Source: https://simonites.ch/privacy-policy/
Timestamp: 2019-04-19 07:18:12+00:00

Document:
We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the Simonites - The Rochester-Bern Alumni Association. The use of the Internet pages of the Simonites - The Rochester-Bern Alumni Association is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the Simonites - The Rochester-Bern Alumni Association. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
As the controller, the Simonites - The Rochester-Bern Alumni Association has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.
The data protection declaration of the Simonites - The Rochester-Bern Alumni Association is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.
The website of the Simonites - The Rochester-Bern Alumni Association collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.
When using these general data and information, the Simonites - The Rochester-Bern Alumni Association does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, the Simonites - The Rochester-Bern Alumni Association analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
If we disclose data to other persons and companies (processors or third parties) within the scope of our processing, transmit it to them or otherwise grant them access to the data, this shall only take place on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as payment service providers, in accordance with Art. 6 Para. 1 lit. b DSGVO for contract fulfilment is necessary), if you have consented, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
Rochester-Bern Executive Programs, Hochschulstrasse 4, 3012 Bern, Switzerland, https://www.rochester-bern.ch/About-us/imprint.html. This due to clarify aligability of any candidate to join our association or due to using services offered by Rochester-Bern Executive Programs such as sending mailings, newsletter or invites etc. with regards to our services for our alumni.
Alumni UniBE, Hochschulstrasse 4, 3012 Bern, Switzerland, http://www.unibe.ch/universitaet/organisation/alumni_unibe/alumni_netzwerk/index_ger.html. This due to provide our members with the membership of Alumni UniBE and the thereby granted benefits as per our agreement with the Alumni UniBE association. Alumni UniBE will store your personal data such as e-mail and first- and lastname which we provide them with as well as any additional data you might provide them yourselves by making use of their respective online offering.
SAMBAplus, Benno Marbach, Schoeneggstrasse 18, 6048 Horw, Switzerland, https://sambaplus.ch/. This due to provide the members of our Joint-Membership plan with the respective access towrards the services offered by SAMBAplus. SAMBAplus will store your personal data such as e-mail and first- and lastname which we provide them with as well as any additional data you might provide them yourselves by making use of their respective online offering.
On the website of the Simonites - The Rochester-Bern Alumni Association, users are given the opportunity to subscribe to our enterprise's newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller.
The Simonites - The Rochester-Bern Alumni Association informs its customers and business partners regularly by means of a newsletter about enterprise offers. The enterprise's newsletter may only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorized to receive the newsletter.
The newsletter of the Simonites - The Rochester-Bern Alumni Association contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, the Simonites - The Rochester-Bern Alumni Association may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects.
Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by the controller. The Simonites - The Rochester-Bern Alumni Association automatically regards a withdrawal from the receipt of the newsletter as a revocation.
The website of the Simonites - The Rochester-Bern Alumni Association contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
The Simonites - The Rochester-Bern Alumni Association offers users the possibility to leave individual comments on individual blog contributions on a blog, which is on the website of the controller. A blog is a web-based, publicly-accessible portal, through which one or more people called bloggers or web-bloggers may post articles or write down thoughts in so-called blogposts. Blogposts may usually be commented by third parties.
The comments made in the blog of the Simonites - The Rochester-Bern Alumni Association may be subscribed to by third parties. In particular, there is the possibility that a commenter subscribes to the comments following his comments on a particular blog post.
As part of the fulfilment of contracts, we make use of the payment service providers on the basis of Art. 6 para. 1 lit. b. DSGVO. Furthermore, we employ external payment service providers on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. b. DSGVO to provide our users with effective and secure payment options.
Our website is using the service "Akismet" offered by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. The use is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR. With the help of this service, comments of real people are distinguished from spam comments. All comment information is sent to a server in the USA, where it is analyzed and stored for four days for comparison purposes. If a comment has been classified as spam, the data will be stored after this time. This information includes the name entered, the e-mail address, the IP address, the comment content, the referrer, information on the browser used, the computer system and the time of entry.
On our website we use the service Gravatar of Automattic Inc. 60 29th Street #343, San Francisco, CA 94110, USA, within our online offer and especially in our blog. Gravatar is a service where users can log in and store profile pictures and their e-mail addresses. If users leave contributions or comments with the respective e-mail address on other online presences (above all in blogs), their profile pictures can be displayed next to the contributions or comments. For this purpose, the e-mail address provided by the users is transmitted to Gravatar in encrypted form for the purpose of checking whether a profile has been saved for it. This is the sole purpose of the transmission of the e-mail address and it will not be used for other purposes, but will be deleted thereafter.
If users do not want an image associated with their email address to appear in Gravatar's comments, you should use a non-Gravatar email address for commenting. We would also like to point out that it is also possible to use an anonymous or no e-mail address if users do not wish their own e-mail address to be sent to Gravatar. Users can completely prevent the transfer of data by not using our comment system.
The newsletter is sometimes sent by the mail service provider "MailChimp", a newsletter delivery platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The data protection regulations of the shipping service provider can be viewed here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The dispatch service provider is used on the basis of our legitimate interests according to Art. 6 Para. 1 letter f DSGVO and an order processing contract according to Art. 28 Para. 3 S. 1 DSGVO.
To provide our website and online services, we are using the services of the hosting provider cyon GmbH, Brunngässlein 12, 4052 Basel, Switzerland. The data protection regulations of the hosting provider can be viewed here: https://www.cyon.ch/legal/privacy. The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail delivery, security services and technical maintenance services that we use for the purpose of operating this online offer.
Log file information is stored for a reasonable number of days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data whose further storage is required for evidentiary purposes are excluded from deletion until the respective incident has been finally clarified.
Google Tag Manager is a solution with which we manage so-called website tags via an interface (and thus integrate Google Analytics and other Google marketing services into our online offering, for example). The Tag Manager itself (which implements the tags) does not process any personal data of the users. With regard to the processing of users' personal data, reference is made to the following information on the Google services. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) we are using the wordpress plugin Jetpack (here the subfunction "Wordpress Stats"), which integrates a tool for statistical analysis of visitor access and from Automattic Inc. 60 29th Street #343, San Francisco, CA 94110, USA. Jetpack uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site.
We maintain online presences within social networks and platforms in order to communicate with active customers, interested parties and users and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply. Examples are: Twitter, LinkedIn, Facebook, Instagram, Xing and others.
Within our online offer based on our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) we make use of content or service offerings of third parties to incorporate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) we are using Social Plugins ("Plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are identified by one of the Facebook logos (white "f" on blue tile, the terms "like", "like" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
The "AddThis" service (1595 Spring Hill Rd Suite 300 Vienna, VA 22182, USA) is used within our online offer to share the contents of this online offer within social networks (so-called sharing).
The use is based on our legitimate interests, i.e. interest in a distribution of our online offer according to Art. 6 para. 1 lit. f. DSGVO.
If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the Simonites - The Rochester-Bern Alumni Association, he or she may, at any time, contact any employee of the controller. An employee of Simonites - The Rochester-Bern Alumni Association shall promptly ensure that the erasure request is complied with immediately.
Where the controller has made personal data public and is obliged pursuant to Article 17(1) to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of the Simonites - The Rochester-Bern Alumni Association will arrange the necessary measures in individual cases.
If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the Simonites - The Rochester-Bern Alumni Association, he or she may at any time contact any employee of the controller. The employee of the Simonites - The Rochester-Bern Alumni Association will arrange the restriction of the processing.
In order to assert the right to data portability, the data subject may at any time contact any employee of the Simonites - The Rochester-Bern Alumni Association.
The Simonites - The Rochester-Bern Alumni Association shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If the Simonites - The Rochester-Bern Alumni Association processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to the Simonites - The Rochester-Bern Alumni Association to the processing for direct marketing purposes, the Simonites - The Rochester-Bern Alumni Association will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by the Simonites - The Rochester-Bern Alumni Association for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
In order to exercise the right to object, the data subject may contact any employee of the Simonites - The Rochester-Bern Alumni Association. In addition, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, the Simonites - The Rochester-Bern Alumni Association shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the Simonites - The Rochester-Bern Alumni Association.
If the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact any employee of the Simonites - The Rochester-Bern Alumni Association.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6