Privacy Policy
Last updated: 7 October 2026. This privacy policy explains how the Students' Business Club processes personal data when you visit our website, contact us or register for our events.
1. Who we are and scope
The Students' Business Club (SBC) is a non-profit student association at the University of St. Gallen (HSG). We are responsible for the processing of personal data described in this privacy policy.
Students' Business Club, Dufourstrasse 50, 9000 St. Gallen, Switzerland, info@studentsbusinessclub.com
Contact for data protection matters: Yannick Marty, Vice President (Finance & IT), info@studentsbusinessclub.com
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, we also comply with it; our legal bases are then our legitimate interests (Art. 6(1)(f) GDPR), the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) and, where required, your consent (Art. 6(1)(a) GDPR).
2. Data we process
a) Visiting our website: When you visit our website, our hosting provider Wix automatically records technical data such as your IP address, the date and time of access, the pages viewed, the referring website, your browser type, operating system and device type. This data is needed to display the website, to keep it secure and stable and to prevent misuse.
b) Website statistics: We use the analytics built into Wix (Wix Analytics) to understand how many people visit our website and which pages and events are of interest, for example the number of visits, pages viewed, duration of the visit, approximate location (country or city) and how visitors found our website. We evaluate this information in aggregated form only, to improve our website and our events. We do not use it to identify individual visitors, we do not create advertising profiles and we do not show advertising on this website.
c) Contacting us: If you contact us by e-mail, we process your name, your e-mail address and the content of your message in order to answer your request and, where relevant, to organise events or partnerships with you.
d) Event registration: Registration for our events takes place via the platform Uniclubs. When you click a registration link, you leave our website and the privacy policy of Uniclubs applies. We receive the information you provide there (for example your name, e-mail address and study programme) and use it to organise the event, to manage participation and to contact you about the event. If an event is held together with a partner company and the partner needs participant information (for example for building access or name badges), we share only the data that is necessary for this purpose and inform you about it in advance in the event description.
e) Partners and job offers: Our Partners & Jobs page contains links to the websites of our partners. We do not receive or process any job applications; applications are submitted directly to the respective company.
3. Cookies
Our website uses cookies, i.e. small text files that are stored on your device.
• Essential cookies: Wix sets cookies that are required for the security, stability and core functions of the website (for example svSession, XSRF-TOKEN, bSession and TS cookies). These cookies cannot be switched off.
• Statistics cookies: Wix Analytics uses cookies to produce the visitor statistics described in section 2 b). These cookies are not essential.
• We do not use advertising or marketing cookies and we do not use tracking for advertising purposes.
You can also delete or block cookies in the settings of your browser; some functions of the website may then no longer work properly.
4. Service providers and transfers abroad
We work with the following service providers, who process personal data on our behalf:
• Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel: website hosting, website statistics and display of our events (www.wix.com/about/privacy).
• Google (Google Cloud EMEA Ltd., Ireland, and Google LLC, USA): Google Workspace for our e-mail communication and internal documents (policies.google.com/privacy).
• Uniclubs: registration for our events (see section 2 d)).
Our website also contains links to our profiles on Instagram, LinkedIn and to our WhatsApp community. These are simple links: no data is transferred to these platforms until you click on them. Once you visit them, the privacy policies of the respective providers apply. Within the club, only the board members who need personal data for their tasks have access to it. We do not sell personal data to anyone.
Some of our service providers also process personal data outside Switzerland, in particular in Israel, in the EU/EEA and in the USA. Israel and the EU/EEA are recognised by the Swiss Federal Council as providing an adequate level of data protection. For transfers to the USA, we rely on the Swiss-U.S. Data Privacy Framework where the recipient is certified under it (for example Google LLC), or otherwise on standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).
5. Retention and data security
We keep personal data only as long as necessary for the purposes described above or as required by law.
• Technical log data is stored by Wix for a limited period for security purposes.
• Website statistics are evaluated by us in aggregated form only.
• E-mails and enquiries are kept as long as necessary to handle your request and any follow-up.
• Event registration data is deleted at the latest one year after the event, unless we are legally required to keep it longer.
We protect personal data with appropriate technical and organisational measures, in particular encrypted connections (HTTPS), access restricted to the board members who need it, and secure passwords with two-factor authentication where available. We review access rights whenever the board changes.
6. Your rights and changes
Within the limits of the applicable law, you have the right to request access to your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive your data in a common format (data portability) and to withdraw your consent at any time with effect for the future. To exercise your rights, simply write to info@studentsbusinessclub.com. We may ask you to prove your identity.
You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch, and, where the GDPR applies, with a data protection authority in the EU/EEA.
We may update this privacy policy at any time, for example when we change our website or use new services. The version published on this website applies.