Privacy Policy

Last Updated: 25 March 2025

 

Purpose

The purpose of this privacy policy is to explain who we are, the reason and use of the personal data we collect, and the rights you have, in accordance with the General Data Protection Regulation 2016/679 (GDPR) and the New Swiss Federal Act on Data Protection (nLPD) of 1 September 2023.

Geneva Business School (hereafter The School), Geneva Campus’ Director, acts as a representative for The School and as its Data Protection Officer (DPO). Responsibilities include overseeing and monitoring the School’s data protection procedures and ensuring they are compliant with the legislation mentioned above. He may be contacted at [email protected].

Users who provide their personal data to The School should be aware of who the data controller is, what will be done with their data, and what their rights are.

 

Respect of GDPR and nLPD Regulations

The School is fully committed to complying with the General Data Protection Regulation (GDPR) and the New Swiss Federal Act on Data Protection (nLPD). We ensure that personal data is processed lawfully, fairly, and transparently. The School applies the following principles:

• Lawfulness, fairness, and transparency: Data is processed in accordance with legal regulations, with transparency regarding its use.
• Purpose limitation: Data is collected for specified, explicit, and legitimate purposes.
• Data minimization: Only the necessary data for the intended purpose is collected and processed.
• Accuracy: Data is kept accurate and up to date.
• Storage limitation: Data is retained only for the necessary duration as required by law.
• Integrity and confidentiality: Security measures are implemented to protect against unauthorized access, loss, or destruction.

Individuals have the right to access, rectify, delete, restrict, or object to data processing, as well as the right to data portability. Requests can be addressed to [email protected].

 

Scope

The School is committed to complying with the General Data Protection Regulation and the New Swiss LPD in transparent and secure ways, both as an academic institution and an employer.

In order to do this, we will:

• Obtain consent when collecting personal data (opt-in with notice) or rely on appropriate legal grounds for processing personal data.
• Inform users about how their data is processed.
• Keep personal data safe and secure.
• Observe the rights of individuals under GDPR and nLPD directives.
• Ensure staff are appropriately trained in managing personal data.
• Ensure that records containing personal data are effectively managed and comply with the law in terms of accountability, accuracy, simplicity, veracity, relevancy, and updates.

 

Who We Are

We are Geneva Business School S.A. You can find our contact details at the end of this policy.

We are the Data Controller of your personal data according to this policy.

 

Whose Personal Data Do We Collect?

We can use your personal data in the following cases:

• If you are a student, staff member, ambassador, or supplier.
• If you use our services.
• If you work for one of our ambassadors or suppliers, or for someone using our services.
• If you are a prospective student or someone to whom we wish to show or sell our services, and inform about our events and news. In such cases, we have collected your data from our website, conference, professional trade fair, ambassador, or directly on campus.

The personal data we collect

Good record management is essential to comply with GDPR. The School will ensure that the personal data it keeps is:

• Adequate, relevant, and not excessive for the purposes it has been collected for.
• Accurate and up-to-date.
• Kept only for as long as is necessary (See section below: How long do we process personal data?).

We can process the personal data that we have obtained from you or another source.  This may include the following:

• Your name
• Your age
• Your gender
• Your nationality
• Payment details
• Your job role, department, and company
• Your address, phone number, email address, or other contact information (this information may refer to your work or to you personally, depending on the nature of our relationship with you or the person for whom you work)
• Your educational background
• Your career and current position
• Your language
• Content of Geneva Business School with you
• Attendance information (such as classes attended, number of absences, absence reasons, and any previous schools attended)
• Assessment information (such as data scores, tracking, and internal and external testing), Relevant medical information (such as insurance information, health conditions, physical and mental health care, immunizations and allergies, dietary requirements, and medication)
• Special educational needs information (such as care or support plans)
• Safeguarding information
• Photographs and videos (see below)
• Behavioral information (such as exclusions and any relevant provisions put in place)

 

Information we obtain from communications with us:

• Information you provide by communicating with us by phone, email, through our website, social networks, or otherwise.
• Information you provide when you use our website, apply for information or to join our educational institution, provide us with goods or services, enquire about a product, place an order, participate in a survey or promotion, contact us to report a problem, or do any of these things on behalf of the person for whom you work.
• Information regarding our relationships with you or the person for whom you work.

 

What personal data do we process when you use our website?

The information we obtain from you when you use our website includes:

• Technical information, such as the Internet Protocol (IP) address that has been used to connect your computer to the Internet, your login information, browser type and version, time zone settings, types and versions of the browser, operating system, and platform.
• Information about your visit, such as URL addresses (Uniform Resource Locators), clickstream information (traffic) from and to our website, and through it (including time and date), products you have searched for or viewed, response times of pages, download errors, duration of visits to certain pages, information about interaction with pages (such as scrolling, clicking, and hovering over something), methods used to navigate off the page and any email address you leave to be contacted (more information or newsletter).

In such cases, consent should be obtained using an “opt‐in” with notice by the data subject.

The School will not assume consent has been given tacitly or through the absence of an objection.

 

Cookies

We may use cookies, web beacons, tracking pixels, and other tracking technologies when you visit our website gbsge.com, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the “Site”) to help customize the Site and improve your experience.

Read our full Cookie Policy to learn more.

If you have questions or comments about our Cookie Policy, please contact us at: [email protected].

 

How is your personal data used?

Any data voluntarily provided will be incorporated and compiled into an archive of personal data, under The School’s responsibility.

Your personal data may be used for any of these purposes:

• To handle documentation relevant to students and prospective students (leads) in the application process
• To inform our students and prospective students (leads) about our courses, programs, events, and activities by either email, instant messaging, or phone.
• To support student learning
• To monitor and report on student progress
• To meet the statutory requirements placed upon us by the cantonal and federal authorities
• To sign contracts with you or the person you work for:
• To offer services
• To help investigate any concerns or complaints you may have
• To establish, defend, or exercise claims
• To terminate our contractual relationship
• Build and maintain the Geneva Business School community
• Make you aware and inform you about our services, news, events, and activities
• Alumni: respond to your request regarding historic information about your time at Geneva Business School
• To administer our website in accordance with our terms and for internal operations, including problem-solving and data analysis, testing, research, and statistical and survey-making purposes
• To improve our website and ensure content is presented in the best way for you and your computer
• To keep our website and other systems safe and secure

To measure or understand the effectiveness of the advertising we provide to you and other people, and to offer relevant advertising

Who can we share your personal data with?

Your data may be transferred to the third parties listed below, for the following reasons:

• Public administrations: for the fulfillment of the legal obligations, The School is subject to due to its activity.
• Suppliers who require access to their data for the provision of services that The School has contracted to those suppliers, and with whom The School has subscribed the confidentiality contracts and the treatment of personal data necessary and required by law.
• Any member of our group, across our campuses and headquarters.

 

Do we carry out international data transfers?

The School may contract the services of technological suppliers located in countries that do not have laws equivalent to the European Union (“third countries”). These suppliers have signed the confidentiality and data processing contracts required by the regulations for suppliers located in third countries, applying the guarantees and safeguards necessary to preserve their privacy.

For more information on the guarantees of your privacy, you can contact the data protection delegate as per the details at the end of this policy.

 

What is the legal basis for the treatment of your personal data? 

The legal basis for the treatment of your personal data is related to:

• The maintenance of your relationship with The School as a partner, supplier, current, or prospective student to comply with the contractual obligations arising from such a relationship.
• The processing of your personal data for sending promotional information about The School’s activities, campaigns, or initiatives similar to those you have participated in, in accordance with the legitimate interest of our entity.

 

How long do we process personal data?

We only process personal data for the period of time necessary for the purpose or purposes for which they were originally collected. They will then be deleted or archived, except to the extent that we need them to continue by processing them to comply with the legal obligations that correspond to us or other legitimate and legal purposes.

 

What are your rights?

You have the following rights in relation to your personal data:

• You can request access to the personal data in question (see the section on exercising your right to access your personal data below)
• You may request that the incorrect personal data be rectified
• Under certain circumstances (usually when you have provided personal data and no longer need to continue processing them), you may request that we delete the personal data in question
• If we process personal data concerning you in accordance with the prior consent you have given for such processing, you may withdraw your consent at any time, and thereafter the processing in question will be terminated.
• If you have a complaint about the processing of your personal data, you can contact us or file a complaint with the Swiss Data Protection Agency.

 

How to exercise your rights

To exercise your rights of access, rectification, cancellation, opposition, restriction, and portability established by law you can:

• Send an email to [email protected]
• Write to the address below

Please bear in mind we may request further details to confirm your identity before providing information.

 

Contact Details:

Switzerland
Geneva Business School S.A.
La Voie-Creuse 16
1202 Geneva, Switzerland
+41 22 906 94 94

Spain
Geneva Business School Spain S.L.
Carrer de Rivadeneyra 4
Barcelona 08002, Spain
+34 934 816 506

Email: [email protected]

Changes to This Privacy Policy

This Privacy Policy is effective as of 1st September 2023 and will remain in effect except with respect to any changes to the data protection directive, or to any changes to The School’s Privacy Policy. This Privacy Policy will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time. It is the user’s responsibility to check this Privacy Policy periodically. Your continued use of the service after we post any modifications will constitute your acknowledgment and consent to abide by the modified Privacy Policy.

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us or by placing a prominent notice on our website.