Data Governance

Students' Business Club

University of St. Gallen (HSG)

Dufourstrasse 50

9000 St. Gallen

Switzerland

Email: info@studentsbusinessclub.com

Responsible person for data processing

Ali El-Hajj Hassan

Role: Head of Finance

Email: alielhajjhassan@gmx.ch

Data protection contact

Ali El-Hajj Hassan

Email: alielhajjhassan@gmx.ch

You may contact us at any time with questions regarding data protection or to exercise your rights.

We are based in Switzerland and primarily operate within Switzerland and the European Union.

Our data processing is governed mainly by:

• The Swiss Federal Act on Data Protection (FADP), and
• Where applicable, the EU General Data Protection Regulation (GDPR)

3.1 Visiting Our Website (Server Logs)

When you visit our website, technical data is automatically transmitted by your browser and stored temporarily. This may include:

• IP address
• Date and time of access
• Pages accessed
• Browser type and operating system

Purpose

• To ensure website functionality and security
• To identify and resolve technical issues

Legal basis

• Legitimate interest in operating a secure and stable website

3.2 Contacting Us (Forms, Email)

When you contact us, we may collect:

• Name
• Email address
• Message content

Purpose

• To respond to inquiries
• To manage club-related communication and activities

Legal basis

• Consent, or
• Legitimate interest in communication with members and interested students

Data is deleted once it is no longer required, unless legal obligations apply.

3.3 File Uploads

If you upload documents (e.g. applications or event-related files), they are used solely for the stated purpose and deleted after processing.

Please avoid uploading sensitive personal data unless necessary.

3.4 Cookies

Our website may use essential cookies required for basic functionality.

Optional cookies (e.g. analytics) are used only with your consent and can be managed via the cookie banner or browser settings.

Personal data is accessed only by authorized board members or team members who need it for organizational purposes.

We do not sell or share personal data with third parties unless required by law.

We may use trusted service providers for:

• Website hosting
• Email communication

These providers process data only on our instructions and in accordance with applicable data protection laws.

Data is primarily stored in Switzerland or the EU. If data is processed outside these regions, appropriate safeguards are applied.

We retain personal data only as long as necessary for:

• The stated purposes
• Legal obligations
• Legitimate organizational interests

Afterwards, data is deleted or anonymized.

We apply appropriate technical and organizational measures, including:

• Encrypted connections (HTTPS)
• Restricted access rights
• Secure credentials

Despite best efforts, no system can be guaranteed 100% secure.

Depending on applicable law, you may have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Withdraw consent
• Lodge a complaint with a data protection authority

Requests can be sent to the contact details listed above.

This Privacy Policy may be updated from time to time.

The latest version will always be published on this website.

If any part of this policy is invalid, the remaining provisions remain unaffected.

If you have questions about this policy or how your data is handled, feel free to contact us.