Privacy policy of the ISZL Sustainability Initiative

Version 10/01/2023

  1. Responsibility for the processing of your data

  1. In this privacy policy, we would like to inform you of how your personal data is collected, who sees it, and what it will be used for. We only use the data that you have given consent for us to use, or that we are permitted to by European Law. The articles of European Law referred to in this document are the European Data Protection Regulation (EU) 2016/679 of the European Parliament Council of 27 April 2016 (GDPR). This document applies to all visitors to the website.

  2.   ISZL’s Carbon Credit Fund may also be referred to within this document as “we”, “our”, “School”, “ISZL Sustainability”, “Carbon fund”, ”ISZL’s Carbon Credit Fund”, “Carbon Credit Fund”, “Sustainability Initiative” and “CCF”. This document refers to the ISZL Sustainability website, which includes all publicly accessible pages under the domain iszlsustainability.ch. For data protection questions, contact sustainability@iszl.ch. The ISZL Carbon Credit Fund operates from 

    Rothusstrasse 4B, 

    6331 Hünenberg, 

    Switzerland

  3. We, ISZL Sustainability, are the “controller”, in the meaning of Article 4 of the GDPR - the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

2. Personal Data

In accordance with Article 4 of the GDPR, any reference to personal data includes “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person” 

3. Collection of your personal data

We do not collect all of the personal information listed above, only that data which we require in order to fulfil purchases and other explicitly stated purposes of the website. We do not collect any personal information through this site unless you voluntarily provide it on pages such as the carbon calculator and the checkout page for your individual carbon credits. Unless otherwise stated, we use personal data such as name, email address, and data specific to your carbon footprint calculations (all of which can be found on the calculation page), to respond to your individual carbon footprint calculation or to contact you. The data you submit may only be seen when absolutely necessary for the functioning of the site, by those responsible for its function, the students involved in the ISZL Sustainability Initiative. The data is not shared with any third parties. Data is entirely confidential, and will not be used on other pages or for other functions once voluntarily submitted. The data that students see will be used only to write thank you letters, contact you, fulfil your purchase, or for the accounting and finances managed by the ISZL finance office. (the accuracy and validity of this process is guaranteed by ISZL). The collection of this data is legal and required for the performance of the contract concluded with your pursuant to point (b) of Article 6 of the GDPR . This site does not track your activity through Analytics, nor does it send your data to Google Analytics.

  1. This personal data travels through the platform used to create this website, Squarespace. In other words, your data is hosted on their servers. Squarespace’s privacy policy also aligns with the terms of the GDPR. You can access Squarespace’s privacy policy here https://www.squarespace.com/privacy - please note that when Squarespace refers to personal data in this document, it is referring to ISZL’s Carbon Credit Fund’s data, rather than your own personal data.

  2. Your personal data also travels through Stripe, our chosen payment processing platform. Stripe also hosts your data on their servers. Stripe’s privacy policy also aligns with the terms of the GDPR, and can be accessed here https://stripe.com/en-gb-ch/privacy 

  3. We use Google’s services and spreadsheets to store your personal data. Google adheres to GDPR regulations. Access their privacy policy here https://policies.google.com/privacy?hl=en-US 

  4. The Sustainability Initiative also links to ISZL. ISZL adheres to GDPR regulations. Access their privacy policy here https://www.iszl.ch/utilities-link/data-protection/iszl-privacy-notice-f 

4. SSL encryption

This website takes every precaution to protect the personal data of our site users. Whenever users submit personal data, it is encrypted via the highest level of SSL (Secure Sockets Layer) available and remains secure during all stages of transmission.Connections which are encrypted in this way display the prefix "https://" in your browser’s address bar. Unencrypted websites display "http://". Thanks to SSL encryption, the data you transmit to these websites, e.g. when sending enquiries or logging in, are protected against being viewed or accessed by third parties.

5. Cookies

A cookie is a small text file stored by your browser that allows the website to “remember” your preferences (such as calendar settings and site bookmarks) on the site from visit to visit, or to maintain your “logged in” status when visiting protected areas. Usage of a cookie is in no way linked to any personally identifiable information while on our site. Web browsers have settings allowing you to reject cookies or selectively accept cookies, or delete cookies previously accepted. More information about cookies, including how to block them on all sites or delete them, can be found at https://www.aboutcookies.org. Please be aware that rejecting or deleting cookies from our website may make certain functions unavailable to you. If you accept willingly to the usage of cookies by clicking accept, our access to the data provided is legal in accordance with point (a) of Article 6 of the GDPR - in that you (the data subject) have given consent to the processing of your personal data for one or more specific purposes. We have legitimate interest in viewing and processing the data provided by these cookies in maintaining the functionality of the website in accordance with Article 6 (1) (f) GDPR.

6. External links and Social media

This website may contain links to other sites or social media platforms. Please be aware that we are not responsible for the privacy practices of such other sites, even if we may be affiliated with them. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every website that collects personally identifiable information. This privacy statement applies solely to information collected by this website. Websites accessed through this website do not have access to any of the information you provided to this website, unless specified in their own privacy policy, or you consensually provide said data. We are legally allowed to include hyperlinks to external sources to maintain the functionality of the website in accordance with point (f) of Article 6 of the GDPR, our legitimate interest in the functionality and reliability of the site. The specific social media platform referred to is our instagram account, @iszlsustainability.Instagram’s privacy policy can be accessed here https://help.instagram.com/155833707900388 

7. Retention Periods and Criteria for the Retention of Your Personal Data

Data collected has a retention period of 1 year and no more, and will only be used to contact you immediately with your calculation results.

8. Your Rights

  1. You have the following rights regarding your personal data

    Right of Access - Article 15 of the GDPR

    Right to rectification - Article 16 of the GDPR

    Right to Erasure - Article 17 of the GDPR

    Right to Restriction of Processing - Article 18 of the GDPR

    Right to Data Portability - Article 20 of the GDPR

    Right to Object - Article 21 of the GDPR

    On grounds relating to your particular situation, you have the right to object to the processing of personal data concerning you on the basis of point (f) of Art. 6 (1) GDPR (data processing due to a legitimate interest). If you object, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

  2. To exercise your rights or to lodge a complaint about the processing of your personal data, use the contact information or address provided in 1.2

9. Changes to This Privacy Policy

We may change, supplement or replace this Privacy Policy in full or in part at any time and without prior announcement. The Privacy Policy currently published is valid.