ch