Privacy Policy (valid from 24th May 2018 - 14th April 2019)

Dear Visitors, we thank you for visiting us. To ensure that you feel safe and comfortable when browsing our website(s), we would like to inform you about how we handle your personal data. This Privacy Policy describes how we collect, use, process, and disclose your information, including personal information, in conjunction with your access to and use of our website.

Data Controller

When this policy mentions “we,” “us,” or “our,” it refers to Jacobs University Bremen Alumni Association e.V., Campus Ring 1, 28759 Bremen, Germany, which is responsible for your information under this Privacy Policy (the “Data Controller”).

Storing of IP Addresses

Protecting your privacy is very important to us. We use information that we receive and store during your visit to our website exclusively for internal purposes and to improve the design of the website, including sub-pages. If necessary for the purpose of defending against attacks that impair the functionality of our website (hacker attacks, malware, denial of service attacks, spam), we may access your computer’s IP address for this purpose alone, which is stored by our telecommunications provider as a security measure for a period of seven days. After this period has elapsed, we will either delete or anonymize the IP address. The legal basis for this processing is Art. 6(1)(f) of the GDPR.

Usage Information

When you visit our website, we temporarily store usage information on our web server for statistical purposes in the form of a log in order to improve the quality of our website. This data record consists of:

• The page from which the file was requested
• The name of the file
• The date and time the file was accessed
• The quantity of data transferred
• The status of access (file transfered, file not found)
• The IP address of the computer accessing the file

We use this information to enable access to our website, to control and administer our systems, and to improve the design of our website. The data stored is stored in anonymized form. This means it is not possible to create personal user profiles based on this information. Data about individuals or their individual behavior is not collected.

User accounts

To become a member of the association, it is necessary to register a user account. Only registered users have access to all the functions available on our website. To set up a user account, you can supply the following optional or mandatory data:

• Your full name
• E-mail address
• Demographic Information, i.e.
• • Gender
  • Date of birth
  • Nationality
• User category, i.e. if you are a
• • Regular Alumni (former student)
  • Faculty or Staff Member
  • Friend Of The Association
• Membership Details, i.e.
• • Username and Password
  • @jacobs-alumni.de E-Mail Address
  • Selected Membership tier, one of
  • • Contributor
    • Patron
    • Starter
• Postal Address
• Social Media and related URLs, i.e
• • Facebook URL
  • Linkedin URL
  • Twitter URL
  • Instagram URL
  • Homepage URL
• Jacobs University College Affiliation
• Degree achieved at Jacobs, i.e.
• • Type of Degree
  • Graduation Class
  • Graduation Major
  • Comments
• Employment Information, i.e.
• • Employer
  • Position
  • Industry
  • Job Title
• Degrees achieved at other institutions
• Languages you speak
• Programming Languages you know
• Areas of Interest
• Payment Information, i.e.
• • Credit Card Number, expiration date and CVC or;
  • SEPA Bank Account Number (BIC) And Bank Account Owner

With the exception of your payment information and password, we store this data inside our membership database.

We use this data to provide you with access to the exclusive contents and functions of the restricted access areas, to ensure that you can be found through the website’s search function by other registered users (only alumni graduates, not associate members), using your work and home location (geolocation) if necessary, to contact you for networking purposes and enable other registered users (graduates) to contact you for that purpose, to inform you by e-mail, post or phone about events, fundraising campaigns and other subjects relating to Jacobs University Bremen and to settle accounts for the applicable membership fees.

We also use the above data for anonymous surveys, for example to enable us to create general profiles of the professional status or geographical location of our alumni.

Data Transfers to Third Parties

We transfer selected personal information for specific purposes to third parties, as described in detail in the following. We do not transfer any other of your personal data to third parties without your express consent.

Data Processing by Jacobs University

With your consent, we forward the data you have supplied to set up your user account to Jacobs University Bremen, with the exception of your payment data. Jacobs University Bremen uses your data within the scope of the consent you have granted

• to contact you itself for networking purposes
• and to inform you by e-mail or post about events, surveys, fundraising campaigns and other subjects relating to Jacobs University Bremen.

Only the Corporate Relations and Talent Management Department, the Executive Office, the Managing Director’s Office, SBU1, SBU2, SBU4 Business Solutions and the Dean’s Office at Jacobs University Bremen have access to your data. You are explicitly informed that your data is not intended for use by the Student Financial Services department. Neither JUBAA nor Jacobs University Bremen will disclose your data to any other third parties.

Data Transfer to Stripe Inc.

To enable processing of membership fess, we transfer a very limited set of information to our payment provider Stripe, Inc. This information is only used to process membership fees.

Please also see the Privacy Policy of Stripe Inc. ( https://stripe.com/de/privacy ) to read more details on how they ensure that your personal information is treated confidentially.

The exact information transmitted can vary on a case-by-case basis, however we transfer at most the following information about you:

• your full name, so that Stripe can identify who you are;
• your existing email address, so that Stripe can send you a receipt and contact you in case of problems;
• your selected membership tier, so that Stripe knows which amount to charge you for;
• the date and time of your membership, so that Stripe knows when to bill you;
• your selected payment method and payment details, so that Stripe knows how to charge you. This data includes
• • your credit card details, i.e. your credit card number, expiration date and optionally your CVV (depending on the card type); or
  • your SEPA bank account details, i.e. your bank account number (IBAN) and the owner of your Bank account.

The payment details are submitted directly from your browser to Stripe Inc. and the payment details are never stored by Jacobs University Alumni.

Data Transfer to Google

To provide you with an jacobs-alumni.de E-Mail address after you sign up, we transfer a limited set of information to Google. This information can vary on a case-by-case basis, however it never includes anything other than the following:

• your full name
• your selected username
• your existing email address, so that Google can send you an email with access details to your new E-Mail account
• your graduation year(s) and major(s) so that we can assign you to relevant mailing lists.

You can choose to provide more information directly to Google. Please see their privacy policy ( https://policies.google.com/privacy ) for details.

Cookies

We use cookies on our website. Cookies are small text files that can be stored and accessed on your device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored after each individual session. Cookies may contain data that make it possible to recognize the device used to access our site across multiple visits. In some cases, however, cookies only contain information related to certain settings that are not personally identifiable.

We use both session cookies and permanent cookies on our website. This processing is carried out on the basis of Art. 6(1)(F) of the GDPR and in the interest of optimizing or enabling the use of and adapting the appearance of our website.

You can configure your browser so that it informs you when cookies are being saved, thereby making the use of cookies more transparent. You can also delete cookies at any time via the corresponding browser setting and prevent new cookies from being saved. Please note that if you disable the use of cookies, our website may not display properly and some of its features may no longer be supported.

Google Analytics

We create pseudonymized user profiles with the help of Google Analytics to ensure that our website is designed to meet your needs. Google Analytics uses cookies that are stored on your device and can be accessed by us. This allows us to recognize and count returning visitors. This data is processed on the basis of Art. 6(1)(F) of the GDPR and Art. 15(3) of the German Telemedia Act (“Telemediengesetz”) and in the interest of knowing how often our website has been accessed by different users.

The information generated by the cookie pertaining to your use of this website is usually transmitted to and saved on a server operated by Google located within the United States. However, since we have activated IP anonymization on this website, your IP address will first be shortened by Google before the data is transferred outside of the European Union. Only in exceptional cases is the full IP address transferred to a Google server in the USA and first shortened there (whereby an appropriate level of data protection exists pursuant to Art. 45(1) of the GDPR through Google’s participation in the Privacy Shield program). In addition, we have entered into a data processing agreement with Google Inc. (USA) in accordance with Art. 28 of the GDPR. As a result, Google may only use this information strictly for the purpose of analyzing the use of our website for us and compiling reports regarding this website activity.

You can object to this processing at any time. To do so, please use one of the following options:

1. You can prevent cookies from being saved to your device using the respective setting in your browser software; we would like to explicitly state, however, that you may not be able to completely use all of this website’s features if you deactivate cookies.
2. Besides taking this step, you can prevent the data generated by the cookie related to your use of this website (including your IP address) from being sent to and processed by Google by downloading and installing the browser plug-in available here: ( https://tools.google.com/dlpage/gaoptout )

Your Rights as a Website User

When it comes to processing your personal data, the GDPR grants you certain rights as a website user:

1. Right of Access (Art. 15 of the GDPR):

You have the right to request confirmation as to whether personal data concerning you is being processed; where this is the case, you have a right of access to this personal data and to the information specified in Article 15 of the GDPR.

2. Right to Rectification and Right to Erasure (Art. 16 and 17 of the GDPR):

You have the right to immediately request the rectification of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.

You also have the right to request that personal data concerning you be erased immediately if one of the reasons listed in Art. 17 of the GDPR applies in detail, e.g. if the data is no longer required for the purposes for which it was collected.

3. Right to Restriction of Processing (Art. 18 of the GDPR):

You have the right to request a restriction of processing for the duration of a review if any of the conditions specified in Art. 18 of the GDPR have been met, e.g. if you have lodged an objection to the processing.

4. Right to Data Portability (Art. 20 of the GDPR):

In certain cases (which are outlined in detail in Article 20 of the GDPR), you have the right to obtain from us your personal data in a structured, standard, machine-readable format or to request the transfer of such data to a third party.

5. Right to Object (Art. 21 of the GDPR):

If data is collected on the basis of Art. 6(1)(f) of the GDPR (data processing on the grounds of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. If you make such an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

6. Right to Lodge a Complaint with a Supervisory Authority:

In accordance with Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. This right to lodge a complaint may particularly be exercised before a supervisory authority in the EU member state where you reside, work, or where you suspect that your rights have been infringed.

Future Changes To These Policies

In the future, we may need to change these policies. These may be, but are not limited to, the following:

• we may decide to add a new payment method;
• we may be required to do so by applicable law or;
• we may decide to offer an additional service.

Should changes to these terms occur, where possible, we will contact you with a copy of the new terms at least a month in advance of the new terms and conditions taking effect. We will contact you by either sending an email to your @jacobs-alumni.de email address, or by sending you a letter to your postal address.

Continuing to use any of our services, or services provided through us, (e.g. the membership portal, or your @jacobs-alumni.de account) past the time of the new terms and conditions taking effect, constitutes agreement to the new terms and conditions.

If you decide to not accept the new terms, you should contact us (via email to support@jacobs-alumni.de) to close your account and delete all personal information as far as possible.

Severability Clause

If a provision of this policy is or becomes illegal, invalid or unenforceable in any jurisdiction, that shall not affect:

• the validity or enforceability in that jurisdiction of any other provision of this Agreement; or
• the validity or enforceability in other jurisdictions of that or any other provision of this Agreement.

Data Protection Officer

Our data protection officer will be happy to provide you with information or suggestions on the topic of data protection:

Stefan Rustler
Letzigraben 101
8003 Zürich
Email: srustler@jacobs-alumni.de
Phone: +41-792648141