Datenschutz

Datenschutz

Privacy Statement

Valid from 1 March 2019

Thank you for your interest in our website. The protection of your privacy and of your personal data is very important to us.

This Privacy Statement describes how we, GSEH Gemeinsame Sekundarschule Erlenbach und Herrliberg, Schulhausstrasse 39, 8704 Herrliberg (hereafter “GSEH”, “we” or “us”), process personal data as the operator of this website.

Personal data means any information relating to an identified or identifiable person. This includes, for example, your name, your email address, your home address, your telephone number or your date of birth. The term “processing” covers any handling of personal data, regardless of the means or procedures used, including in particular procuring, retaining, utilising, revising, disclosing, archiving or destroying personal data.

You can visit our website and use many of our offerings without having to tell us who you are. For some of our offerings it may however be necessary for you to share personal data with us. The specific personal data that we collect from you depends on the particular offering or the relevant interaction with us. This Privacy Statement contains more detailed information in this regard. If you decide not to provide the personal data requested by us, this may lead to you being unable to use certain offerings or us not being able to process your query.

1. Amendments

This Privacy Statement does not constitute a conclusive set of provisions. It may be amended by us at any time by publication on this website. The then-current version published on this website will apply.

2. Contact information

GSEH has the status of controller in respect of the data processing described in this Privacy Statement.

Queries by supervisory authorities and data subjects may be submitted by email or postal mail to:

GSEH Gemeinsame Sekundarschule Erlenbach und Herrliberg
Schulhausstrasse 39
8704 Herrliberg

3. Data processing in general:

3.1 Purposes of data processing

We principally process personal data in order to services and to, respectively, deliver and provide them, for advertising and marketing purposes (unless you object), in order to enable full access to our website, to operate, improve and further develop our website, to analyse usage of our website and of our offerings, to recognise, investigate and defend against attacks on our website and our infrastructure, to communicate with you and to be able to defend against and enforce legal claims.

Section 4 describes these purposes of data processing in greater detail and further supplements them.

3.2 Legal bases for data processing

We process personal data in accordance with Swiss data protection law. Further – if and insofar as the General Data Protection Regulation (GDPR) is applicable – we process personal data in accordance with the following legal bases, which may apply in addition to the legal bases set forth in Section 4:

  • We process personal data in accordance with Swiss data protection law. Further – if and insofar as the General Data Protection Regulation (GDPR) is applicable – we process personal data in accordance with the following legal bases, which may apply in addition to the legal bases set forth in Section 4:
  • Article 6(1)(b) GDPR operates as a legal basis for the necessary processing of personal data for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract.
  • Article 6(1)(c) GDPR operates as a legal basis for the necessary processing of personal data for compliance with a legal obligation to which we are subject in accordance with any applicable law of the EU or any applicable law of an EEA member state.
  • Article 6(1)(d) GDPR operates as a legal basis for the necessary processing of personal data in order to protect the vital interests of the data subject or of another natural person.
  • Article 6(1)(f) GDPR operates as a legal basis for the necessary processing of personal data for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Legitimate interests include in particular our business interest in being able to provide, analyse and further develop our website, advertising and marketing, selling goods and providing services, information security, defending against and enforcing legal claims, and compliance with Swiss law.

3.3 Disclosure of personal data to third parties

Within the context of our business activities as well as the processing and purposes described in this Privacy Statement, we will, to the extent permitted, transfer personal data to third parties and disclose personal data to such third parties. Such third parties, which process these data on our behalf or for their own purposes, or may gain access to them in the context of their activity for us, include in particular:

  • Within the context of our business activities as well as the processing and purposes described in this Privacy Statement, we will, to the extent permitted, transfer personal data to third parties and disclose personal data to such third parties. Such third parties, which process these data on our behalf or for their own purposes, or may gain access to them in the context of their activity for us, include in particular:
  • persons authorised by us (for example, staff charged with processing);
  • other recipients with your permission or where necessary in order to enforce our rights, in particular in order to enforce claims arising from the contractual relationship with you.

Third parties may be located in Switzerland or abroad. In principle, we only transmit personal data abroad:

  1. to member states of the European Union or of the European Economic Area;
  2. to countries that have an adequate level of data protection as determined by the Swiss Data Protection Commissioner or the European Commission, which may also be the case based on self-certification under the Privacy Shield; or
  3. to countries for which we have put in place appropriate guarantees, in particular by ensuring an adequate level of data protection through the standard contractual clauses of the European Commission (which may be downloaded here [https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32010D0087]) or through recognised Binding Corporate Rules. You may request a copy of these contractual guarantees by contacting us at the contact information above. However, we reserve the right to redact such copies for reasons of confidentiality or to make them available only in extracted form.

We may also base our transmission of data abroad on exceptions provided for by law, including in particular your consent, the performance of a contract with you, important reasons of public interest, the assertion, exercise or defence of legal claims, or the protection of vital interests.

3.4 Retention period for personal data

We process personal data for the period of time necessary in order to achieve the relevant purposes. In addition, we process or store personal data in order to comply with statutory retention and documentation obligations or if necessary for our legitimate business interests (in particular in order to assert, exercise or defend legal claims).

Personal data are erased or anonymised as soon as they are no longer required for the purposes for which they were processed or stored as specified in this Privacy Statement.

3.5 Data security

We adopt appropriate technical and organisational security measures in order to protect the personal data processed by us, in particular against manipulation, partial or complete loss, or unauthorised third party access.

Our website is accessed using transport encryption (SSL/TLS).

3.6 Rights of data subjects

If so provided under applicable data protection law and if the relevant prerequisites are met, you may have the following rights against us with respect to your personal data:

  1. A right to confirmation as to whether your personal data are being processed by us and, if so, a right to information concerning these personal data and the processing thereof.
  2. A right to the rectification or erasure of your personal data.
  3. A right to restrict the processing.
  4. A right to object to the processing.
  5. A right to the portability of the personal data provided by you.
  6. A right at any time to withdraw a consent previously given. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. If you withdraw consent, it may not be possible for us to conclude a contract with you or to perform a contract that may already exist. This may result in the early termination of the contract or in additional costs.
  7. A right to lodge a complaint with the competent supervisory authority. The data protection supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC; https://www.edoeb.admin.ch).

Please use the contact information set forth in Section 2 to contact us regarding your rights. We reserve the right to invoke grounds for refusal or exceptions available to us under applicable law. For identification purposes we may also request additional information from you (for example, a copy of a valid identification document).

4. Data processing in connection with our website:

4.1 Provision and operation of the website

If you visit our website, each time you access the website a variety of general information is transmitted by your browser to the website hosting server and stored in log files.

For example, the information collected includes your internet protocol address (IP address), the date and time of your visit, the referring website and the website accessed by you, your browser, operating system and internet service provider, certain cookies (see also Section 4.6), location data and other similar information used for emergency response in the event of any attacks against our IT systems.

This general information is processed for the purpose of: (a) correctly displaying our website along with its contents and offerings to you and ensuring data traffic; (b) optimising our website, contents and offerings; (c) guaranteeing the stability and security of our website and systems on an ongoing basis; and (d) enabling the investigation into, defence against and prosecution of cyber attacks, spam and other unlawful acts in relation to our website and systems and enforcing any related claims. This establishes a legitimate interest in processing on our part within the meaning of Article 6(1)(f) GDPR.

For the purpose of website hosting, we may avail ourselves of service providers nationally and abroad to carry out the processing mentioned above on our behalf. Currently our website is hosted exclusively by Swiss hosting providers and on servers located in Switzerland.

4.2 Alumni accounts

You can open an alumni account on our website. This will enable you to stay in touch with former classmates, colleagues and to receive information about the offers and events for former GSEH students. We store and process the information that you enter into the input mask during registration. In each case, you will be prompted to provide all of the necessary information. Without such necessary information, we will not be able to open and operate your account. In order to combat abuses, such as, in particular, identity theft and spam, we also store your IP address along with the date and time of your registration.

By registering, you provide us your consent to the storage of the information collected from you for the above-mentioned purposes. Your consent establishes a legal basis for processing within the meaning of Article 6(1)(a) GDPR. The combatting of abuses also establishes a legitimate interest in processing on our part within the meaning of Article 6(1)(f) GDPR.

You can have your data deleted at any time by sending an email to .

4.3 Contact forms and contacting us

We offer the opportunity on our website to contact us using the contact forms or the contact information provided. If you contact us using a contact form, you will be prompted to provide all of the necessary information that we need in order to process the contact request and for communicating with you. Without such necessary information, we will not be able to communicate with you. We store or process the information that you enter into the input masks or otherwise provide to us. If you contact us by email, we will store the information transmitted with the email. In order to combat abuses, such as, in particular, identity theft and spam, we also store your IP address along with the date and time when you contact us.

If you use the contact forms on our website, information will be transmitted in encrypted form. If you contact us by email or provide your email address in the contact form, you consent to us also communicating with you by email. Please note that our email messages are not encrypted.

By contacting us you consent to the processing of your personal data for the purposes of communicating with you and in order to address any concerns you may have. Your contacting us establishes a legal basis for processing within the meaning of Article 6(1)(a) GDPR. Communicating with you, handling any concern you may have, and the combatting of abuses also establish a legitimate interest in processing on our part within the meaning of Article 6(1)(f) GDPR. If the purpose of contact us is to enter into a contract, Article 6(1)(b) GDPR constitutes an additional legal basis for processing.

4.6 Cookies

We use so-called “cookies” on our website. Cookies are small text files that are stored by your browser on your computer or mobile device. They are used to collect certain information while browsing on a website and to retrieve such information at a later stage during the same browser session or upon future visits. Cookies enable the browser used by you to be recognised again or any information entered by you to be saved temporarily. Cookies also help us make our offerings more user-friendly, effective and secure.

We distinguish between so-called “first party cookies”, which are placed by us, and so-called “third party cookies”, which are placed by third parties, such as for example web analysis services or social networks. Depending upon their duration, we further distinguish between so-called “session cookies” and “persistent cookies”. Session cookies store information that is used during the current browser session. They are automatically deleted after your browser is closed. Persistent cookies are only erased after a certain period of time or remain stored on your end device until you delete them. Persistent cookies can for instance be used to recognise your browser the next time you visit, to facilitate the completion of forms, to save your user settings or to display advertising and offers tailored to you. We further differentiate between cookies that are necessary and those that are not necessary. Necessary cookies are required in order to make available our website and the functions contained within them. This establishes a legitimate interest in processing on our part within the meaning of Article 6(1)(f) GDPR. Most of our first party cookies are necessary session cookies. Third party cookies are non-necessary persistent cookies.

When you access our website, we inform you about the use of cookies. You have the option to consent to the use of all cookies or to accept only necessary cookies and thus to object to the use of persistent third party cookies. Your consent establishes a legal basis for processing within the meaning of Article 6(1)(a) GDPR. Please note that third party cookies only become active after you have consented to the use of all cookies. In addition, you can configure your browser in such a manner as to prevent cookies from being used, and thus to object to the use of cookies on a permanent basis. Further, in your browser you can delete any cookies that have already been set. You can generally also configure your browser in such a manner that you are informed before a cookie is set.

If you deactivate cookies in your browser or only consent to the use of necessary cookies, this may impair the functionality of our website. Aside from a few exceptions, however, the contents of our website can generally be accessed.

4.5 YouTube

For embedding videos into our website, we use the services of the provider YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”), a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94053, USA (“Google”). This gives us a simple way to generate qualitatively and substantively added value for our website. The foregoing establishes a legitimate interest in processing on our part within the meaning of Article 6(1)(f) GDPR.

We use the enhanced data protection mode on YouTube which, according to information by the provider, prevents the recording of user behaviour through cookies. In addition, we have disabled tracking for advertising purposes.

Further information regarding data protection in connection with YouTube videos may be found in Google’s Privacy Policy at: https://policies.google.com/privacy/.

4.12 Web fonts

Our website uses so-called web fonts. Web fonts allow fonts to be displayed uniformly on our website without having to install the corresponding fonts on your device. This is our legitimate interest in processing fonts within the meaning of Art. 6 para. 1 lit. f DSGVO.

We use Web Fonts which are provided by Linotype GmbH, Werner-Reimers-Straße 2-4, 61352 Bad Homburg (“fonts.com”). Each time this website is accessed, files are loaded from a “fonts.com” server to display the texts in a specific font. Their IP address can be transferred to a server of “fonts.com” and stored in the context of the usual weblog. The further processing of this information is incumbent on “fonts.com”, the corresponding conditions and setting possibilities can be found in the data protection information of “fonts.com” at https://www.monotype.com/legal/privacy-policy

If your browser does not support web fonts, a default font from your computer will be displayed instead.

5. Contents and links to other websites

We endeavour to ensure that the information on our website is accurate. We do not, however, undertake to ensure that this is the case and do not guarantee that the contents are complete, accurate and up-to-date and/or that the website or the contents thereof remain accessible. Our website contain links to other websites. We do not accept any responsibility for the contents of linked websites or for their data protection standards. To the extent permitted by law, we reject any liability towards you or towards any third parties for losses or damages resulting from the use or inability to use our website, as well as from reliance on the contents of our website or of external websites and contents that refer to our website or to which our website refer through links or otherwise.