DATA PROTECTION POLICY

The protection of your personal data (data) and the protection of your privacy are important to us. We handle your data responsibly. We process personal data in accordance with the Swiss Data Protection Act and, where applicable, the EU General Data Protection Regulation.

In this data protection policy, we inform you about the collection of personal data on our website and its processing offline.

We reserve the right to revise the data protection policy at any time. You can always find the last version on the website when you visit it.

1. CONTACT

1.1 IDENTITY AND CONTACT DETAILS OF THE CONTROLLER OF YOUR PERSONAL DATA:

Digiscovery − Digital School Foundation
c/o BoldBrains AG
Sihleggstrasse 9
CH-8832 Wollerau

E-mail: info@digiscovery.ch

2. SCOPE AND PURPOSE OF PROCESSING PERSONAL DATA

2.1 VISITING OUR WEBSITE

When you visit our website, our servers temporarily store the following data automatically in server log files:

  • IP address of the requesting computer
  • Entry page (website from which you came to our website)
  • Browser settings
  • Browser software language and version
  • Date and time of access/retrieval
  • Name and URL of the retrieved data
  • Operating system of your computer and the browser you are using
  • Country from which our website is accessed
  • Name of your internet access provider
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Last visited website
  • Enabled browser plugins

This data is processed for the purpose of enabling the use of our website (connection setup) to ensure system security and stability over the long term, for optimization of our offer and for internal statistical purposes. A personal user profile will not be created.

The legal basis for processing your personal data is our legitimate interest in processing this data.

Non-essential cookies are not used without your consent.

2.2 CONTACTING US

On our website you have the option of contacting us by e-mail.

We process the information you provide on the legal basis of our legitimate interests in corresponding with you. This information includes: your name and contact information, other basic information, and identification and background information that you share with us.

You can object to this data processing at any time. If you object, we will no longer process your personal data for this purpose. Submit your objection to the following email address: info@digiscovery.ch

2.3 SUBMITTING APPLICATIONS

You have the option to submit your project application to us by e-mail for an initial assessment.

We process the information you provide in the context of reviewing and processing your project submission. This information typically includes: your name and contact information, identification and background information about you and, if applicable, persons associated with you, and basic project information that you share with us.

By submitting an application, you agree that the data you provide will be processed for the purpose stated when it was collected. The data processing thus serves the fulfillment of the foundation’s purpose and the fulfillment of any possible contracts.

You can object to this data processing at any time and withdraw your application. If you object, we will no longer process your personal data for this purpose. Submit your objection to the following email address: info@digiscovery.ch

2.4 DONATING

On our website, you have the possibility to support us by donating.

The provision of your personal details (last name, first name and e-mail address) as well as the payment method and the donation amount is required for the administrative processing of your donation. The provision of other data is optional.

If you wish to receive a donation receipt, we also require your address details.

In the case of a one-off donation, no payment method data is saved. If you donate regularly (monthly, quarterly, semi-annually, annually), your payment details will be recorded as they are required for the automatic transmission of the fixed donation amount. The regular donation can be adjusted or terminated at any time. For adjustments and terminations, use the relevant link included in the confirmation e-mail that you will receive after each donation.

The processing of your personal data takes place in the context of the administrative processing of your donation. The legal basis is the fulfillment of the contract.

We might inform you about the use of your donation or approach you with a further call for donations. The legal basis for processing your personal data is our legitimate interest in processing this data. In relation to existing donors, the processing of personal data in the context of donation appeals constitutes a legitimate interest.

To process your donation, we use the services of RaiseNow AG, Hardturmstrasse 101, 8005 Zurich. For more information about RaiseNow AG, please see their privacy policy.

2.5 DOWNLOADING DOCUMENTS

You have the option to download documents from our website. For this purpose, we may require your email address. We use your e-mail address exclusively for the purpose of sending you the requested documents and process it on the legal basis of our legitimate interest. We do not pass it on to third parties. We process your e-mail address for the purpose of processing your download and its completion.

You can object to this data processing at any time. If you object, we will no longer process your personal data for this purpose. Submit your objection to the following email address: info@digiscovery.ch

2.6 PROCESSING OF CUSTOMER DATA FOR MARKETING PURPOSES

We also process your personal data for the following purposes:

  • To maintain a customer relationship with you.
  • To occasionally inform you about certain projects or services.
  • To recommend projects or services that might interest you.

You can object to this data processing at any time. If you object, we will no longer process your personal data for this purpose. Send your objection to the following e-mail address: info@digiscovery.ch

2.7 PROVISION OF CONTRACTUAL SERVICES

We also process your personal data to the extent required in each case to provide our contractual or pre-contractual services and for the performance of other services you have requested. The services are always rendered on your direct behalf. The data collected will be collected from you personally or in consultation with you.

The personal data processed here, the type, scope, purpose and necessity of the processing of your data are determined by the privacy notice that is contained in the contract between you and Digiscovery – Digital School Foundation.

We do not use collected information for automated decision-making or profiling.

3. COOKIES AND THIRD-PARTY SERVICES USED BY OUR WEBSITE

3.1 COOKIES

On our website we use cookies and similar technologies (for the sake of simplicity all of these are summarized under the term “cookies”). These are small files that are saved on your computer, tablet computer or smartphone when you visit our website. In this way, the portal can save certain entries and settings (e.g. login, language, font size and other viewing preferences) over a period of time and you do not need to apply them again on each subsequent visit and when navigating in the portal.

Most of the cookies we use are so-called session cookies. These will be automatically deleted when you log out or close the browser. Other cookies remain stored on your computer beyond the respective usage process and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit to our website.

You can refuse the use of unnecessary cookies by selecting the appropriate settings in your browser or the cookie banner. Please note, however, that this can affect the possibilities regarding the use of our website.

We use the cookie banner by Borlabs (Borlabs Cookie) to obtain your consent to use cookies. For more information about the storage of data in Borlabs Cookie refer to What information does Borlabs Cookie store? For further information about cookies, including how to manage, refuse or delete them, visit www.allaboutcookies.org.

3.2 GOOGLE FONTS

In order to display our content correctly and graphically appealing across browsers, on our website we use the Google Fonts Web API (“Google Fonts”) to display fonts. The service is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if your habitual residence is in the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (collectively referred to as “Google”).

The fonts embedded via Google Fonts are cached in your transfer browser. If your browser does not support Google Fonts or prevents access, content is displayed in a standard font. When retrieving fonts to display our website, your browser sends HTTP requests to Google Fonts. These http requests include:

  • The IP address used by the respective user to access the Internet.
  • The requested URL on the Google server.
  • HTTP headers, including the user agent describing website visitors’ web browser and operating system versions.
  • The referrer (i.e. the webpage where the Google font is to be displayed).

According to Google, the company does not use any information collected by Google Fonts to create profiles of end users or for targeted advertising. However, it is currently unclear for what further purposes and where Google processes this data. Processing on servers outside of Switzerland or the European Union (e.g. in the USA) is possible. For more information about Google Fonts, see Frequently Asked Questions  |  Google Fonts  |  Google Developers and in Google’s privacy policy: Privacy Policy – Privacy & Terms – Google.

We do not collect any personal data through the integration of Google Fonts. The legal basis for the integration of Google Fonts and the associated data transfer to Google is your consent.

You can object to data processing by Google Fonts by objecting to the delivery of the fonts by Google in the cookie banner, disabling JavaScript in your browser or installing a JavaScript blocker. Please note that this can lead to functional restrictions on the website.

3.3 SOCIAL MEDIA INTEGRATION

Based on our legitimate interests, we link to the following social media on our website:

  • LinkedIn
  • Instagram
  • YouTube

Our website only integrates these social media as an external link. A processing of your personal data therefore only takes place when you click on the links. You will then be forwarded to the website of the respective provider. We have no influence on data that is then collected by the social networks. If you do not want the providers mentioned to receive your data, please do not click on the links.

For further information on the purpose and scope of data collection and the further processing and use of your personal data, please refer to the data protection notices of the respective networks. There you will also find further information on your rights in this regard.

4. DISCLOSURE OF DATA TO THIRD PARTIES

We treat your personal data strictly confidentially and only pass it on based on your consent, to comply with our legal obligations or to pursue a legitimate interest.

In particular we may transfer your personal data to:

  • IT service providers for our company (hosting and data storage) or providers to whom we outsource certain technical support services for our site or suppliers of customer relationship management systems.
  • Third parties to whom we have outsourced support services such as service partners helping us process your donation.
  • Google in the context of using Google Fonts.
  • Regulatory and other state authorities, if required by legal or statutory requirements.

We will only disclose your personal data to the extent that this is strictly necessary to achieve the intended purpose. We have taken all necessary measures to ensure that external service providers who have access to your data have implemented physical, electronic and managerial security measures to protect your data.

5. DATA TRANSFER ABROAD

If we transmit data to a country that does not have appropriate data protection, we ensure an appropriate level of protection by employing contracts accordingly, or we act on the basis of the following statutory/legal exemptions: consent, performance of the contract, the establishment, execution or enforcement of legal claims, overriding public interests, published personal data, or the need to protect the integrity of the persons in question.

6. RETENTION PERIOD

Personal data is stored for as long as there is a legal obligation to retain it. In addition, personal data is stored as long as it is necessary for the purpose for which it was collected and as long as there is a legitimate interest in the personal data, e.g. to pursue or defend against legal claims, for archiving purposes, for IT security or to check conflicts of interest.

The personal data that you provide to us when using the services offered on our website, or that you otherwise provide to us via the e-mail contact address, will generally be stored by us until you request us to delete it, until you revoke your consent to its storage, or when the purpose for storing the data no longer applies (e.g. after we have completed processing your request) and we have no legal obligation or legitimate interest in storing it.

If we conclude a contract, we will retain contract-related personal data (including business records and communications) for a period of 10 years, starting from the moment of contract termination. Exceptions apply to documents that are subject to longer retention obligations and data whose retention is required for evidentiary purposes or other good cause under applicable law.

The session cookies are deleted when the browser is closed, while the permanent ones may have a different lifetime, which differs depending on the role of the cookie.

7. DATA STORAGE

The data received by us through our website will be stored locally and on cloud servers, provided by Microsoft in Switzerland and the European Union.

8. DATA SECURITY

We take technical and organizational security precautions to protect your personal data from manipulation, loss, destruction or against access by unauthorized persons and to ensure the protection of your rights and compliance with the applicable data protection regulations. The measures taken are intended to ensure the confidentiality and integrity of your data as well as the availability and resilience of our systems and services when processing your data. They are also intended to quickly restore the availability of your data and ensure access to them in the event of a physical or technical incident.

Our security measures also include the encryption of your data. Upon transmission of your data to us, your data is encrypted by Transport Layer Security (TLS) / Encryption Https. All of the information you enter online is processed through an encrypted transmission route. This means that this information cannot be shared with anyone or cannot be viewed by unauthorized third parties.

Our data processing and our security measures are carried out in accordance with the current state of technology. We also take our own in-house data protection very seriously. Our employees and the service companies we engage are committed to confidentiality and compliance with the data protection regulations. In addition, they will be granted access to the personal data only to the extent necessary.

9. USE OF THE WEBSITE BY MINORS

This website is intended for an adult audience. Children under the age of 16 are prohibited without the consent of their parents or legal guardians to transmit their personal data to us or to register for a service. If we determine that such data has been transmitted to us, it will be deleted immediately.

10. YOUR RIGHTS

You have the following rights in relation to your personal data:

  • Right to information: you have the right to know why your personal data is collected, what happens to it and how long it will be kept.
  • Right to rectification: you have the right to request us to correct any information you believe is inaccurate. You also have right to request us to complete information you believe is incomplete.
  • Right to erasure: you have the right to demand to have your personal data erased at any time.
  • Right to transfer your data: you have the right to request that Digiscovery – Digital School Foundation transfers the data we have collected to another organization, or directly to you, under certain conditions.
  • Right to object to processing: you have the right to object to Digiscovery – Digital School Foundation’s processing of your personal data, under certain conditions.

If you have consented to the collection, processing or transfer of your personal information for a specific purpose, you may withdraw your consent for that specific processing at any time. Once we have received notification that you are withdrawing your consent, we will no longer process your personal data for these specific purposes, unless we have another legitimate interest in doing so.

Send your request regarding your personal data to the following e-mail address: info@digiscovery.ch

If you make a request, we have 30 days to respond to you.

Please note that the granting of these rights can sometimes be refused or restricted for legal reasons or based on data protection law. We can refuse to provide you with the information requested to the extent that data protection law or other laws allow or require us to do so. If legally required or permitted, we will inform you of the reasons for our decision.

If you are of the opinion that we have not dealt with your inquiry or concern to your satisfaction or if you believe that we are not processing your data in accordance with data protection regulations, you can contact the responsible supervisory authority; in Switzerland it is the Federal Data Protection and Information Commissioner.