Data privacy
1. Data protection notice
Protecting your data is important to us. In this Privacy Policy, we thus provide you with comprehensive information on how we handle your personal data. In doing so, we comply with the applicable data protection regulations.
The following Privacy Policy applies to all persons whose personal data is processed by us. Furthermore, this Privacy Policy applies to the use of our website and our newsletter.
The Privacy Policy explains how and for what reasons we process personal data and what rights you have in accordance with the applicable data protection regulations.
2. Contact details of the data processor
The ETH Zurich Foundation (hereinafter also referred to as “we” or “us”) is responsible for the processing of personal data described in this Privacy Policy.
ETH Zürich Foundation
Weinbergstrasse 29
8006 Zürich
+41 44 633 69 66
3. General information on data processing
Unless provisions to the contrary are stated below, the following statements apply to all data processing.
3.1. Legal basis for processing your data
The following processing activities are based on the applicable legal basis.
3.2. Data deletion and storage period
In principle, your data will be deactivated, deleted or blocked as soon as the purpose for which it was stored no longer applies. You have the option of requesting the deletion of your data by email (info@ethz-foundation.ch). Blocking or deletion takes place after the expiry of the prescribed statutory and/or official storage periods. However, blocking or deletion may conflict with statutory or official retention periods or legitimate interests.
3.3. Storage and backup of your data
Your data will be treated confidentially. We take appropriate technical and organisational precautionary measures to protect data against loss and manipulation, as well as against unauthorised access and access by third parties.
3.4. Automated decision-making, including profiling, on a case-by-case basis
When processing your data, no automated decision-making, including profiling, is made on a case-by-case basis.
3.5. Links
This Privacy Policy does not apply to external websites that you access via a link on our website. No liability is assumed for the websites of third parties. You should always consult the privacy policy applicable to that website on the relevant website.
3.6. Cookies
Cookies ensure that the basic and advanced functions of a website can be used. They enable analyses to be carried out so that our website can be optimised on an ongoing basis. Specifically, cookies are small text files that are permanently or temporarily stored on your computer or smartphone when you visit websites.
Browsers can be configured so that a warning appears on the screen before a cookie is saved. In addition, browsers can be programmed to block certain cookies. You can find more information on this on your browser’s help pages (usually under the keyword “privacy”) or in section 6.2.
The following cookies are used on our website:
- Essential cookies: These cookies are essential for the website functions. For example, they ensure that you can switch between pages, that your information on a form is not lost (e.g. cookie banners) or that the donation form (RaiseNow) can be used. This data is collected in anonymised form.
To the privacy policy of RaiseNow
- Statistical cookies: In order to continuously optimise our website and better tailor it to the needs of our visitors, we use statistical cookies that analyse how our website is used. Google Analytics is used for this purpose. When you visit our website, these external cookies are deactivated by default. This data is collected in anonymised form.
To the privacy policy of Google
- External cookies: We have integrated offers from third parties into our website (specifically: YouTube, Google Maps). When you visit our website, these external cookies are deactivated by default. Activation allows you to make full use of all the features of the website. As soon as you activate them, the relevant providers can see that you are on our website. These providers are responsible for processing the data themselves.
To the privacy policy of Google
You can change your individual preferences in the cookie settings at any time.
4. Data processing
Personal data is processed in particular to process a donation and to maintain an ongoing relationship. The data is stored in a way that ensures it is inaccessible to third parties.
We need your data, in particular to identify you personally (e.g. contact or donation information) and to ensure the processing of your potential and actual donations.
4.1. Online donations
Donations to the ETH Zurich Foundation make outstanding things possible, help to develop ETH Zurich’s leading position, strengthen Switzerland’s capacity for innovation and contribute to finding solutions to the greatest challenges of our time. Donations can be made digitally on our website.
Personal data is required so that we are aware of who has made the online donations and who we have to thank for them. When the completed donation form is submitted, the data from the input mask is transmitted to us. No further data is stored.
If you contact us using the donation and/or contact form, your data will be entered in our database. The ETH Zurich Foundation has its own database and manages all data itself. We collect and process your data to process the donation you have made, to maintain the ongoing relationship and to inform you about our current projects and the impact of the donation. Participating credit institutions receive your data only insofar as it is necessary for the processing of payments.
The ETH Zurich Foundation does not sell, lease or pass on your personal data to third parties. If you no longer wish the ETH Zurich Foundation to contact you or you would like to notify us of a change of address, you can let us know at any time by phone or email. To do so, use the contact address in section 2.
Donations made using the donation form on our website will trigger an automatically generated email to be sent to the donor. This automatic email confirms receipt of the donation and lists the information about the donation.
These transactional emails are sent between RaiseNow and the Mandrill API interface of the mailing service provider Mailchimp, operated by The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE 5000, Atlanta, GA 30308, USA.
To the privacy policy of MailChimp
Further information can be found in section 6.1.
4.2. Newsletter mailing
The ETH Zurich Foundation provides its donors with regular updates on current developments and news relating to the funding of research and teaching. As a donor, you will receive the newsletter unless you have unsubscribed from it (e.g. on the online donation form). Your data will be used for this purpose.
You also have the option of subscribing to the newsletter for other people you know. To do this, we need the name and email address of the recipient. By registering a third party for the newsletter, you confirm that this person agrees to the processing of data in this regard.
You can unsubscribe from the newsletter at any time. To do this, use the link provided in the newsletter.
The newsletter is sent by the Swiss email marketing service provider “mailXpert”, operated by mailXpert GmbH, Schulstrasse 37, 8050 Zurich. All data exchanged with mailXpert is stored exclusively in data centres with a physical location in Switzerland. Data will never be passed on to other third parties.
To the privacy policy of MailXpert (in German)
4.3. Sending invitations and publications
As a donor, you will be invited to various events and visits, unless you have unsubscribed from them. Your data will be used for this purpose. By donating, you consent to data processing.
If registration is required to attend an event, personal data will also be collected as part of the registration process, including, where applicable, the name of your guest and their contact details. By signing up, you confirm that the third party agrees to the aforementioned data processing. This data is required to create the list of participants and to send the invitations, any invoices and other information.
By registering for events, you consent to data processing. The collection of this data also ensures that the ETH Zurich Foundation is able to provide its events and related services in a compliant manner.
The ETH Zurich Foundation provides regular information on funding for research and teaching. To this end, the ETH Zurich Foundation sends donors the funding magazine “Uplift”, the annual report and impact reports on request.
As a donor, you will receive this information automatically unless you have unsubscribed from it (e.g. on the online donation form). Your data will be used for this purpose. In order to provide this service, the ETH Zurich Foundation may disclose the necessary data to third parties, such as a printing company. The data is used exclusively for the provision of said services. Your data will not be used for any other purpose.
You can unsubscribe from invitations and ETH Foundation publications at any time. To do so, use the contact address in section 2.
4.4. Publication on the website
As a token of our appreciation, our website will publish your name on the list of donors in the “Thank you” section of our website. The data you provided when you donated will be used for this purpose.
If you do not wish to be listed, please let us know. To do so, use the contact address in section 2.
5. Data processing when visiting the website
5.1. SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as the queries you send to us as the site operator. You can recognise an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the padlock symbol on your browser bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
5.2. Creating log files
Log files are the “raw” unprocessed log data of a web server that is generated automatically each time a website is accessed. The following data is collected:
- IP address of the accessing device
- Browser type and version
- Operating system used
- URL accessed
- If available, the referrer (referring page)
- Host name of the accessing computer
- Date and time of the server request
This data cannot be attributed to specific individuals. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of concrete indications of unlawful use.
The data allows us to improve the quality of the service by identifying trends and user behaviour. In addition, storing said data in log files ensures the functionality of our website. The data is used to optimise our website and to ensure the security of our information technology systems.
5.3. Hosting
Our website is hosted externally. Our hosting provider is cyon GmbH, Brunngässlein 12, 4052 Basel. All data is stored in a Swiss data centre and is never shared with third parties.
To the privacy policy of cyon (in German)
6. Third-party services
In order to be able to focus on our core competencies, we procure services from third parties in many areas.
6.1. RaiseNow
The RaiseNow donation tool ensures secure and professional donation processing. Please also see the Privacy Policy of our financial services provider RaiseNow.
6.2. Google Analytics 4
Our website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google uses data on our behalf to analyse the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage. If you consent to the use of Google Analytics, you explicitly consent to such processing. IP addresses are neither logged nor stored by Google Analytics 4. We have also deactivated the “Google Signals” settings.
More information on Google Analytics data protection
Google Analytics uses cookies. You can prevent the storage of cookies by selecting the appropriate settings in your browser software. If you do not wish to accept cookies, it may only be possible to use the website to a limited extent, as not all functions will be available.
You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in provided via the following link: https://tools.google.com/dlpage/gaoptout?hl=de
This stores an opt-out cookie on your data storage device, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your device, these opt-out cookies will also be deleted, i.e. you will have to set the opt-out cookies again if you want to continue preventing this form of data collection. The opt-out cookies are set for each browser and computer/end device and must therefore be activated separately for each browser, computer or other end device.
6.3. Google Ads
We use Google Ads, an online advertising program from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites if the user enters certain search terms on Google (keyword targeting). This data can be analysed quantitatively and shows, for example, which search terms led to our ads being displayed or how many ads led to corresponding clicks. According to Google, Google Ads does not collect any personal data.
7. Transfer of data to the USA
Our website includes tools from companies based in the USA.
When these tools are active, your personal data may be transferred to the US servers of the respective companies. Please note that the USA is not a secure third country as per Swiss and EU data protection law. US companies are obliged to disclose personal data to security authorities without you, as the data subject, being able to take legal action against it. It cannot therefore be ruled out that US authorities may process, analyse and permanently store your data located on US servers for surveillance purposes.
We have no influence over these processing activities.
8. Rights of data subjects
You have the right to request information about your personal data that we have processed. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, data transfer, the origin of your data if it has not been collected from us, and the existence of automated decision-making, including profiling. You also have the right to revoke at any time any consent to the use of your personal data that you have granted.
Please note that, for data protection reasons, it is only possible to provide data after your identity has been unambiguously established. This is done after informing us of your requests for information by sending an identity card or passport digitally or by post.
9. General disclaimer
All of the above information has been carefully reviewed. We strive to ensure that our information is up-to-date, correct and complete. Nevertheless, the occurrence of errors cannot be completely ruled out, which means that we cannot guarantee that information, including journalistic and editorial information, is complete, correct and up to date. Liability claims for damages of a material or immaterial nature caused by the use of the information provided are ruled out to the extent permissible.
The publisher may change or delete texts at its sole discretion and without notice and is under no obligation to update the contents of this website. The publisher, its clients or its partners are not responsible for damages, such as direct, indirect, accidental, predetermined or consequential damages, allegedly caused by visiting this website, and they therefore accept no liability for such damages.
The publisher also assumes no responsibility or liability for the content and availability of third-party websites that can be accessed via external links from this website. The operators of the linked sites are solely responsible for their content. The publisher hereby expressly dissociates itself from all third-party content that may be relevant under criminal or liability law or that is immoral.
10. Right to make changes
We reserve the right to amend and supplement this Privacy Policy at any time at our sole discretion and in accordance with data protection legislation. Please consult this Privacy Policy regularly.