1. What services we use
- Google Ads
- Google Ads Conversion Tracking
- Google Publisher Tag
- Google Analytics
- Google Tag Manager
- Font Awesome
- Google Fonts API
- Google Hosted Libraries
- WPMU DEV Smush
- jQuery CDN
- jsDelivr
- Vimeo
- YouTube
- WordPress
- Google reCaptcha
2. Contact Information
If you have any questions or concerns about our protection of your data, you can always reach us by email at info@stiftsschule-engelberg.ch. Responsible for data processing done through this website is:
Stiftsschule Engelberg
Benediktinerkloster 5
6390 Engelberg
Schweiz
Data protection officer:
Roger Gasser
roger.gasser@stiftsschule-engelberg.ch
+41 41 639 61 02
3. General principles
3.1 What data we collect from you and from whom we receive this data
First and foremost, we process personal data that you provide to us or that we collect when operating our website. We may also receive personal data about you from third parties. These may be the following categories:
- Personal master data (name, address, dates of birth, etc.);
- Contact information (cell phone number, email address, etc.);
- Financial data (e.g. account details);
- Online identifiers (e.g. cookie identifier, IP addresses);
- Location and traffic data;
- Sound and image recording;
- particularly sensitive data (e.g. biometric data or information about your health).
3.2 Under what conditions do we process your data?
We process your data in good faith and for the purposes set out in this privacy policy. In doing so, we ensure transparent and proportionate processing.
If, in exceptional cases, we are unable to comply with these principles, the data processing may still be lawful because there is a justification. A justification reason may be in particular:
- Your consent;
- the execution of a contract or pre-contractual measures;
- our legitimate interests, unless your interests are overridden.
3.3 How can you withdraw your consent?
If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent unless we have another justification.
You can revoke your consent at any time by sending an e-mail to the address given in the imprint. Data processing that has already taken place is not affected by this.
3.4 In which cases can we share your data with third parties?
a. Principle
We may need to rely on the services of third parties or affiliates and engage them to process your data (known as processors). Categories of recipients are namely:
- Accounting, fiduciary and auditing firm;
- Consulting firms (legal, tax, etc.);
- IT service provider (web hosting, support, cloud services, website design, etc.);
- Payment service provider;
- Provider of tracking, conversion and advertising services.
We ensure that these third parties and our affiliates comply with the requirements of data protection and treat your personal data confidentially.
We may also be required to disclose your personal information to government authorities.
b. Visiting our social media channels
We may have embedded links to our social media channels on our website. This is apparent to you in each case (typically via corresponding icons). If you click on the icons, you will be redirected to our social media channels.
In this case, the social media providers learn that you are accessing their platform from our website. The social media providers can use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the transmitted data or its use by the operators.
c. Transfer abroad
Under certain circumstances, your personal data may be transferred to companies abroad in the course of order processing. These companies are obligated to data protection to the same extent as we are. The transfer may take place worldwide.
If the level of data protection does not correspond to that in Switzerland, we carry out a prior risk assessment and ensure contractually that the same level of protection is guaranteed as in Switzerland (for example, by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we take additional technical measures to protect your data. You can access the EU Commission’s standard contractual clauses at the following link. https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de
3.5 How long do we keep your data?
We store personal data only for as long as is necessary to fulfill the individual purposes for which the data was collected.
Data that we store when you visit our website is kept for twelve months. An exception is made for analysis and tracking data, which may be kept longer.
We store contract data for longer, as we are obliged to do so by legal regulations. In particular, we must retain business communications, concluded contracts and accounting records for up to 10 years. As far as we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.
3.6 How do we protect your data?
We will keep your information secure and take all reasonable steps to protect your information from loss, access, misuse or alteration.
Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary for us to pass on your requests to companies affiliated with us. In these cases, too, your data will be treated confidentially.
Within our website, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser.
3.7 What rights do you have?
a. Right to information
You can request information about the data we have stored about you at any time. We ask you to send your request for information together with proof of identity to info@stiftsschule-engelberg.ch.
You also have the right to receive your data in a common file format if we process your data automatically and if:
- you have given your consent for the processing of this data; or
- you have disclosed data in connection with the conclusion or performance of a contract.
We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests or the interests of a third party.
The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, for legal or technical reasons, or because we need more detailed information from you. You will be informed of the extension of the deadline in good time, at least in text form.
b. Deletion and correction
You have the option of requesting the deletion or correction of your data at any time. We may reject the request if statutory provisions oblige us to store the data for a longer period or to retain it unchanged or if your request conflicts with a legal requirement.
Please note that exercising your rights may be in conflict with contractual agreements and may have corresponding effects on the performance of the contract (e.g. premature termination of the contract or cost consequences).
c. Legal process
If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch
3.8 Changes to the privacy policy
We may change this privacy policy at any time. The changes will be published on stiftsschule-engelberg.ch, you will not be informed separately.
4. Individual data processing operations
4.1 Providing the website and creating log files
What information do we receive and how do we use it?
By visiting stiftsschule-engelberg.ch, certain data is automatically stored on our servers or on servers of services and products that we obtain and / or have installed, for purposes of system administration, for statistical or backup purposes or for tracking purposes. These are:
- the name of your Internet service provider;
- Your IP address (in some circumstances);
- the version of your browser software;
- the operating system of the computer with which the URL is accessed;
- the date and time of access;
- the web page from which you are visiting URL;
- the search words you used to find the URL.
Why may we process this data?
This data cannot be assigned to a specific person and there is no merging of this data with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.
How can you prevent data collection?
The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after the end of each session. The storage of the log files is mandatory for the operation of the website, you therefore have no possibility to object.
4.2 Google Ads
We use the Google Ads service on our website, an online advertising service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). Google Ads enables us to place advertisements in the Google search results as well as in the Google advertising network.
4.3 Google Ads Conversion Tracking
We use the online advertising program “Google Ads” on our website and in this context the conversion tracking. Google Ads Conversion Tracking is an analysis service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
When you click on an ad placed by Google, a cookie for conversion tracking is set on your end device. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page.
The information obtained using the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.
You can prevent the storage of cookies by selecting the appropriate technical settings on your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You will then not be included in the conversion tracking statistics.
Furthermore, you can disable personalized advertising for you in Google’s advertising settings. You can find instructions on how to do this at https://support.google.com/My-Ad-Center-Help/answer/12155764.
4.4 Google Publisher Tag
On our website, we use the Google Publisher Tag, a service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The Google Publisher Tag enables us to efficiently manage and optimize advertising on our website.
By integrating the Google Publisher Tag, cookies and similar technologies are stored on your terminal device and information about the use of our website, including your IP address, is transmitted to Google. This information may be used by Google to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.
If you do not wish to receive targeted advertising, you can prevent the storage of cookies by selecting the appropriate settings on your browser software. Please note, however, that in this case you may not be able to use all functions of this website to their full extent.
4.5 Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.
The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.
4.6 Google Tag Manager
For the management of website tags via an interface, we use the Google Tag Manager, a service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The Google Tag Manager itself (which implements the tags) is a cookie-less domain and does not process any personal data. The service provides for the triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.
By using the Google Tag Manager, scripts (so-called tags) can be activated automatically on our website and data can be transmitted from your browser to Google. This data may include information about your IP address, the browser you use, the subpages of our website visited and other interactions during your website visit.
4.7 Font Awesome
Font Awesome is operated by Fonticons, Inc, located at 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA. Font Awesome is a collection of scalable vector icons that allows website developers to integrate various icons and social logos on their websites.
We use Font Awesome to integrate visual icons on our website. For example, this may include icons for user interfaces, social media links, or other graphical representations that enhance the design and user experience of our website.
Font Awesome may load web fonts from the servers of Fonticons, Inc. when a user visits our website. In doing so, the user’s IP address is sent to Fonticons, Inc. This is necessary so that the user’s web browser can display the Font Awesome icons correctly.
Fonticons, Inc. stores users’ IP addresses only briefly and solely for the purpose of providing the Font Awesome icons. No further storage or analysis takes place.
4.8 Google Fonts API
On our website, we use the Google Fonts API, a service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), to embed fonts. By integrating these fonts, your browser will establish a connection to Google’s servers when you visit our website in order to download the fonts and display them correctly.
Through this connection, data, in particular your IP address and information about the browser you are using, may be transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries.
If you want to prevent the transfer of data within the Google Fonts API, you can block access to the domain fonts.googleapis.com in your browser settings. Please note that in this case our website may not be displayed correctly.
4.9 Google Hosted Libraries
On our website, we use Google Hosted Libraries, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Hosted Libraries enables us to load certain libraries (e.g. JavaScript libraries) directly from Google’s servers in order to optimize the loading times of our web pages and ensure consistent performance.
By using Google Hosted Libraries, your browser will connect to Google’s servers when you visit our website in order to download the required libraries. In the process, data, in particular your IP address and information about the browser you are using, may be transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries.
If you would like to prevent data transfer within the scope of Google Hosted Libraries, you can block access to the domain ajax.googleapis.com in your browser settings. Please note that in this case our website may not be displayed correctly or only with increased loading time.
4.10 WPMU DEV Smush
WPMU DEV Smush is operated by Incsub, LLC, located at PO Box 548 #88100, Birmingham, AL 35201, USA. WPMU DEV Smush is a plugin for WordPress websites designed to optimize and compress images. It also acts as a Content Delivery Network (CDN) for images to improve website load times.
On our website, we use WPMU DEV Smush to automatically reduce the size of images and deliver them through Smush’s CDN. This helps us improve the speed and performance of our website and provides a better user experience for our visitors.
WPMU DEV Smush uses technologies for image compression and image delivery via a CDN. In this process, the images are stored on WPMU DEV servers and delivered to the website visitors. No personal data of the website visitors is collected, but the IP addresses of the visitors might be collected by WPMU DEV for proper delivery of the images via the CDN.
Since WPMU DEV Smush uses a CDN, the images are stored on WPMU DEV servers and delivered to the visitors from there. This means that the images can be distributed across different server locations worldwide to ensure faster delivery.
4.11 jQuery CDN
On our website, we use the “jQuery CDN” (Content Delivery Network), which is provided by the jQuery Foundation. The jQuery Foundation is a non-profit organization dedicated to the development and support of open source software, in particular the jQuery library.
jQuery is a widely used JavaScript library that allows us to make website functions more efficient and user-friendly. By using the jQuery CDN, we can ensure that this library loads quickly and reliably on our website, improving load times and the overall user experience.
The jQuery CDN uses cookies and similar technologies to process user requests and optimize library delivery. IP addresses and user browser information may be collected to ensure the best possible performance and compatibility.
If you do not want your data to be collected by the jQuery CDN, you can set appropriate settings in your browser to block the loading of content from external sources. Note, however, that this may affect the functionality and user experience of our website.
4.12 jsDelivr
On our website, we use the jsDelivr service, an open-source CDN (Content Delivery Network), to load certain libraries and scripts faster and more reliably. This service is provided by ProspectOne Sp. z o.o., ul. Krolweska 65A, 30-081 Krakow, Poland.
Through the integration of jsDelivr, data such as your IP address, information about the browser used, the operating system and the duration of the page view are transmitted to servers of jsDelivr when you call up our website. This is done to deliver the content to your browser faster and more efficiently and to shorten the loading time of the website.
jsDelivr uses this data to ensure the delivery of the content and to create statistical evaluations about the use of their service. The data is not merged with other data sources or used for advertising purposes.
The use of jsDelivr serves to optimize and improve the performance of our website. The data processing is based on our legitimate interest in an efficient and secure provision of our website.
4.13 Vimeo
Vimeo is a service of Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA. Vimeo is a platform that allows users to upload, share and watch videos. It also offers various tools for video producers to monetize their content and interact with their audience.
We use Vimeo to embed videos on our website and provide high quality visual content to our visitors. This may include product demonstrations, tutorials, or other content relevant to our users. Embedding Vimeo videos allows our visitors to view them directly on our website without being redirected to the Vimeo platform.
When you access a web page of our website that contains a Vimeo video, your browser establishes a direct connection to the servers of Vimeo. In the process, certain information is transmitted to Vimeo. This also includes the IP address of the user. Vimeo also uses cookies and similar technologies to collect information about the use of the service and to improve the user experience.
4.14 YouTube
Videos from YouTube, a platform of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), are embedded on our website. When viewing the videos or clicking on the play button, data, including your IP address and information about the browser you are using, is transmitted to Google servers and stored there. This data is used to provide the video, monitor performance and improve the user experience.
If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
4.15 WordPress
Our website is based on the WordPress platform, a content management system developed by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. WordPress allows us to create, manage and publish content.
When using our website, which is based on WordPress, various data, including your IP address, date and time of access, as well as information about the browser you are using, may be collected and stored. This data is mainly used for administrative purposes and to ensure trouble-free operation of the website.
Some WordPress features, such as comments or contact forms, may collect additional personal data when you use them.
4.16 Google reCaptcha
To protect against unsolicited requests via the Internet form on our website, we use the reCAPTCHA service of the company Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The query serves to distinguish whether the input is made by a human or abusively by automated, machine processing. As part of the query, information such as your IP address or the behavior when filling out the form may be transmitted to Google.
For this purpose, your input is transmitted to Google and processed there. By using reCAPTCHA, you agree that the recognition you provide may be used in the digitization of old works. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other data from Google.
BrainBox Generators
BrainBox Generators is a service of BrainBox Solutions GmbH to recognize all data protection-relevant services on a website and, among other things, to help with the creation of the privacy policy. No personal data is collected or processed in the process.