1. General Information
for all users of the website,
as an addendum to the General Terms and Conditions as the basis for all concluded cooperation agreements (companies that have a validly concluded cooperation agreement with HackZurich are referred to below as 'Company' or 'Companies'),
for active users of the HackZurich website, who apply via the HackZurich website for sessions & events (hereinafter referred to as 'Talent').
HackZurich processes your Personal Data in compliance with the data protection laws of Switzerland and – if and insofar applicable – the European General Data Protection Regulation (hereinafter referred to as GDPR). To the extent that the GDPR is applicable, we process personal data only with your consent, for the performance of a contract or for the purposes of the legitimate interests pursued by us or by a third party. Justifiable interests are in particular the ensuring of the functionality and further development of the website, improvement and marketing of the services provided, information security, etc.
HackZurich is a platform operated by the company Digital Festival AG (hereinafter referred to as 'HackZurich', 'Digital Festival', 'we', 'our').
Digital Festival AG
3. What Personal Data is processed by HackZurich?
'Personal Data' means all information relating to an identified or identifiable natural person ('Data Subject'), such as name, location data or an online identifier.
Personal Data is collected passively (for example when visiting the website) or actively (when registering or logging in to the website).
4. Passive data processing
Websites operated by HackZurich passively collect data from visitors. If you are navigating through content or interacting with content on our website, any access to our website will result in usage data being transmitted through the respective internet browser and stored in log files, the so-called server log files.
The records that are stored contain the following data: date and time of the retrieval, name of the visited page, IP address, referrer URL (origin URL from which you came to the website), the amount of data transferred, product and information of the browser version used.
We create anonymous statistics to track the number of visitors to our websites (traffic) or for billing purposes to measure the number of clicks received from cooperation partners, but we do not create individual user profiles or associate them with personally identifiable information. The collection of data is made possible using cookies and tracking pixels.
Cookies and tracking pixels do not harm your computer and do not contain viruses.
A cookie is a small text file from a web page stored on your computer. Thus, a user who uses his/her computer can be clearly identified and information about the surfing behaviour can be stored so that between two connections of the user, the previous actions that are of interest for the website can be cached. A cookie can be used to customize websites individually for the user.
At any time, you can disable the use and storage of cookies through your browser settings, restrict them to certain websites, or set your browser to notify when a cookie is about to be saved. You can also delete cookies at any time.
The HackZurich services use so-called 'persistent cookies' after logging in (with username and password or via an e-mailed login link), with which users can be identified. These persistent cookies will be permanently stored in the browser of your computer until they expire automatically. The persistent cookies will then contain an identifier of your session in encrypted form. You can delete these cookies at any time in the browser of your computer. Please note, however, that the use of HackZurich services is not fully possible if persistent cookies are rejected.
4.2 Tracking Pixels
Tracking pixels are also called counting pixels or pixel tags. A tracking pixel is a 1x1 pixel graphic. With the help of a tracking pixel user activities can be tracked or understood.
The data generated in this way will be used to improve HackZurich's website, make it more user-friendly and adapt services to the most common browser types and versions.
Through Tracking Pixel, a direct link to the servers of HackZurich's partners (third party vendors) will be made and information will be transmitted when visiting the website.
The transmitted information is not personal and HackZurich itself cannot associate this information with any individual user profiles or personally identifiable information. If visitors to the website have created a customer account or personal profile with one of our partners (third-party providers), it is possible for a third-party provider (e.g. Facebook) to assign the information transmitted by us to a specific user. Users can independently limit the assignment of their Personal Data by third-party providers to whom they are registered or object to such assignment.
Other ways to limit the functionality of tracking pixels are, for example, to set the browser and e-mail settings as restrictive as possible so that external graphics are loaded only upon permission and HTML e-mails are not supported. Also, corresponding firewall settings can have this effect. Furthermore, some browser extensions cause tracking pixels to become visible. Anonymous surfing with the Tor-Browser or the use of proxy servers prevent the download of the pixel count.
In order to prevent the processing of further user data such as browser type or operating system, the support of scripts in the browser can be switched off. However, in this case various other features on the Internet may not work.
5. Active data processing
5.1 For Talents:
5.1.1 Purpose of processing / Consent
Talents who wish to attend talent sessions must register. All application data is stored securely.
HackZurich uses Talent's Personal Data:
for communication purposes, e.g. answering Talents' questions
for the processing of the application, e.g. screening of applications, examination of applications for completeness, pre-selection of applications according to selection questions defined by Companies
for the coordination of the talent sessions and 1to1s with the Company or its employees and other Talents, who join the same session
for making the Personal Data available to Companies, thus allowing the application processing and taking up contact
for the technical administration of the application process
to optimize the HackZurich performance marketing solution
for statistical purposes and analyses
By registering with HackZurich, the Talent agrees that:
HackZurich may process Talent's application data and especially forward it to the Company or its employees and other Talents, who will join the same session, for the above-mentioned purposes.
The application data is stored until Talent explicitly advises us to delete it
Please take note of your rights in this regard under section 7
5.1.2 Talent's Personal Data
As part of the application, the following data is collected as part of the application process:
Place of living
What kind of opportunities they are looking for
URL to the LinkedIn profile or upload of a CV of the Talent
This data is necessary to attend HackZurich talent sessions. For the protection of Personal Data, we reserve the right to request additional information in case of reasonable doubt as to the identity of the natural person making the application in accordance with the identity of the person concerned.
In order to avoid possible conflicts, talents should not submit information that violates the rights of third parties. These rights include, for example, copyright, press law or general rights of third parties.
5.1.3 Forwarding of applications, application process, talent management
Talent's application data is transmitted to the Company and its employees who join the talent session via e-mail.
5.2 For Companies and their employees:
HackZurich processes only Personal Data that is made available by the Company or an authorized employee, respectively and that is necessary for the fulfilment of the contract with HackZurich. This includes the processing of the Personal Data of the employees who join the HackZurich talent session with the Talents, in particular the transfer of the employee's name, e-mail address and URL to the employee's LinkedIn profile to the Talents who join the HackZurich. The Personal Data is deleted as soon as it is no longer necessary to achieve the purpose of its collection, insofar as this does not conflict with a statutory retention requirement.
In regular intervals, HackZurich informs by e-mail about updates to its products and services (for example, innovations in the Dashboard), as well as other customer-related topics.
E-mails will be sent to the Company's contact details on the legal basis of an existing business relationship (current customers) or, in the case of former customers, if there has been a business relationship within the last 2 years.
Companies can decide with each e-mail whether they want more information from HackZurichh. A deregistration is possible via an unsubscribe link ('unsubscribe'), which is sent in each e-mail or a short, informal e-mail to email@example.com
6. Place of storage and processing of Personal Data
For the processing and storage of your Personal Data, we use Google Cloud Platform as hosting server. Google Cloud Platform is a part of Google Cloud, a subsidiary of Google LLC. The servers and databases provided by Google Cloud are located in Frankfurt am Main, Germany, and are subject to the regulations and provisions of the GDPR.
7. Data Subject's rights
You may request information at any time as to whether and which Personal Data concerning you are processed and/or stored by us. In order to protect stored Talent Personal Data from unauthorized access by third parties, only requests that are sent from the same e-mail address that the Talent deposited when registering for his/her HackZurich session will be processed.
Furthermore, you have a right to rectification, erasure, restriction of processing, the right of objection and – if and insofar as the GDPR is applicable – the right to data portability. Talent may request the deletion of his/her stored Personal Data at any time. In order to protect stored Talent's Personal Data from unauthorized access by third parties, only requests that are sent from the same e-mail address that the Talent used when registering will be processed. You can withdraw your consent to the processing of Personal Data at any time with effect for the future.
If and insofar as the GDPR is applicable, you have a right of appeal to a competent supervisory authority.
HackZurich is only responsible for Personal Data that is used and stored in the database of HackZurich. For all Personal Data that was made available to a Company in connection with a session application, Talents may first contact HackZurich who will take care of forwarding the request to the Company. For all inquiries according to this section, please send an e-mail to firstname.lastname@example.org
8. Cross-border disclosure
Persons outside of Switzerland or the European Economic Area (EEA) may have access to your Personal Data or your Personal Data may be transferred outside of Switzerland or the EEA and/or stored at a location outside of Switzerland and/or the EEA, in which the applicable data protection standards may be lower than those in Switzerland and/or the EEA. However, we will apply the same data protection measures as applied within Switzerland or the EEA.
The European Commission has recognised that Switzerland guarantees the same protective measures as those set out in EEA data protection legislation at all times, meaning that no further measures are necessary when exporting Personal Data to or from an EEA country to Switzerland. In countries that are not recognised in this way, we will ask for your permission to transfer your data, or we will transfer your data in accordance with the contractual conditions approved by the European Commission, which impose equivalent data protection obligations upon the recipient himself, unless we are entitled to make such transmissions without the relevant formalities according to applicable data protection legislation.
9. Use of Google services: Google Analytics, Google Ads
HackZurich uses the following products / services of Google LLC (hereinafter referred to as 'Google') on the website and for the processing of Personal Data, to track and analyse user behaviour and conversion rates:
Such services set impersonal cookies onto our domain
9.1 Google Analytics:
The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there. However, IP anonymization is active on this website and, therefore, your IP address will be shortened by Google within member states of the EEA. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened only there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide other services related to website usage and internet usage to the website operator. You can find out here in which way and to what extent Google processes data.
You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all functions of this website in full. In addition, you may prevent the data collection by Google generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link:
For more information about Terms of Service and Privacy of used Google products, please visit:
9.2 Google Ads
As a user, you can use settings to manage the Google ads you see and opt out of Ads Personalization at https://www.google.com/ads/preferences/?hl=en. You can also manage cookies in your web browser.
10. Use of other web analytics
HackZurich also uses Mixpanel, Inc. in addition to Google products to continually improve its website and its services.
Mixpanel, Inc.'s ('referred to as 'Mixpanel') is a business analytics service company. It tracks user interactions with web and mobile applications and provides tools for targeted communication with them. Data collected is used to build custom reports and measure user engagement and retention. In no case can this data be used to personally identify you as a visitor to our websites.
11. Use of Newsletter services: Mailchimp
On the website of HackZurich Talents may subscribe to HackZurich newsletters on latest platform features, partner companies and other updates on the platform as well as to promotion e-mails. HackZurich uses Mailchimp to send and manage email campaigns across channels and serve advertisements. By subscribing, Talent agrees to the transfer of his/her email address to Mailchimp in the US and to the processing of information about the use of the newsletter by the Talent. In order to optimize the newsletter for the Talent, he/she above all consents to our evaluation, with which we measure how often the newsletter is opened and which links Talent clicks. Talents may revoke his/her consent at any time with effect for the future.
Newsletters are sent on the basis of the Talent's consent or, if consent is not required, on the basis of our legitimate interests in direct marketing and for the purpose of using a user-friendly and secure newsletter system that serves our business interests and meets Talent's expectations. HackZurich will store Talent's Personal Data as long as subscribed and deletes Talent's Personal Data within 12 months after his/her withdrawal the latest.
As a Talent, if you no longer want to be contacted by HackZurich through Mailchimp's service, please unsubscribe directly from our newsletter or contact HackZurich directly at email@example.com
12. Use of Facebook Ads, Instagram Ads and LinkedIn Ads
For the purpose of talent marketing and optimization of the services offered, we use Facebook social networking services as well as LinkedIn. In particular, we use 'Facebook Ads' and 'Instagram Ads' by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland as well as 'LinkedIn Ads' by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This allows for audience-based advertising, re-targeting, and conversion tracking for online advertising.
Similarly, LinkedIn targets ads to its members and visitors both on and off their services directly or through a variety of partners, using the following data, whether separately or combined:
Data from advertising technologies on and off their Services, pixels, ad tags, cookies, and device identifiers;
Member-provided information (e.g., profile, contact information, title and industry);
Data from your use of their Services (e.g., search history, feed, content you read, who you follow or is following you, connections, groups participation, page visits, videos you watch, clicking on an ad, etc.)
Information from advertising partners, vendors and publishers; and
Information inferred from data described above (e.g., using job titles from a profile to infer industry, seniority, and compensation bracket; using graduation dates to infer age or using first names or pronoun usage to infer gender; using your feed activity to infer your interests; or using device data to recognize you as a Member).
LinkedIn will show you ads called sponsored content which look similar to non-sponsored content, except that they are labelled as advertising (e.g., as "ad" or "sponsored"). If you take a social action (such as like, comment or share) on these ads, your action is associated with your name and viewable by others, including the advertiser. Subject to your settings, if you take a social action on the LinkedIn Services, that action may be mentioned with related ads.
LinkedIn adheres to self-regulatory principles for interest-based advertising and participates in industry opt-outs from such ads. This does not opt you out of receiving advertising; you will continue to get other ads by advertisers not listed with these self-regulatory tools. If you are not a LinkedIn member, you can opt-out of LinkedIn's and its service providers' tracking of visits to LinkedIn for targeted advertising purposes by clicking on: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. If you are a LinkedIn member, please go to the Ads Settings page to manage your preferences.
For more information on the collection and use of your data by LinkedIn, as well as your rights in this regard and ways to protect your privacy, please refer to https://www.linkedin.com/legal/privacy-policy.
Should any errors or error messages occur during the visit to the website or the application process, already recorded user and Talent data will be cached.
By using an error-tracking tool, HackZurich ensures that a smooth and secure use of the website and the online services is possible.
14. The security of your data
We take precautions to protect your data and to prevent abuse from the outside. HackZurich uses measures such as encryption (SSL encryption) of user data. SSL encryption is active when the address begins with 'https: //'. Data transfer is then protected by SSL (Secure Socket Layer) with at least 128-bit encryption, which prevents third parties from reading your data.
We secure our website and other systems by commercially reasonable technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons.
As of: April 24, 2020