_edited.png){kind=logo}
Privacy Policy
1. Data Controller
The VSUZH, the Association of Students of the University of Zurich, is responsible for the data processing described here, unless otherwise stated in individual cases. Data protection inquiries, including a copy of your ID or passport for user identification, can be sent to us by letter or email: VSUZH, Rämistrasse 62, CH-8001 Zurich, info@vsuzh.ch . The VSUZH's executive secretariat is authorized to provide information.
2. Collection and processing of personal data
We automatically collect non-personally identifiable data through our Wix website backend. This includes:
Anonymized locations of the device through which access was gained
Device type
Behavior of website users
Pages that were visited
How often a subpage is accessed
Duration of website use
Average length of stay based on the total number of visitors
Total number of visits to the website in terms of number of people (or browsers) and page views
In forms, users voluntarily provide personal data that is necessary to fulfill the purpose of the form. Personalized data may also be collected. Some services and participation tools may be linked to the input of such personalized data.
3. Purposes of data processing and legal bases
We use our data to monitor website visits and adjust traffic.
When data is voluntarily provided via forms on the website, the data is used with the consent of the users to process the corresponding request at the request of the users.
4. Cookies
We typically use "cookies" and similar technologies on our websites to identify your browser or device. A cookie is a small file that is sent to your computer and automatically stored on your computer or mobile device by your web browser when you visit our website. This allows us to recognize you when you return to the website, even if we don't know your identity. In addition to cookies that are only used during a session and deleted after your visit ("session cookies"), cookies can also be used to store user preferences and other information for a specific period (e.g., two years) ("persistent cookies"). You can configure your browser to reject cookies, store them only for a single session, or delete them prematurely. Most browsers are preset to accept cookies. If you block cookies, some functionalities may no longer work.
We may include marketing content in our newsletters and, where permitted, also visible and invisible image elements. Wix uses these elements to determine if and when the email was opened, allowing us to measure and better understand how our offers are used and tailor them to user needs. This data collection is completely anonymous. You can block this in your email program; most are configured to do so by default.
By using our websites and consenting to receive newsletters and other marketing emails, you agree to the use of these technologies. If you do not wish to do so, you must adjust your browser or email program settings accordingly.
We also use plugins from social networks such as Facebook, Twitter, YouTube, and Instagram on our websites. This is always clearly visible to you (typically via corresponding icons). We have configured these elements so that they are deactivated by default. If you activate them (by clicking), the operators of the respective social networks can register that you are on our website and which page you have visited. They can use this information for their own purposes. The processing of your personal data is then the responsibility of the respective operators in accordance with their data protection regulations. We do not receive any information about you from them.
5. Data sharing and data transfer within Germany and abroad
We only disclose your personal data within Switzerland to third parties (e.g., the University of Zurich and other authorities) if this is necessary for the association's activities, mandatory legal requirements (e.g., official requests, court orders), or for the purpose of legal or criminal prosecution. We do not disclose your data to third parties for any other purpose. In particular, we do not sell personal or non-personal data.
The VSUZH does not share any personally identifiable information abroad. Non-personalized data is collected and analyzed via Wix abroad.
When you voluntarily use a form on our website, the services of Wix and Google are used to make the data accessible to us. This means that the data is stored by these two service providers at their respective locations.
6. Duration of storage of personal data
We process and store your personal data for as long as it is necessary to fulfill our contractual, regulatory, and legal obligations, or otherwise for the purposes for which it was processed. This means, for example, for the duration of a competition or the verification of student engagement for a Diploma Supplement, and beyond that, in accordance with statutory retention and documentation requirements. It is possible that personal data may be retained for the period during which claims can be asserted against our organization, and to the extent that we are otherwise legally obligated to do so or legitimate business interests require it (e.g., for evidentiary and documentation purposes). As soon as your personal data is no longer required for the aforementioned purposes, it will generally be deleted or anonymized to the extent possible.
Non-personalized data will not be deleted.
The VSUZH's executive secretariat is responsible for deleting personalized data. Deletion takes place at the end of the VSUZH's fiscal year, specifically at the end of January.
7. Data security
We take appropriate technical and organizational security measures to protect your personal data from unauthorized access (confidentiality), from breaches of its integrity, and from its use when needed (availability). These measures include, for example, training, access controls and restrictions, encryption of data storage and transmissions, pseudonymization, and audits.
8. Obligation to provide personal data
As part of our services, you must provide the personal data necessary for initiating and carrying out your request and fulfilling the associated tasks (you are generally not legally obligated to provide us with this data). Without this data, we will generally be unable to process your request. Furthermore, the website cannot be used if certain information required to ensure data transmission (such as your IP address) is not disclosed.
9. Profiling
VSUZH does not engage in profiling. Profiling involves processing personal data with the aim of evaluating certain personal aspects such as employment status, personal preferences, and location.
10. Rights of the data subject
Under applicable data protection law, and to the extent provided therein (such as under the GDPR), you have the right to access, rectification, erasure, restriction of processing, and the right to object to our processing of your data, as well as the right to receive certain personal data for transmission to another controller (data portability). Please note, however, that we reserve the right to assert any legally permissible limitations, for example, if we are obligated to retain or process certain data, have an overriding legitimate interest in doing so (to the extent we are permitted to rely on such an interest), or require the data for the establishment, exercise, or defense of legal claims. If any costs are incurred by you, we will inform you in advance. We have already informed you about the possibility of withdrawing your consent in section 3. Please note that exercising these rights may conflict with contractual agreements and could have consequences such as early termination of the contract or incur costs. We will inform you in advance of any such conflicts, unless this is already contractually regulated.
Exercising such rights generally requires you to clearly prove your identity (e.g., by providing a copy of your ID if your identity is not otherwise clear or verifiable). To assert your rights, you can contact us at the address provided in section 1.
Furthermore, every data subject has the right to enforce their rights in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner ( http://www.edoeb.admin.ch ).
11. Web analytics
To gain insights into the use of our website, to improve our online services, and to be able to target you with advertising on third-party websites or social media, we use the following web analytics tools and retargeting technologies: Google Analytics.
These tools are provided by third-party providers. Typically, the information collected about website usage for this purpose is transmitted to the third-party provider's server using cookies or similar technologies. Depending on the third-party provider, these servers may be located abroad.
The data is normally transmitted with IP addresses shortened, thus preventing the identification of individual devices. Third-party providers only transfer this information based on legal requirements or as part of commissioned data processing.
a. Web analytics Google Analytics
We use Google Analytics on our websites, the web analytics service of Google LLC, Mountain View, California, USA, responsible for Europe is Google Limited Ireland (“Google”).
To deactivate Google Analytics, Google provides a browser plug-in at https://tools.google.com/dlpage/gaoptout?hl=de .
Google Analytics uses cookies. These are small text files that make it possible to store specific, user-related information on the user's device. This allows Google to analyze the use of our website. The information collected by the cookie about your use of our website (including your IP address) is generally transmitted to and stored on a Google server in the USA. We would like to point out that on this website, Google Analytics has been extended with the code "gat._anonymizeIp();" to ensure anonymized collection of IP addresses (so-called IP masking). When anonymization is active, Google shortens IP addresses within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, which means that no conclusions can be drawn about your identity.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google may associate your IP address with other Google data. For data transfers to the USA, Google has committed to signing and complying with the EU Standard Contractual Clauses.
b. Google Maps
On our website, we use Google Maps (API) from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; responsible for Europe is Google Limited Ireland, "Google"). Google Maps is a web service for displaying interactive maps to visually represent geographical information. Using this service allows us to show you our location and makes it easier for you to find directions. When you access any page on our website that includes a Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers in the USA. This occurs regardless of whether you have a Google account and are logged in. If you are logged in to Google, your data will be directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them.
For data transfers to the USA, Google has committed to signing and complying with the EU Standard Contractual Clauses.
12. Changes
We may amend this privacy policy at any time without prior notice. The current version published on our website applies.