How long will your personal data be processed
What personal data will be collected and used
Personal data can be collected within the study. All collected data have a direct reference to the survey and the associated scientific research.
Legal basis for processing your data
We process personal data in accordance with the provisions of the Information and Data Protection Act (IDG) of the Canton of Zurich, the Swiss Federal Data Protection Act (DSG) and the European Data Protection Basic Regulation (GDPR), in each case to the extent that the relevant regulations are applicable. Since the GDPR requires us to list these individually, the legal bases on which we base our processing, in so far as the GDPR applies, are listed below. When processing personal data in accordance with the IDG or DSG, we rely in each case on the comparable legal bases in these laws:
For the fulfilment of contractual obligations (Art. 6 para. 1 b GDPR)
Who will have access to your personal data
Data is processed for scientific projects related the survey. Data can be shared among all academic institutions involved in the survey and the academic projects and within the framework of the balancing of interests of all parties involved (Art. 6 para. 1 f GDPR).
Within the ZHAW, access to your data is granted to those bodies that need it to fulfil our contractual and legal obligations. Service providers and agents employed by us may also receive data for these purposes.
Recipients of personal data may be, for example
- Public bodies and institutions (e.g. criminal prosecution authorities) if there is a legal or official obligation.
- Institutions within the ZHAW for risk management purposes due to a legal or official obligation.
Other data recipients may be those entities for which you have given us your consent to transfer data or for which you have released us from the obligation of confidentiality in accordance with the agreement or consent.
Transfer of data to a non-EU/EEC country or international organisation, and safeguards
Data will be transferred to countries outside the European Union and Switzerland (so-called third countries) (e.g. within the framework of research cooperation with foreign universities/organisations), if this is required by law or if you have given us your consent, or if we have provided suitable guarantees through appropriate mechanisms (e.g. contracts).
Statutory or contractual requirement
You are entitled to different rights depending on the applicable legal basis. If IDG or DSG are applicable, your rights are governed by these decrees.
If the GDPR is applicable, the following applies: Every data subject has the right of access under Article 15 GDPR, the right of rectification under Article 16 GDPR, the right of deletion under Article 17 GDPR, the right to restrict processing under Article 18 GDPR, the right of objection under Article 21 GDPR and the right of data transferability under Article 20 GDPR. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 GDPR).
You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent granted to us prior to the validity of the Basic Data Protection Regulation, i.e. prior to 25 May 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
Automated decision making
As a matter of principle, we do not use fully automated automatic decision-making in accordance with Article 22 GDPR to justify and conduct the surveys. Should we use these procedures in individual cases, we will inform you of this separately if this is required by law.
Your individual rights
If you have given us your consent to process personal data for specific purposes (e.g. passing on of data, evaluation of personal data for research and marketing purposes; newsletters, unless there is a legal basis for this based on lit. b), the legality of this processing is based on your consent. A given consent can be revoked at any time. This also applies to the revocation of declarations of consent that were issued to us before the GDPR became effective, i.e. before 25 May 2018. The revocation of consent does not affect the legality of the data processed until revocation.
Due to legal requirements (Art. 6 para. 1 c GDPR) or in the public interest (Art. 6 para. 1 e GDPR).
Your right to withdraw consent
Right of objection in individual cases
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 paragraph 1 letter e) DPA (data processing in the public interest) and Article 6 paragraph 1 letter f) DPA (data processing based on a balancing of interests); this also applies to profiling within the meaning of Article 4 No. 4 DPA based on this provision. If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
Right to object to the processing of data for direct marketing purposes
In individual cases, we process your personal data in order to carry out direct advertising. You have the right to object, at any time, to the processing of personal data concerning you for the purpose of such direct marketing, including profiling, to the extent it is connected with such direct marketing. If you object to processing for the purposes of direct marketing, we will no longer process your personal data for those purposes. The objection can be made without any formality and should be addressed, if possible, to: email@example.com
In addition, as the ZHAW is subject to the regulations of Swiss university law as well as other legal requirements of the Swiss legislature, so that personal data can also be processed if this is required by law or if processing is in the public interest. The basis for this, especially for studies and further education, is, among other things, § 6a of the Law on Universities of Applied Sciences.
Our Data protection officer
Phone: +41 (0)58 934 71 71