Privacy Policy
Data protection policy
The protection of your personal data (data) and the protection of your privacy is important to us. We handle your data responsibly. We process personal data in accordance with the Swiss Data Protection Act and, where applicable, the EU General Data Protection Regulation.
In this data protection policy we inform you about the collection of personal data on our website and its processing offline.
We reserve the right to revise the data protection policy at any time. You can always find the last version on the website when you visit it.
1. Contact
1.1 Identity and contact details of the controller of your personal data:
Obersee Bilingual School AG
Sihleggstrasse 9
CH-8832 Wollerau
Email address: dataprotection@obs.school
2. Scope and purpose of processing personal data
2.1 Visiting our website
When you visit our site, we collect data about you through online identifiers (cookies and IP), which are stored in log files:
– IP address of the requesting computer
– Entry page (website from which you came to our website)
– Browser settings
– Browser software language and version
– Date and time of access/retrieval
– Name and URL of retrieved data
– Operating system of your computer and the browser you are using
– Country from which our website is accessed
– Name of your internet access provider
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access Status/HTTP Status Code
– amount of data transferred in each case
– Last visited website
– Enabled browser plugins
This data is processed for the purpose of enabling the use of our website (connection setup) to ensure system security and stability over the long term, for optimization our offer and for internal statistical purposes. A personal user profile will not be created.
The legal basis for processing your personal data is our legitimate interest in processing of this data.
Non-essential cookies are not used without your consent
2.2 Contacting us
On our website you have the option of contacting us by e-mail or complete application form to get in touch.
We process the information you provide on the legal basis of our legitimate Interests in correspondence with you or for the purpose of processing your inquiry/application and their processing. This information includes: your name and contact information, other basic information, identification and background information that you share with us.
You can object to this data processing at any time. If you object, we will no longer process your personal data for this purpose. Submit your objection to the following email address: dataprotection@obs.school
2.3 Downloads
You have the option to download documents from the website. For this purpose we may have your email address. We use your e-mail address exclusively for the purpose of sending you the downloaded documents and process it on the legal basis of our legitimate interest. We do not pass them on to third parties. We process your e-mail address for the purpose of processing your download and its completion.
You can object to this data processing at any time. If you object, we will no longer process your personal data for this purpose. Submit your objection to the following email address: dataprotection@obs.school
2.4 Provision of contractual services
We also process your personal data to the extent required in each case in order to provide our contractual or pre-contractual services and for the implementation other services you have requested. The services are always on your direct behalf rendered. The data collected will be collected from you personally or in consultation with you.
The personal data processed here, the type, scope, purpose and necessity of the processing of your data are determined by the privacy notice that is contained in the contract between you and OBS.
We do not use collected information for automated decision-making or profiling.
3. Cookies and Third Parties services used by our website
3.1. Cookies
On our website we use cookies and similar technologies (for the sake of simplicity all of these are summarized under the term “cookies”). These are small files that are saved on on your computer, tablet computer or smartphone when you visit it. In this way, the portal can save certain entries and settings (e.g. login, language, font size and other viewing preferences) over a period of time and you need them not to be applied again on each subsequent visit and when navigating in the portal.
Most of the cookies we use are so-called session cookies. These will automatically deleted when you log out or close the browser. Other cookies remain stored on your computer beyond the respective usage process and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit to our website.
You can refuse the use unnecessary cookies by selecting the appropriate settings in your browser and cookies toolbar. Please note, however, that this can affect the possibilities regarding the use of our website. For more information about cookies, including how to manage, refuse or delete them, visit www.allaboutcookies.org.
3.2 Google Services
We use the following services from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if your habitual residence is in the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”):
– Google Web Fonts
– reCAPTCHA
Google uses cookies. The cookies used by Google enable us to analyze the use of our website. The information generated by the cookie about your use of our website (including your IP address) is sent to a Google server in Switzerland, in Ireland or in the USA and stored there.
You can find more information about Google services here: Datenschutzerklärung – Datenschutzerklärung & Nutzungsbedingungen – Google
Google web fonts
In order to display our content correctly and graphically appealing across browsers, we use script libraries and font libraries Google Webfonts on our website for display of writings. Google web fonts are cached in your transfer browser. If your browser does not support Google Webfonts or access prevents, content is displayed in a standard font. Calling script libraries or font libraries automatically releases a connection to the operator of the library. It is theoretically possible – but currently it is also unclear whether and if necessary, for what purposes – that the operator collects Google data in this case.
We do not collect any personal data through the integration of Google Webfonts. For more information about Google Web Fonts, see Frequently Asked Questions Frequently Asked Questions | Google Fonts | Google Developers and in Google’s privacy policy: Datenschutzerklärung – Datenschutzerklärung & Nutzungsbedingungen – Google.
You can object to data processing by Google Webfonts by executing Disable JavaScript in your browser or install a JavaScript blocker. Please note that this can lead to functional restrictions on the website.
reCAPTCHA
Captcha is an abbreviation for “Completely Automated Public Turing test to tell Computers and Humans Apart” (fully automated public Turing test to distinguish computers from humans). A test designed to distinguish people from machines/robot programs, or “bots” for short. reCAPTCHA is a service that tries to distinguish whether a certain action on the Internet performed by a human or by a computer program. reCAPTCHA will be used as part of the double opt-in when submitting forms on our website.
Further information on data processing and information on data protection through reCAPTCHA can be found under: Datenschutzerklärung – Datenschutzerklärung & Nutzungsbedingungen – Google
3.3. Social Plugins
Based on our legitimate interests, we use the following social media on our website
Plugins (Plugins):
– YouTube
Our website only integrates these plugins as an external link. An edit of your personal data therefore only takes place when you click on the integrated plugins. You will then be forwarded to the website of the respective provider. We have no influence on data that is then collected by the social networks. If you do not want the providers mentioned to receive your data, please do not click on the plugins.
You can use the “Block third-party cookies” function in your browser settings. Then your browser will not send any cookies to the respective server of the social network. With this setting, however, other plugins may also work no longer for cross-site functions of other providers.
Further information on the purpose and scope of data collection and further processing and use of your personal data, please refer to the data protection notices of the respective networks. There you will also find further information on your rights in this regard.
4. Disclosure of data to third parties
We treat your personal data strictly confidential and only pass it on based on your consent, to comply with our legal obligations or to pursue a legitimate interest.
In particular we may transfer your personal data to:
– IT service providers for our company (hosting and data storage) or providers to whom we outsource certain technical support services for our site or suppliers of customer relationship management systems
– Online platforms: Linkedin
– Google Services
– Regulatory and other state authorities, if required by legal or statutory requirements.
We will only disclose your personal data to the extent that this is strictly necessary to achieve the intended purpose. We have taken all necessary measures to ensure that external service providers who have access to your data have implemented physical, electronic and managerial security measures to protect your data.
5. Data transfer abroad
If we transmit data to a country that does not have appropriate data protection, we ensure an appropriate level of protection by employing contracts accordingly, or we act on the basis of the following statutory/legal exemptions: consent, performance of the contract, the establishment, execution or enforcement of legal claims, overriding public interests, published personal data, or the need to protect the integrity of the persons in question.
6. Retention Period
Personal data is stored for as long as there is a legal obligation to retain it. In addition, personal data is stored as long as it is necessary for the purpose for which it was collected and as long as there is a legitimate interest in the personal data, e.g. to implement or defend legal claims, for archiving purposes, for IT security or to check conflicts of interest.
We will not keep in our database communications older than 1 year from the date of the last interaction.
If we conclude a contract, we will not keep personal data more than 5 years, calculated from the moment of termination of the contract, except for documents that are subject to storage conditions imposed by national law (eg accounting data)
The data shared with social media networks will be stored by them according to their own policies.
The session cookies are deleted when the browser is closed, but the persistent ones may have a different lifetime, which differs depending on the role of the cookie.
7. Where do we store your data
The data received by us through our website will be stored locally and on cloud servers, provided by Microsoft Azure on servers in Germany and by PCloud on servers in Luxembourg.
The data transmitted through social media networks will be stored by them according to their own policies.
The information generated by the cookie about how you use the website will be transmitted to and stored by Google according to its own policy.
In addition, we delete your data if you ask us to do so and we are not required to retain it by law or have any other obligation to retain or secure this personal data.
8. Data Security
We take technical and organizational security precautions to protect your personal data from manipulation, loss, destruction or against access by unauthorized persons and to ensure the protection of your rights and compliance with the applicable data protection regulations. The measures taken are intended to ensure the confidentiality and integrity of your data as well as the availability and resilience of our systems and services when processing your data. They are also intended to quickly restore the availability of your data and ensure access to them in the event of a physical or technical incident.
Our security measures also include the encryption of your data. At the transmission of your data to us it is encrypted by Transport Layer Security (TLS) /Encryption Https. All of the information you enter online is processed through an encrypted transmission route. This means that this information cannot be shared with anyone or can be viewed by unauthorized third parties.
Our data processing and our security measures are carried out in accordance with the continuously adapted technological developments. We also take our own in-house data protection very seriously. Our employees and the service companies we engage are committed to confidentiality and compliance with the data protection regulations. In addition, they will have access to the personal data only granted to the extent necessary.
9. Use of the Website by Minors
This website is intended for an adult audience. Children under the age of 16 are prohibited without the consent of their parents or legal guardians to transmit their personal data to us or to register for a service. If we determine that such data has been transmitted to us, it will be deleted immediately.
10. Your Rights
You have the following rights in relation to your personal data:
– Right to information: you have the right to know why your personal data is collected, what happens to it and how long it will be kept.
– Right to rectification: you have the right to request that OBS corrects any information you believe is inaccurate. You also have right to request us to complete information you believe is incomplete.
– Right to erasure: you have the right to demand to have your personal data erased at any time;
– Right to transfer of your data: you have the right to request that KHM transfers the data we have collected to another organization, or directly to you, under certain conditions.
– Right to object processing: you have the right to object to OBS’s processing of your personal data, under certain conditions.
If you have consented to the collection, processing or transfer of your personal information for a specific purpose, you may withdraw your consent for that specific processing at any time. Once we have received notification that you are withdrawing your consent, we will no longer process your personal data for these specific purposes, unless we have another legitimate interest in doing so.
Send your request regarding your personal data to the following e-mail address: dataprotection@obs.school
If you make a request, we have one month to respond to you.
Please note that the granting of these rights can sometimes be refused or restricted for legal reasons or based on data protection law. We can refuse to provide information to the extent that data protection law or other laws, in particular the attorney-client privilege, allow or require us to do so. If legally required or permitted, we will inform you of the reasons for our decision.
If you are of the opinion that we have not dealt with your inquiry or concern to your satisfaction or you believe that we are not processing your data in accordance with data protection regulations, you can contact the responsible supervisory authority; in Switzerland it is the Federal Data Protection and Information Commissioner.
