Privacy Policy

Last Updated: 3 January 2022

Purpose

The purpose of this privacy policy is to explain who we are, the reason and use of the personal data we collect, and the rights you have, in accordance with the General Data Protection Regulation 2016/678 (GDPR).

Users who provide their personal data to Geneva Business School (hereafter The School) should be aware of who the data controller is, what will be done with their data and what their rights are.

Scope

The School is committed to complying with the General Data Protection Regulation in transparent and secure ways both as an academic institution and an employer.

In order to do this we will:

Obtain consent when collecting personal data (opt-in with notice) or rely on appropriate legal grounds for processing personal data.
Inform Users about how their data is processed.
Keep personal data safe and secure.
Observe the rights of individuals under GDPR directive.
Ensure staff is appropriately trained in managing personal data.
Ensure that records containing personal data are effectively managed and comply with the law in terms of accountability, accuracy, simplicity, veracity, relevancy, and updates.

Who we are

We are Geneva Business School S.A. You can find our contact details at the end of this policy.

We are the Data Controller of your personal data according to this policy.

Whose personal data do we collect?

We can use your personal data in the following cases:

If you are a student, staff member, ambassador, or supplier
If you use our services
If you work for one of our ambassadors or suppliers or for someone using our services
If you are a prospective student or someone to whom we wish to show or sell our services and inform about our events and news. In such cases, we have collected your data from our website, conference, professional trade fair, ambassador, or directly on campus

The personal data we collect

Good record management is essential to comply with GDPR. The School will ensure that the personal data it keeps is:

Adequate, relevant, and not excessive for the purposes it has been collected for.
Accurate and up-to-date.
Kept only for as long as is necessary (See section below: How long do we process personal data?).

We can process the personal data that we have obtained from you or from another source. This may include the following:

Your name
Your age
Your gender
Your nationality
Your job role, department, and company
Your address, phone number, email address, or other contact information (this information may refer to your work or to you personally, depending on the nature of our relationship with you or the person for whom you work)
Your educational background
Your career and current position
Your language

Information we obtain from communications with us:

Information you provide by communicating with us by phone, email, through our website, social networks, or otherwise.
Information you provide when you use our website, apply for information or to join our educational institution, provide us with goods or services, enquire about a product, place an order, participate in a survey or promotion, contact us to report a problem, or do any of these things on behalf of the person for whom you work.
Information regarding our relationships with you or the person for whom you work.

What personal data do we process when you use our website?

The information we obtain from you when you use our website includes:

Technical information, such as the Internet Protocol (IP) address that has been used to connect your computer to the Internet, your login information, browser type and version, time zone settings, types and versions of the browser, operating system, and platform.
Information about your visit, such as URL addresses (Uniform Resource Locators), clickstream information (traffic) from and to our website, and through it (including time and date), products you have searched for or viewed, response times of pages, download errors, duration of visits to certain pages, information about interaction with pages (such as scrolling, clicking, and hovering over something), methods used to navigate off the page and any email address you leave to be contacted (more information or newsletter).

In such cases, consent should be obtained using an “opt‐in” with notice by the data subject.

The School will not assume consent has been given tacitly or through the absence of an objection.

Cookies

We may use cookies, web beacons, tracking pixels, and other tracking technologies when you visit our website gbsge.com, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the “Site”) to help customize the Site and improve your experience.

Read our full Cookie Policy to learn more.

If you have questions or comments about our Cookie Policy, please contact us at: [email protected].

How is your personal data used?

Any data voluntarily provided will be incorporated and compiled into an archive of personal data, under The School’s responsibility.

Your personal data may be used for any of these purposes:

To handle documentation relevant to students and prospective students (leads) in the application process
To inform our students and prospective students (leads) about our courses, programs, events, and activities by either email, instant messaging, or phone.
To sign contracts with you or the person you work for:
To offer services
To administer our website in accordance with our terms and for internal operations, including problem-solving and data analysis, testing, research, and statistical and survey-making purposes
To improve our website and ensure content is presented in the best way for you and your computer
To keep safe and secure our website and other systems
To measure or understand the effectiveness of the advertising we provide to you and other people, and to offer relevant advertising

Who can we share your personal data with?

Your data may be transferred to the third parties listed below, for the following reasons:

Public administrations: for the fulfillment of the legal obligations The School is subject to due to its activity.
Suppliers who require access to their data for the provision of services that The School has contracted to those suppliers, and with whom The School has subscribed the confidentiality contracts and the treatment of personal data necessary and required by law.
Any member of our group, across our campuses and headquarters.

Do we carry out international data transfers?

The School may contract the services of technological suppliers located in countries that do not have laws equivalent to the European Union (“third countries”). These suppliers have signed the confidentiality and data processing contracts required by the regulations for suppliers located in third countries, applying the guarantees and safeguards necessary to preserve their privacy.

For more information on the guarantees of your privacy, you can contact the data protection delegate as per details at the end of this policy.

What is the legal basis for the treatment of your personal data?

The legal basis for the treatment of your personal data is related to:

The maintenance of your relationship with The School as a partner, supplier, current, or prospective student in order to comply with the contractual obligations arising from such a relationship.
The processing of your personal data for sending promotional information about The School’s activities, campaigns, or initiatives similar to those you have participated in, in accordance with the legitimate interest of our entity.

How long do we process personal data?

We only process personal data for the period of time necessary for the purpose or purposes for which they were originally collected. They will then be deleted or archived, except to the extent that we need them to continue by processing them to comply with the legal obligations that correspond to us or other legitimate and legal purposes.

What are your rights?

You have the following rights in relation to your personal data:

You can request access to the personal data in question (see the section on exercising your right to access your personal data below)
You may request that the incorrect personal data be rectified
Under certain circumstances (usually when you have provided personal data and no longer need to continue processing them), you may request that we delete the personal data in question
If we process personal data concerning you in accordance with the prior consent you have given for such processing, you may withdraw your consent at any time, and thereafter the processing in question will be terminated.
If you have a complaint about the processing of your personal data, you can contact us or file a complaint with the Swiss Data Protection Agency.

How to exercise your rights

To exercise your rights of access, rectification, cancellation, opposition, restriction, and portability established by law you can:

Send an email to [email protected]
Write to the address below

Please bear in mind we may request further details to confirm your identity before providing information.

Contact details:

Switzerland
Geneva Business School S.A.
La Voie-Creuse 16
1202 Geneva Switzerland
+41 22 906 94 94

Spain
Geneva Business School Spain S.L.
Carrer de Rivadeneyra 4
Barcelona 08002 Spain
+34 934 816 506

Email: [email protected]

Changes To This Privacy Policy

This Privacy Policy is effective as of 3 January 2022 and will remain in effect except with respect to any changes to the data protection directive, or to any changes to the Privacy Policy of the School. This Privacy Policy will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and it is the user’s responsibility to check this Privacy Policy periodically. Your continued use of the service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.