Privacy policy

For the KTUR InnovationX website

Preamble
1. The University of Basel considers the protection of personal data to be of the utmost
  importance. Personal data is any data that can be related to you personally, e.g. name, address, e-mail, telephone number, photograph, user behavior, IP address, etc.
2. With this data protection declaration, we would like to inform you which data is collected, processed, disclosed and for what purpose from you as a user of the KTUR InnovationX website by the University of Basel, and which measures the University of Basel takes to ensure the security of this data. In addition, we inform you of your rights through this data protection declaration.
On what legal basis does the University of Basel process personal data?
1. Personal data is always processed in accordance with the Information and Data Protection Act of the Canton of Basel-Stadt (IDG), which applies to the University of Basel, and possibly also in accordance with the Swiss Federal Data Protection Act (DSG)
2. Darüber hinaus beachtet die Universität Basel die gegebenenfalls anwendbare Europäische Datenschutzgrundverordnung (DSGVO) und gibt für diesen Fall, gemäss Art. 13 Abs. 1 lit c DSGVO, jeweils die entsprechende Gesetzesgrundlage an.
What personal data does the University of Basel process and for what purpose?
1. The use of certain services on the KTUR InnovationX website, in particular when logging in, filling out contact forms or registering, may require the collection, processing and long-term storage of personal data such as name, address, telephone number or e-mail address.
2. We process this data in accordance with Art. 9 of the Information and Data Protection Act of the Canton of Basel-Stadt (IDG) and the corresponding university regulations.
3. If and insofar as the European Data Protection Regulation (GDPR) applies, we process the data:
  - on the basis of legal requirements (Art. 6 para. 1 lit. c GDPR) or in the public interest (Art. 6 para. 1 lit. e GDPR)
  - on the basis of your consent (Art. 6 para. 1 lit. a GDPR)
  - for the fulfilment of contractual obligations and the implementation of corresponding pre-contractual measures (Art. 6 para. 1 lit. b GDPR)
  - to protect the legitimate interests of us or of third parties (Art. 6 para. 1 lit. f GDPR)
  - to protect the vital interests of you or another natural person (Art. 6 para. 1 lit. d GDPR)
4. You can revoke any consent you may have given us for certain services at any time with effect for the future. Personal data that has already been collected will be deleted if it is no longer required for the purposes for which the data was collected. Instead of deletion, the data will be blocked if there are legal or contractual reasons for deletion.
5. If you would like us to delete your personal data completely, please contact: ktur@unibas.ch.
Why are cookies used?
1. Cookies are small text files that are transferred from our server or the server of a third party to the user's browser and stored on your terminal device. This automatically provides us with certain data such as the IP address, browser used, operating system and your connection to the Internet. The use of cookies increases the user-friendliness and security of the website.
2. You can use your browser settings to see which cookies have been set by the KTUR
  InnovationX website and delete them if necessary.

What access data does the University of Basel process (collect, save, etc.) when you use the KTUR InnovationX website and for what purpose?
1. for security reasons, e.g. in order to be able to clarify cases of misuse and to safeguard our network infrastructure, so-called access data are automatically collected by the content management system Drupal when the KTUR InnovationX website is called up, and are stored in a web server log file on servers of the cloud hosting provider Digital Ocean for a period of 7 days.
2. In the event of an attack on our network infrastructure, longer-term storage may be necessary for reasons of evidence and for possible civil or criminal prosecution of the attacker.
3. The following access data is collected:
  - IP address
  - Requested URL path
  - Timestamp of the request
  - Browser type and version used
  - Operating system
  - User ID (only for users who are logged in)
Does the KTUR InnovationX website use web analysis tools?
1. The web analysis component Google Analytics is integrated on the KTUR InnovationX website; Google Analytics is operated from the provider's cloud.
2. Web analysis (so-called tracking) is the collection and evaluation of data on the behaviour of users of the website. A web analysis tool collects, among other things, data on which website a person came to a website from (so-called referrer), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. Web analysis is used to optimise a website.
3. To deactivate tracking, you must activate the so-called Do Not Track setting in your browser settings. Google Analytics respects this option.

Which third-party services does the University of Basel use?
1. The following third-party services are integrated into the InnovationX Upper Rhine website:
  1. WAAT
  2. Open StreetMaps
  3. Slack
2. Notes on WAAT:
  - WAAT Switzerland GmbH is an external website operator (provider), a product-focused digital agency helping deliver innovation projects. Cross-functional team of product owners, developers, engineers, designers and communications experts spread across Europe that use agile and lean methods to support through every stage of the development process, from concept to reality.
3. Notes on the Open Street Maps service:
  - for the purpose of displaying an interactive map and providing travel directions, we integrate the maps of the OpenStreetMap service (URL: https://www.openstreetmap.org), which are offered by the OpenStreetMap Foundation (OSMF) on the basis of the Open Data Commons Open Database License (ODbL).
  - the OpenStreetMap privacy policy can be found at: https://wiki.osmfoundation.org/wiki/Privacy_Policy.
4. Notes on the Slack service:
  - The platform offers the possibility to reach KTUR partners via Slack. A button allows registered users to compose a message that is sent unidirectionally to the KTUR Slack channel. The message contains the name, surname and email from the registered user's profile. A drop-down menu can be used to select which KTUR partner (among universities and colleges) the message is addressed to. The text is entered via a free-field form.
  - The Slack privacy policy can be found at: https://slack.com/intl/en-gb/trust/privacy/privacy-policy
which social media plugins are integrated?
1. Social media plugins from the providers listed below are used on the KTUR InnovationX website. You can recognise the plugins by the fact that they are marked with the corresponding logo. Information, which may also include personal data, may be sent to the respective social media provider via these plugins and may be used by the provider.
2. We prevent the involuntary and unintentional collection and transmission of data to the
  respective social media provider by integrating the Shariff plugin. Shariff prevents the social media plugins integrated on the KTUR InnovationX website from automatically establishing a connection to the respective server of the social media provider when visiting the KTUR InnovationX website and its subdomains. Direct contact between the social media provider and the user of the KTUR InnovationX website is only established by clicking on the respective social media button.
3. The KTUR InnovationX website integrates the following social media plugin:
  - LinkedIn
How does KTUR InnovationX handle its forms?
1. Through the forms used on KTUR InnovationX ("Project-Input" and "Event-Submission" form), in addition to general information (e.g. name of academic institution or project title) and personal messages, personal data about the users can also be collected (surname, first name, e-mail, telephone number, profile picture, profession). This data is stored on Digital Ocean servers; the storage period is 7 days.
2. Details of the "Project Input Form":
  1. Submitter: first and last name, role or professional profile, academic affiliation, email address, phone number.
  2. Project details: title, leading scientific academic institution.
  3. Innovator(s): first and last name, role or professional profile, academic affiliation (incl. department or research group), email address, telephone number.
3. Details of the "Event Submission Form":
  1. Contact form: first and last name, email address, subject.
is your data secure at the University of Basel?
1. The University of Basel uses technical and organizational security measures to ensure that the data it collects and processes via the KTUR InnovationX website,
  1. remains confidential and is protected from accidental or unlawful access, alteration or disclosure, and from loss or destruction; and
  2. an access authorisation to the data is granted exclusively according to the principle of necessity (need-to-know) to those persons who need to access the personal data due to their function and task.
2. The measures to be taken depend on the type of information, the type and purpose of its use and the respective state of the art.
is the website of the University of Basel encrypted?
1. The KTUR InnovationX website is encrypted.
2. Encryption ensures that the web page called up (the information requested) also comes from the server it claims to be. Unencrypted data traffic can be manipulated by third parties.
who is liable for links to websites of other providers?
1. The Innovation Office of the University of Basel has not checked websites that are connected via hyperlinks on the KTUR InnovationX website nor the displayed RRS feeds and accepts no liability for their content or for the products, services and other offers they contain.

What rights do you have as subject of the data?
1. Users of our website KTUR InnovationX and its sub-domains, through which we process personal data, have the right at any time, within the framework of the applicable legal provisions, to:
  - Information as to whether personal data is being processed by InnovationX Upper Rhine.
  - Information about any stored data.
  - Restriction of the processing of the data.
  - Data transfer, if and insofar as the GDPR is applicable.
  - Correction, blocking or deletion of their data.
  - Revocation of any consent given.
  - Objection to the processing of your personal data.
2. If you have any questions, please contact ktur@unibas.ch.
can the privacy policy change?
1. The University of Basel reserves the right to adapt the data protection statement at any time.
2. The current status of this data protection declaration is 8 February 2022.
Who is responsible for the InnovationX Upper Rhine website and whom can you contact if necessary?
1. The person responsible within the meaning of the Basel-City Information and Data Protection Act § 6 is:
  
  University of Basel
  Innovation Office
  Kreuzstr. 4
  4123 Allschwil
  ktur@unibas.ch
2. The data protection officer is:
  Danielle Kaufmann lic iur.
  University of Basel
  Data Protection
  Petersgraben 35
  P.O. Box
  4001 Basel-City
  datenschutz@unibas.ch