Privacy policy and security
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Quisque sed lacus eget felis consectetur pellentesque. Duis venenatis at nunc ut lacinia. Quisque vel porttitor massa, nec porta lacus. Pellentesque non nisi fringilla, aliquet elit vel, dignissim mi. Morbi convallis ligula nec enim molestie rutrum sollicitudin ut lorem.
Preamble
SUPSI is committed to protecting the privacy of the student body, academic and technical-administrative staff, alumni and all other persons with whom it interacts.This Policy illustrates how SUPSI collects and processes personal data in accordance with data protection legislation, in particular the Cantonal and Federal Data Protection Act, as well as the relevant regulations.
SUPSI is responsible for the processing and protection of data collected for the fulfilment of its legal tasks. To this end, it guarantees the processing of data in compliance with the justifications, the general principles and the obligations laid down in the regulations in force.
Chapter 1 - Definitions
In this Policy, the following terms have the following meanings:- 'Personal data' means any information relating to an identified or identifiable person;
- 'Treatment/Processing' means any operation or set of operations carried out on personal data, including the collection, use, storage and disclosure of personal data;
- 'Data subject' means the natural person to whom the personal data relates.
Chapter 2 - Principles of Personal Data Processing
SUPSI processes personal data in accordance with the following principles:- Lawfulness: the principle of examining the conformity of data processing with all applicable regulations, and not only with data protection legislation.
- Transparency: the data subject must be properly informed (principle of good faith).
- Proportionality: data and its processing must be appropriate and necessary.
- Limited to the stated purpose: The data subject's trust in the purpose of the processing legally foreseen or deducible from the factual circumstances according to the principle of good faith is protected.
- Data accuracy: data must be correct, complete, true and up-to-date.
Chapter 3 - Scope and Consent
SUPSI may collect personal data from the student body, academic and technical-administrative staff, alumni and other persons with whom it interacts. SUPSI will only process personal data if it has obtained the consent of the data subject or if the processing is necessary for the performance of a contract, to comply with a legal obligation or for the purposes of the legitimate interests pursued by SUPSI.Chapter 4 - Collection and Use of Personal Data
SUPSI may collect in particular personal data such as names, addresses, telephone numbers, e-mail addresses and other information necessary for the administration of educational programmes and research at SUPSI, as well as for the provision of services, to the student body, academic and technical-administrative staff, alumni and others with whom it interacts.SUPSI may also collect personal data for research and statistical purposes, and for the improvement of its educational and research programmes and services.
Chapter 5 - Transmission of Personal Data
SUPSI may transmit personal data to third parties such as service providers, government authorities and other organisations, if necessary for the performance of a contract, for the fulfilment of a legal obligation or for the purposes of the legitimate interests pursued by SUPSI. SUPSI obliges such third parties to comply with data protection laws and to adopt appropriate security measures to protect personal data.Chapter 6 - Data Security
SUPSI adopts technical and organisational measures appropriate to the risk in order to guarantee the security of personal data, in accordance with applicable laws and regulations. These measures include the protection of data against unauthorised access, loss, alteration or destruction, as well as the training of employees on data security.Chapter 7 - Data Retention
SUPSI retains personal data only for as long as is necessary to achieve the purposes for which it was collected, unless there are legal or administrative obligations requiring longer retention. When personal data is no longer needed, SUPSI deletes them or makes them anonymous.Chapter 8 - Rights of the Data Subject
Data subjects have the right to access, correct, restrict processing, request deletion of their personal data or object to the processing of their personal data.The data subject may exercise these rights by contacting privacy@supsi.ch.
Chapter 9 - Transfer of Personal Data Abroad
SUPSI may transfer personal data abroad if this is necessary to achieve the purposes for which they were collected. SUPSI ensures that such transfers take place only in countries that offer an adequate level of data protection or that appropriate security measures have been taken to protect the personal data transferred.Chapter 10 - Cookies and Similar Technologies
SUPSI uses cookies and other similar technologies to improve and personalise the user experience on its websites. These technologies collect information about user activity on the website, such as pages visited, links clicked and time spent on the site. You may choose to disable cookies on your browser, but this may limit certain features of the website.Chapter 11 - Contacts
If you have any questions or comments on this Privacy Policy, please contact privacy@supsi.ch.Chapter 12 - Final Provisions
This Policy is prepared in accordance with the provisions of the Data Protection Act and other applicable laws and regulations. In the event of a dispute concerning this Policy, the data subject has the right to lodge a complaint with the competent authority.SUPSI reserves the right to make changes to this Policy if necessary to comply with changes in the Data Protection Act and other applicable laws and regulations.
To facilitate the reading of this document, the masculine gender is used to designate persons and functions regardless of gender.
Approved by the Director General of SUPSI on 21 July 2023.
Version 0, 1.9.2023
Version 0, 1.9.2023