top of page

Impressum /
Privacy Policy

This website is operated by:

 

MPA Vocational and Business School AG
Wiedenstrasse 50a
9470 Buchs
Switzerland

T +41 81 756 17 65
F +41 81 756 17 68
info@mpaschule.ch

​

Responsible contact


Dr. Gernot Boiger

​

Copyright and Disclaimer


MPA Vocational and Business School reserves the copyright on this and other websites it controls and their contents.
The contents and images of this and the other websites controlled by MPA Vocational and Business School may be downloaded or copied exclusively for personal use.
Any other use or modification of the contents of these websites is permitted only with the consent of MPA Vocational and Business School.
The information on the websites is non-binding and provided without guarantee for its accuracy or timeliness. To the extent permitted by law, MPA Vocational and Business School excludes any liability for damages of any kind and for any legal reason that may arise from or in connection with the use of its websites, in particular for damages resulting from incorrect, incomplete, or not updated information or from loss of data.

 

1. Data Protection at a Glance

 

General Information

 

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any data with which you can be personally identified. Detailed information on data protection can be found in our privacy policy set out below this text.

Data Collection on this Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Note on the Responsible Entity” in this privacy policy.

 

How do we collect your data?

 

On the one hand, your data is collected when you provide it to us. This may be, for example, data you enter in a contact form.
Other data is collected automatically or after your consent when you visit the website by our IT systems. This primarily includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?
Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the rectification or deletion of this data. If you have given your consent to data processing, you may revoke this consent at any time for the future. Furthermore, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. In addition, you have the right to lodge a complaint with the competent supervisory authority.
For this purpose, and for further questions regarding data protection, you can contact us at any time.

2. Hosting

External Hosting
This website is externally hosted. The personal data collected on this website is stored on the servers of the hosting provider(s). This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access logs, and other data generated via a website.
External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). Where consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Our hosting provider(s) will process your data only to the extent necessary to fulfill its contractual obligations and will follow our instructions with respect to this data.

We use the following hosting provider:

Wix.com Ltd.
40 Namal Tel Aviv St.
Tel Aviv 6350671
Israel

Data Processing Agreement
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract required under data protection law, which ensures that this provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

​

3. General Information and Mandatory Notices

Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
We point out that data transmission on the Internet (e.g., communication by e-mail) can have security gaps. Complete protection of the data against access by third parties is not possible.

Note on the Responsible Entity
The responsible entity for data processing on this website is:

MPA Vocational and Business School
Wiedenstrasse 50a
9470 Buchs
Phone: +41 81 756 17 65
Email: info@mpaschule.ch

The responsible entity is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Period
Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, provided we have no other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, deletion will take place after these reasons no longer apply.

General Information on the Legal Basis of Data Processing on this Website
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data are processed in accordance with Art. 9(1) GDPR. In the event of explicit consent to the transfer of personal data to third countries, data processing also takes place on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing also takes place on the basis of § 25(1) TTDSG. Consent may be revoked at any time.
If your data is required to fulfill a contract or for pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if required to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The applicable legal bases in each individual case are explained in the following paragraphs of this privacy policy.

Recipients of Personal Data
In the course of our business activities, we work with various external parties. This may also involve the transfer of personal data to these external parties. We only pass on personal data to external parties if this is necessary for contract fulfillment, if we are legally obliged to do so (e.g., transfer of data to tax authorities), if we have a legitimate interest in the transfer under Art. 6(1)(f) GDPR, or if another legal basis permits the transfer of data. When using processors, we only pass on personal data of our customers on the basis of a valid data processing agreement. In the case of joint processing, a contract for joint processing is concluded.

Withdrawal of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You may revoke consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE APPLICABLE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place insofar as it is technically feasible.

Access, Rectification, and Erasure
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time.

Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time to do so. The right to restriction of processing exists in the following cases:

  • If you contest the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.

  • If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of erasure.

  • If we no longer need your personal data, but you require it to exercise, defend, or assert legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.

  • If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data – apart from its storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the lock symbol in your browser line.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

4. Data Collection on this Website

Consent with Borlabs Cookie
Our website uses the Borlabs Cookie consent technology to obtain your consent to the storage of certain cookies in your browser or the use of certain technologies and to document this in a data protection-compliant manner. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereinafter Borlabs).
When you enter our website, a Borlabs cookie is stored in your browser in which the consents you have given or the revocation of these consents are stored. These data are not passed on to the provider of Borlabs Cookie.
The collected data will be stored until you request us to delete it or until you delete the Borlabs cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
The use of the Borlabs cookie consent technology is carried out to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

Essential

Essential services enable basic functions and are necessary for the proper functioning of the website.

Borlabs Cookie borlabs-cookie
Description
Stores the visitor preferences selected in the Borlabs Cookie consent dialog.

Cookie(s)

  • Name: borlabs-cookie

  • Description: This cookie stores information about consent for service groups and individual services.

  • Hosts: www.mpaschule.ch

  • Lifetime: 60 days

  • Purpose: Functional

  • Type: HTTP

Provider Information
Provider Name
Owner of this website

Description
This is the owner of this website. The owner is responsible for the content of this website and for the processing of your personal data.

Address
–

Privacy Policy URL
https://www.mpaschule.ch

Data Processing Agreement
We have concluded a data processing agreement (DPA) with the provider mentioned above. This is a contract required by data protection law, which ensures that this provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and version

  • Operating system used

  • Referrer URL

  • Hostname of the accessing computer

  • Time of the server request

  • IP address

These data are not merged with other data sources.
The collection of these data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.

Contact Form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on these data without your consent.
The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this has been requested; consent can be revoked at any time.
The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Inquiry by Email, Telephone, or Fax
If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on these data without your consent.
The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this has been requested; consent can be revoked at any time.
The data you send us via contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

​

​

​

​

5. Plugins and Tools

 

Bootstrap CDN / jsdelivr.com CDN

​

We use BootstrapCDN and the jsDelivr CDN on this website, open-source services provided by the Polish software company ProspectOne, Królewska 65A/1, 30-081 Kraków, Poland.
This delivers JavaScript and CSS libraries to the browser. When the browser loads a file from a CDN, the IP address is transmitted to the CDN.
Personal data is sent and stored. BootstrapCDN may collect and store user data such as IP address, browser type, browser version, which web page is loaded, or the time and date of the page visit. The privacy policy of BootstrapCDN / jsdelivr.com states that no cookies or other tracking services are used. Bootstrap uses servers in various countries, and user data may also be stored outside the EU. Bootstrap retains personal data processed on our behalf as long as necessary to provide the services.
You can prevent JavaScript from running by using a JavaScript blocker. However, this may cause display errors or longer loading times on this website.
Information about Bootstrap can be found at https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net.

 

jQuery CDN

We also use services from the jQuery CDN provided by the jQuery Foundation for optimal display, security, and speed. jQuery is distributed by the American software company StackPath (LCC, 2012 McKinney Ave., Suite 1100, Dallas, TX 75201, USA). As a result, personal data is stored and processed.
StackPath’s data processing terms can be found at https://www.stackpath.com/legal/data-processing-addendum.
More information: https://www.stackpath.com/legal/privacy-statement and about jQuery at https://openjsf.org/wp-content/uploads/sites/84/2019/11/OpenJS-Foundation-Privacy-Policy-2019-11-15.pdf.

​

Communication via WhatsApp

 

We use the WhatsApp instant messaging service, among others, to communicate with our customers and third parties. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Communication is encrypted end-to-end (peer-to-peer), preventing WhatsApp or other third parties from accessing the content of communications. However, WhatsApp does receive metadata generated in the course of the communication process (e.g., sender, recipient, and time). We also point out that WhatsApp, by its own account, shares users’ personal data with its U.S.-based parent company, Meta. Further details on data processing can be found in WhatsApp’s privacy policy: https://www.whatsapp.com/legal/#privacy-policy.
The use of WhatsApp is based on our legitimate interest in communicating with customers, prospects, and other business and contractual partners as quickly and effectively as possible (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, processing is based exclusively on that consent; consent can be revoked at any time with effect for the future.
Communications content exchanged with and on WhatsApp remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory statutory provisions—particularly retention periods—remain unaffected.
The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the U.S. Each company certified under the DPF undertakes to comply with these data protection standards. For more information, see: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt00000011sfnAAA&status=Active

 

Google Maps


This site uses the Google Maps map service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to and stored on a Google server in the USA. The provider of this site has no influence on this data transmission. If Google Maps is activated, Google may use Google Fonts for uniform font display. When you access Google Maps, your browser loads the required web fonts into its cache to display text and fonts correctly.
The use of Google Maps is in the interest of an attractive presentation of our online offers and to facilitate the location of places indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
More information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
The company is certified under the EU–US Data Privacy Framework (DPF). For more information, see: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

 

6. Audio and Video Conferences

Data Processing
We use online conferencing tools, among others, to communicate with our customers. The specific tools we use are listed below. If you communicate with us via internet video or audio conference, your personal data will be collected and processed by us and by the provider of the respective conferencing tool.
The conferencing tools collect all data that you provide/use to utilize the tools (email address and/or your telephone number). The conferencing tools also process the duration of the conference, start and end (time) of participation in the conference, number of participants, and other “context information” related to the communication process (metadata).
In addition, the provider of the tool processes all technical data required for handling online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speakers, and the type of connection.
If content is exchanged, uploaded, or otherwise provided within the tool, this content is also stored on the servers of the tool providers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during use of the service.
Please note that we do not have full influence over the data processing procedures of the tools used. Our options are largely determined by the corporate policies of the respective provider. For more information on data processing by the conferencing tools, please refer to the privacy policies of the tools used, which we have listed below.

Purpose and Legal Bases
The conferencing tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us and/or our company (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Where consent has been requested, the tools are used on the basis of this consent; consent can be revoked at any time with effect for the future.

Storage Period
Data collected directly by us via video and conferencing tools is deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.
We have no influence on the storage period of your data that is stored by the operators of the conferencing tools for their own purposes. For details, please consult the operators of the conferencing tools directly.

Conferencing Tools Used
We use the following conferencing tools:

Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details on data processing can be found in Microsoft Teams’ privacy policy: https://privacy.microsoft.com/de-de/privacystatement.
The company is certified under the EU–US Data Privacy Framework (DPF). Further information is available here: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000KzNaAAK&status=Active

Data Processing Agreement
We have concluded a data processing agreement (DPA) to use the service mentioned above. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

 

Special Information on Data Protection

MPA Vocational and Business School AG reserves the right to make changes to this privacy policy, for example in the event of new developments or new laws. We recommend that you read it again from time to time. The currently valid version is available at www.mpaschule.ch.
This version was last updated in August 2023.

 

COLLECTION OF PERSONAL DATA

Most of the personal data mentioned is provided by you during the admissions process and in the course of our contractual relationship or is collected in connection with the use of the online services of MPA Vocational and Business School AG. Where permitted, we may also store personal data about our business partners, students, and their families that we have obtained from publicly accessible sources (e.g., social media channels), authorities, or other third parties, such as other schools.
Please ensure the accuracy of personal data when you transmit it. If you provide personal data about someone other than yourself, please ensure that you are authorized to provide the data and that the other person is aware of this privacy policy.
Personal data is essential for the operational use of MPA Vocational and Business School AG. While most of the personal data you provide is strictly necessary for the conclusion and performance of our contractual relationship, some of it may be provided on a voluntary basis. We will inform you if the provision of personal data is voluntary or necessary to fulfill our contractual obligations.

 

SPECIAL RULES FOR CAMERA SURVEILLANCE, PHOTOS, AND VIDEOS

For security reasons, certain parts of the school premises may be under video surveillance. MPA Vocational and Business School AG stores video images for a maximum of 30 days and then deletes them unless the images need to be retained for further investigations or law enforcement measures.
Photos and videos of students, parents, and staff may be taken to document and share daily life on the school premises during the school year. Students, parents, and staff may be identifiable in these photos or videos. Such photos and videos may be used for educational and internal information purposes (e.g., recordings of lessons, excursions, sports, events, staff training, yearbooks, internal newsletters) as well as to identify students, parents, or staff for health-related purposes (e.g., allergies) or for marketing and publication purposes, provided and to the extent that you have given us your consent and to the extent permitted by applicable data protection laws.

 

STORAGE OF PERSONAL DATA

Personal data is stored in accordance with Swiss data protection regulations and the EU GDPR on servers in Switzerland, in EU-EFTA countries, in the USA, and in the United Kingdom.
MPA Vocational and Business School AG maintains appropriate technical and organizational measures to preserve the confidentiality and integrity of your personal data (protection against unauthorized or unlawful access or processing, accidental loss, destruction, or damage, cybersecurity).
MPA Vocational and Business School AG does not store personal data indefinitely; data is stored only as long as necessary to achieve the purposes mentioned above. Processing beyond the end of our contractual relationship may occur to assert, defend, or exercise legal claims (during the applicable limitation period), to fulfill legal or post-contractual obligations, including statutory documentation obligations, as well as to safeguard other legitimate interests of MPA Vocational and Business School AG.

 

WITH WHOM WE SHARE PERSONAL DATA

MPA Vocational and Business School limits the use of and access to personal data to those persons who strictly need to know it in order to provide the services mentioned above and to achieve the purposes described above (authorized staff or agents). MPA Vocational and Business School will not share your personal data with external parties unless provided for in this privacy policy, you have given your explicit prior consent, or it is required by applicable laws or regulations.
External recipients with whom MPA Vocational and Business School regularly shares personal data are the following:

  • Any company or provider where the disclosure of information is necessary to make payments or book benefits for you.

  • Schools that students attend after leaving us.

  • Our local, cantonal, and federal authorities to comply with our legal obligations.

  • Swiss education authorities.

  • The student’s family and representatives.

  • Educators and examination boards.

  • Service providers that enable the provision of the service commissioned by you (e.g., IT service providers; providers of academic services; providers of extracurricular activities, internships and excursions; higher education institutions).

  • Our auditors.

  • Health authorities and child protection authorities.

  • Police forces, courts, tribunals.

Where necessary, MPA Vocational and Business School AG will require external recipients to comply with this privacy policy and to process personal data securely and solely for the purposes authorized by MPA Vocational and Business School AG. The transfer of personal data is generally restricted to recipients based in Switzerland. However, personal data may be transferred to recipients based in the following countries: EU-EFTA, UK, USA. If external recipients or external service providers are located in countries whose legislation does not ensure an adequate level of data protection, MPA Vocational and Business School AG will implement appropriate safeguards in the form of corresponding contractual clauses, in particular standard contractual clauses and model contracts for data transfers recognized by Switzerland and the Federal Data Protection and Information Commissioner, to ensure compliance with this privacy policy and applicable laws.

 

AUTOMATED DATA DECISIONS

We generally do not use automated data decisions (i.e., decisions affecting data subjects that are made fully automatically, without human intervention). Should this exceptionally be the case, we will inform you separately.

 

YOUR RIGHTS

Under data protection laws, you have certain rights regarding your personal data processed by us to verify the lawfulness of processing. In particular, you have the right to:

  • Request information about your personal data processed by us.

  • Request a copy of the personal data that MPA Vocational and Business School AG holds about you; this also includes the right to data portability, i.e., the right to receive your personal data in a structured, commonly used format.

  • Restrict the processing of your personal data and/or object to processing; in this case, however, we may no longer be able to provide the associated services or fulfill our contractual obligations.

  • Request that your personal data be deleted when there is no compelling reason for further processing.

  • Request that your personal data be amended if it is incorrect or incomplete.

Where the processing of your personal data is based on your consent, you have the right to withdraw this consent at any time. Such withdrawal has no effect on the lawfulness of processing based on consent before its withdrawal.
Please note that your rights under this section may be limited in order to protect overriding interests of MPA Vocational and Business School AG or third parties.
You also have the right to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

 

WEBSITE LINKS

This website may contain links to other websites. Please note that MPA Vocational and Business School AG is not responsible for the privacy practices of those other websites. We encourage our users to be aware when they leave our website and to read the privacy policies of all websites that collect personal data.

 

USE OF COOKIES

The MPA Vocational and Business School website may use “cookies” to help personalize your online experience. A cookie is a text file placed on your hard drive by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you.
One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the web server that you have returned to a specific page.
You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the MPA Vocational and Business School website.
If you want to disable cookies, you can do so through your individual browser options. More detailed information about cookie management with specific web browsers can be found on the respective websites of the browsers.

 

CONTACT

If you have concerns about how we collect or use your personal data, please address them by email to the Data Protection Officer of MPA Vocational and Business School AG, Ms. Marianna von Känel, at marianna.vonkaenel@mpaschule.ch.

 

CHANGES AND LAST UPDATE

MPA Vocational and Business School AG reserves the right to make changes to this privacy policy from time to time, for example in the event of new developments or new laws. We recommend that you read this privacy policy again from time to time. The currently valid version is available at www.mpaschule.ch.
This version was last updated in August 2023.
Source: International School of the Basel Region AG (ISB), according to the webinar “Data Protection,” Mr. Daniel Hering, Private Education Switzerland, Bern.

bottom of page