Privacy Policy of the Swiss Student Union (VSS-UNES-USU)
1. Purpose and content of the privacy policy, applicable legal basis
This privacy policy is intended to provide users with information about what data we collect, for what purposes, where it is stored, and what they can do about data that they do not wish to provide to us. This privacy policy applies to all websites and domains operated by VSS UNES USU.
The services offered by VSS UNES USU are primarily intended for persons residing in Switzerland. For persons residing in the EU, the European General Data Protection Regulation (GDPR) applies. For persons residing in Switzerland, Swiss law (Federal Act on Data Protection, FADP) applies.
2. Name and address of the responsible parties
This website is provided at https://vss-unes.ch. The respective Co-Presididency (see under: The VVS/Office) is responsible for the content and is the responsible body within the meaning of data protection laws, including the GDPR where applicable.
VSS UNES USU
Co-Presidency
Monbijoustrasse 30
CH-3011 Bern
info@vss-unes.ch
3. Scope of processing personal data
We only process personal data to the extent necessary to provide a functional website and its content and services.
4. Legal basis and storage period
We process personal data in accordance with Swiss data protection law (in particular Art. 12 ff. of the Federal Act on Data Protection, FADP). In all other respects, we process data in accordance with Art. 6 para. 1 lit. a-d and f GDPR, insofar as the GDPR is applicable.
This means in particular that we process personal data if the user has given their express consent (Article 6(1)(a) GDPR) or to protect the legitimate interests of us or third parties, unless the fundamental freedoms and rights and interests of the user prevail (Article 6(1)(f) GDPR).
As a rule, data is only stored for as long as is necessary to achieve the purpose for which it was collected. We reserve the right to deviate from this in accordance with legal requirements binding on VSS UNES USU.
5. Cookies
Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. Our website uses cookies. When a user accesses a website, a cookie may be stored on their operating system. These cookies contain a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
We use so-called session cookies to optimize our online offering. This file does not contain any personal data and is deleted after the user closes their browser.
The user can adjust the settings in the browser used so that they are informed in advance about the setting of cookies and can decide in each case whether cookies should be accepted for certain cases or generally excluded or whether cookies should be prevented completely. This may restrict the functionality of the website.
More specifically:
We use the open source web analysis tool “Matomo” (formerly “Piwik”) for statistical analysis.
Matomo uses cookies that enable us to analyze the use of the website and evaluate user behavior. The IP address of the user is immediately anonymized. The information generated by the cookie about the use of this website is not passed on to third parties.
By embedding the Twitter and Instagram feeds on our website, cookies are set by Twitter and Instagram or by Facebook.
According to Twitter (Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A.), the service for content or products integrated into other websites via Twitter may record this visit, including the respective page, IP address, browser type, operating system, and cookie information. This information helps Twitter improve its products and services, such as personalized suggestions and personalized ads. You can find out more about what information is collected and how Twitter uses it in the privacy policy (https://twitter.com/privacy) and in Twitter’s article on the use of cookies.
To protect user privacy, Twitter states that it never links the browsing history collected via Twitter for websites to the name, email address, phone number, or Twitter username, and deletes, obscures, or aggregates the data after a maximum of 30 days, as explained in Twitter’s privacy policy. Twitter does not store browsing history for websites where this collection has been disabled or that have certain domains, such as .mil and .gov (see https://help.twitter.com/twitter-for-websites-ads-info-and-privacy).
Our pages include features of the Instagram service. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button or perform other actions through your profile. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Instagram.
Further information on this can be found in Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.
6. Provision of the website and creation of log files
Our hosting provider creates so-called log files on its servers. This is necessary in order to provide the services reliably, technically flawlessly, and in compliance with the law. These contain information such as:
IP addresses
Date and time
Log information such as log type, version, the desired action, status codes, or information about the transferred data (e.g., the size of a question or answer)
Error messages
Depending on the application, specific information such as message IDs for emails or, in the case of web access, information about the browser used (user agent string) or, if applicable, the page from which the visitor accessed the website.
This applies not only to interactions with websites, but to all services such as email (SMTP, POP, IMAP), FTP, SSH, etc.
The data remains on the hosting provider’s systems until it is no longer necessary for operational purposes and the statutory or contractual retention periods have expired, after which it is automatically deleted. For most data, this is a maximum of six months.
7. Use of contact options via the website (contact form and email)
Our website has a contact form that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.
When the message is sent, the following data is also stored:
The IP address of the user
Date and time of registration
Alternatively, you can contact us via the email address provided. In this case, the personal data transmitted with the email will be stored.
8. Rights of website users affected by data processing
Users are entitled to the rights arising from data protection legislation and, where applicable, from the GDPR. These are set out in Chapter 3 of the GDPR. They are:
Right to confirmation and information
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object
Right not to be subject to a decision based solely on automated processing, including profiling
Right to withdraw consent to data processing
Right to lodge a complaint with a supervisory authority
9. Changes to this privacy policy
VSS UNES USU reserves the right to change this privacy policy at any time. Changes will be published on the website and will take effect as soon as they are posted.
