Freies Gymnasium Zürich (“FGZ”) and its affiliated association of former students of Freies Gymnasium Zürich (“Alumni FGZ”) (hereinafter collectively also referred to as “we”, “us”) collect and process personal data, in particular personal data concerning students, parents, affiliates, contracting parties, association members, visitors to our Website, participants in events, recipients of newsletters and other bodies or their liaisons and employees (hereinafter also “you”). In this Privacy Policy, we provide information about that data processing. In addition to this Privacy Policy, we may inform you separately about the processing of your data (for instance, in the case of forms or contractual terms and conditions).
If you disclose data to us about other persons (e.g. family members), we assume that you are authorised to do so and that the data is correct and that you have ensured that such other persons are informed of this disclosure, insofar as a legal duty to provide information applies (e.g. by making them aware of this Privacy Policy in advance).
The following persons are responsible under data protection law for the processing described in this Privacy Policy:
School Association for Freies Gymnasium Zürich
Arbenzstrasse 19
8008 Zurich
datenschutz@clutterfgz.ch
The following persons are responsible for the association of former students of Freies Gymnasium Zürich under data protection law:
Association of former students of Freies Gymnasium Zürich (Alumni FGZ)
Arbenzstrasse 19
8008 Zurich
datenschutz@clutterfgz.ch
We process various categories of your personal data. The main categories are as follows:
If you or your child visits our school, www.fgz.ch, our login areas (e.g. parents' portal, alumni portal) or any of our other websites (hereinafter collectively referred to as the “Website”), or if you are an association member or have dealings with us in any other way, we process various categories of your personal data (see Section 3). We may collect and process these data in particular for the following purposes:
In connection with the purposes listed in Section 4, we may transmit your personal data to the following categories of recipients in particular:
All of these categories of recipients may, in turn, involve third parties so that your data can also be accessible to them. We may restrict processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. public authorities, banks, etc.).
We also enable certain third parties to collect your personal data on our Website and at our events on their own responsibility (e.g. media photographers, providers of tools that we have integrated on our Website, etc.). To the extent we do not play a decisive role in these data collection activities, these third parties are solely responsible for them. If you have any concerns and to assert your data protection rights, please contact these third parties directly. We have listed them in Section 9.
We process and store personal data primarily in Switzerland and the European Economic Area (EEA), but potentially in any country in the world in exceptional cases – for example through sub-contracted processors of our service providers.
If a recipient is located in a country lacking adequate data protection, we contractually oblige the recipient to comply with an adequate level of data protection (for this purpose we use the revised standard contractual clauses of the European Commission, which are available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en? for downloading; including the supplements necessary for Switzerland), unless it is already subject to a legally recognised set of rules to safeguard data protection and we are unable to rely on an exception. An exception may apply in particular in legal proceedings abroad, but also in cases of overriding public interest if the performance of a contract that is in your interest requires such disclosure, if you have consented, or it is not possible to obtain your consent within a reasonable period and disclosure is necessary to protect your life or physical integrity or that of a third party or if the data in question is made publicly available by you and you have not objected to the processing of it.
You have certain rights in connection with our data processing. Under applicable law, you may in particular request information about the processing of your personal data, request the correction of inaccurate personal data, request the erasure of personal data, object to data processing, request the surrender of certain personal data in a commonly used electronic format or its transfer to other controllers.
If you wish to exercise your rights vis-à-vis us, please contact us; our contact details can be found in Section 2. In order to be able to rule out fraud, we must identify you (e.g. by means of a copy of your identification document, if necessary).
Please note that these rights are subject to prerequisites, exceptions or restrictions (e.g. to protect third parties or business secrets). We reserve the right to redact copies for reasons of data protection law or confidentiality or to deliver them only in excerpted form.
When you use our Website (including newsletters and other digital content), data is generated that are stored in logs (in particular technical data). In addition, we may use cookies and similar techniques (e.g. pixel tags or fingerprints) to recognise Website visitors, evaluate their behaviour and recognise preferences. A cookie is a small file that is transmitted between the server and your system and enables a particular device or browser to be recognised.
You can configure your browser so that it automatically rejects, accepts or deletes cookies. You can also deactivate or delete cookies in individual cases. You can find out how to manage cookies in your browser in the help menu of your browser.
Neither the technical data collected by us nor the cookies generally contain any personal data. However, personal data that we or third-party providers engaged by us store about you (e.g. if you have a user account with us or those providers) may be associated with the technical data or with the information stored in and obtained from cookies and thus possibly associated with you personally.
We also use social media plug-ins, which are small software modules that establish a connection between your visit to our Website and a third-party provider. The social media plug-in informs the third-party provider that you have visited our Website and may transmit cookies to the third-party provider that the latter has previously placed on your web browser. Further information on how these third-party providers use your personal data collected through their social media plug-ins can be found in their respective privacy policies.
In addition, we use our own tools as well as third-party services (which in turn may use cookies) on our Website, in particular to improve the functionality or content of our Website (e.g. integration of videos or maps) and to generate statistics.
Currently, we may use offers from the following service providers and advertising partners in particular, although their contact details and further information on their individual data processing operations can be found in the relevant Privacy Policy:
Some of the third-party providers used by us may be located outside Switzerland. Information on data disclosure abroad can be found in Section 7. In terms of data protection law, they are in some cases “only” processors for us, and in some cases they are controllers. Further information on this can be found in the Privacy Policy.
9.1 How does the FGZ process personal data in the parents' portal?
The FGZ operates a portal for parents and students in order to make information and documents available to parents and students online in a protected area. For this purpose, we rely on Microsoft SharePoint online. In order to access this information and documents, your existing Microsoft account or your e-mail address without an account will be assigned a one-time password authorising you to access the FGZ parents' and student portal. Upon first access, Microsoft will ask you to grant the FGZ certain permissions. On the one hand, your profile data such as name and e-mail address will be disclosed to us. On the other, we will be authorised to record and log your activities in the parents' and student portal and to process that data. We use the profile data to manage access to the parents' and student portal, to facilitate inquiries and to withdraw permissions. We only have access to activity data within the FGZ parents' and student portal. Activity data are technical data that we use in accordance with the terms of this Privacy Policy to ensure the security and functionality of the parents' and student portal and to further develop the portal.
9.2 How does the "Alumni FGZ" Association process personal data on the alumni portal?
The “Alumni FGZ” Association operates an alumni portal on the FGZ Website in order to make information available to its members online in a protected area. Each member receives a login for the alumni portal. The “Alumni FGZ” Association is responsible for the alumni portal. In addition to the data visible about you as a member, the alumni portal also processes technical data in accordance with the provisions of this Privacy Policy in order to guarantee the security and functionality of the alumni portal and to further develop the portal.
We operate pages and other online presences on social networks and other platforms operated by third parties and process data about you in this context. In doing so, we receive data from you (e.g. when you communicate with us or comment on our content) and from the platforms (e.g. statistics). The providers of the platforms can analyse your use and process this data together with other data that they have about you. They also process this data for their own purposes (e.g. marketing and market research purposes and to manage their platforms) and act as their own data controllers for this purpose. For further information on processing by the platform operators, please refer to the privacy policies of the respective platforms.
We currently use the following platforms, whereby the identity and contact details of the platform operator can be found in the privacy policy:
We are authorised, but not obliged, to check third-party content before or after it is published on our online presences, to delete content without notice and, if necessary, to report it to the provider of the platform in question.
Some of the platform operators may be located outside Switzerland. Information on the disclosure of data abroad can be found in section 7.