Privacy Policy

1. Data Controller

EcoCampus Zurich, Rämistr. 71, 8006 Zurich, ecocampuszuerich@gmail.com.

2. Collection and Processing of Personal Data

We only collect and process personal data to the extent necessary to operate the Website and its functions. This includes:

• Access data (log files): IP address, date, time, browser type, and pages accessed — used for technical operation and security.

• User accounts and login data: Users may sign in using their university email address to access personalized features of the Ecocampus platform. During registration or login, we process the email address and authentication data solely to verify eligibility and enable secure access. Login data is stored securely and is not shared with third parties.
  If authentication is handled through a university system or third-party provider, their privacy policies apply to the login process itself.

• Contact inquiries: When users contact us via email or contact form, we use the submitted information solely to respond to the inquiry.

• Cookies: The Website uses only technically necessary cookies. No analytics, marketing, or tracking cookies are used, and no user profiling takes place.

3. Legal Basis

Data is processed lawfully under:

• Art. 6(1)(b) GDPR – performance of (pre-)contractual measures (e.g., user account operation);

• Art. 6(1)(f) GDPR – legitimate interest in maintaining a secure and functioning website;

• Art. 31 FADP – processing based on good faith and proportionality.

4. Data Disclosure

We do not disclose personal data to third parties unless required by law or explicitly consented to by the user.

5. Data Retention

Personal data is stored only as long as necessary for the stated purpose or as required by legal retention obligations. Login data is retained only for as long as the user account remains active.

6. Rights of Data Subjects

Under the FADP and GDPR, you have the right to:

• Request information about your stored data;

• Request correction or deletion of your data;

• Restrict or object to processing;

• Request data portability (if applicable).

Requests may be submitted to: [insert contact email].

7. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, loss, or misuse. Login and transmission processes are secured using encryption and other standard protection mechanisms.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on our Website.