Privacy statement

Your personal data will be processed by us in accordance with the applicable regulations in accordance with the EU Data Protection Basic Regulation (GDPR). In this data protection declaration, you will find information on the handling of your personal data when using our services via the website www.iguaco.org

1. Name and contact details of the data controller

Responsible for the collection of your personal data:
Iguaco LLC
Gumelenstrasse 13
8810 Horgen
Switzerland
Email: support@iguaco.org

2. Visit the website

When you access our website, we or our Internet provider automatically collect the following access data and temporarily store it in a so-called log file:

The data is used to establish the connection to the website and to guarantee system security. The access data will never be used to establish a connection to your person.

The legal basis for data processing under Art. 6 Para. 1 Sentence 1 f from the GDPR. Our legitimate interest in data processing arises from the aforementioned purposes.

The data will be deleted as soon as they are no longer needed for the stated purposes. The data required for establishing the connection will be deleted as soon as you leave our website. Otherwise, the data in the log files will be deleted after seven days at the latest.

The website is operated by an Internet provider with whom we have concluded a contract for order processing pursuant to Art. 28 of GDPR. The provider provides the infrastructure and storage space for our website and e-mail boxes on its servers within the European Union and Switzerland and takes care of maintenance, technical support and plant operation. Within this framework, the provider processes personal data on our behalf, which is transferred via the e-learning platform when using our services. It is also in our legitimate interest, pursuant to Art. 6 Para. 1 S. 1 f of GDPR, to ensure that the website operates properly and safely.

3. Contact

You can contact us in various ways, for example by telephone, e-mail or via the contact form on our website. When you contact us via the contact form, your name and e-mail address will be collected. In addition, the data that you communicate to us in your message will be stored. We process these data for the purpose of answering your inquiry. The legal basis for data processing is our legitimate interest in processing your request in accordance with Art. 6 Para. 1 Sentence 1 f from the GDPR.

If your request is made for the purpose of concluding a contract, we process the data at the same time to carry out pre-contractual measures or to fulfil the contract. The legal basis in this case is Art. 6 Para. 1 S. 1 b from the GDPR. After your request has been dealt with, your personal data will be deleted, provided there are no legal, in particular tax-related, storage obligations to prevent such deletion.

4. Execution of the contract and use of the e-learning platform

If you make use of the services of our e-learning platform, we need the following data for the execution of the contract: Your name, address, e-mail address and telephone number or the name and location of the school. In addition, we process personal data of the persons to whom you wish to grant access to the e-learning platform, i.e. students and their teachers (“users”).

Access to the learning content and digital lessons of our platform is via a user account which we create for each user when registering on the platform. For this purpose, we store the following user data: first name, surname and e-mail address. Registration for the user account takes place with a freely chosen password and username. For the registration there is no obligation to use a clear name, so that a pseudonymous use is possible.

In order to prevent misuse of the e-mail address, registration is carried out using the so-called double opt-in procedure: the user receives an e-mail with a link to confirm registration. Only when the user activates the link by clicking is the registration completed.

Users (students) can edit tasks, exercises and exams in their user account. The results will be made available to other users (student’s teacher) according to the contractual performance. Third parties are not granted access. We save the results for the duration of the contract, unless the user deletes them beforehand via the settings in the user account.

Unless we have a separate consent, we process your data only for the implementation of pre-contractual measures or contract performance. The legal basis is Art. 6 Para. 1 S. 1 b from the GDPR.

The processing of the data of users who are not also our contractual partners (e.g. pupils) is carried out on the basis of a contract for order processing pursuant to Art. 28 from the GDPR.

After termination of the contract, the data will be deleted insofar as there are no legal regulations such as tax or commercial law obligations to retain data and you have not given us express consent to further use.

5. Data transmission to Switzerland

The European Commission has decided that Switzerland guarantees an adequate level of protection for personal data within the meaning of Art. 45 from the GDPR. Switzerland is thus considered a secure third country and the transfer of data from the EU to Switzerland does not require any special authorisation.

6. Transfer of data to third parties

Your personal data will only be transferred to third parties in the following cases:

7. Data security

Our website is secured by SSL technology (Secure Socket Layer). This encryption procedure is state-of-the-art and serves to protect your personal data from access by third parties during transmission on the Internet. You can see from the Internet address displayed in the browser whether the connection is SSL-secured: Instead of “http://” you will find “https://” for encrypted connection. In some browsers, the image of a small padlock is also shown.

In addition, we will take appropriate technical and organizational measures for the security of your data to protect against accidental or deliberate manipulation, loss, destruction or against unauthorized access. The security measures are continuously adapted in line with technical developments.

8. Cookies

Cookies are used on the website. Cookies are small text files that are stored on your computer by the browser when you visit a website.

We use session cookies, which store a so-called session ID. This allows various requests from your browser to be assigned to the shared session. The cookies serve to recognize your browser when you visit our website and thus enable essential functions of the website. These cookies are deleted when you close your browser or log out.

We also use cookies to make our website more user-friendly: Your browser will be recognized at a later visit, so that you do not have to re-enter the data and settings you entered at a previous visit. These cookies are not stored for longer than two months and are then deleted.

The legal basis for the use of cookies is Art. 6 Para. 1 S. 1 f from the GDPR. Our justified interest in data processing results from the purposes of guaranteeing the functions of the website and making the website user-friendly.

In the settings of your browser, you can decide whether to reject or accept cookies. You can also delete individual cookies or all cookies. Further information can be found in the “Help” settings of your browser. If you reject cookies, you may not be able to use all the website’s functions.

9. Links

On our website we set links to Internet pages of third parties. We are not responsible for these websites. The respective provider is responsible for data collection and processing there. If you have any questions about data protection on third-party websites, please contact the provider of these websites.

10. Your rights

You have the right to request information from us about the personal data we have stored about you at any time (Art. 15 from the GDPR). This also applies to the recipients or categories of recipients to whom this data is forwarded and the purpose of the storage. In addition, you have the right, under the conditions of Art. 16 from the GDPR, to demand the correction and/or under the conditions of Art. 17 from the GDPR, the deletion and/or under the conditions of Art. 18 from the GDPR, the restriction of processing. Furthermore, under the conditions of Art. 20 from the GDPR, you may request data transmission at any time.

11. Your right to complain to a supervisory authority

Pursuant to Art. 77 from the GDPR you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, workplace or place of presumed infringement, if you consider that the processing of your personal data infringes the GDPR.

12. Your right to revoke your consent

If you have given us your consent to the processing of your personal data pursuant to Art. 6 para. 1 sentence 1 a from the GDPR, you have the right to revoke your consent at any time pursuant to Art. 7 para. 3 from the GDPR. The legality of the processing carried out based on the consent up to the revocation is not affected by the revocation.

13. Your right of objection

If we process your personal data to safeguard our legitimate interests pursuant to Art. 6 Para. 1 S. 1 f from the GDPR, you have the right pursuant to Art. 21 from the GDPR to object to data processing at any time for reasons arising from your situation; this also applies to profiling based on this provision. We will no longer process the personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

If personal data are processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.

If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

To exercise your right to object, please send an email to: support@iguaco.org

14. Provision of your personal data

The provision of your personal data is neither required by law nor by contract. You are not obliged to provide us with personal data. If you conclude a contract with us, certain personal data such as your address data are required for the conclusion of the contract. If you do not provide us with this data, we will not be able to conclude a contract with you.

15. Existence of an automated decision-making process

We do not use automated decision making or profiling.

16. Adaptation of the data protection declaration

This privacy policy is currently valid. Due to the further development of our website and in view of possible future changes to legal or official requirements, it may be necessary to amend the data protection declaration from time to time. The current version can be viewed on our website under the link “Privacy Policy”.

For information, revocations or objections regarding data processing, please contact us:
Iguaco LLC
Gumelenstrasse 13
8810 Horgen
Switzerland
Email: support@iguaco.org

Status: October 2019