Privacy Policy

1. Introduction

Welcome to St. Gallen Markets Society (SGMS). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Name and email address
• University affiliation (University of St. Gallen)
• Account credentials (encrypted passwords)
• Profile information you choose to provide

2.2 OAuth Authentication

When you sign in using Google or Apple, we receive basic profile information including your name and email address. We do not have access to your social media passwords.

2.3 Usage Data

We automatically collect certain information about your device and how you interact with our platform, including IP address, browser type, pages visited, and access times.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide access to program materials and events
• Send you important updates and announcements about SGMS programs
• Communicate event reminders and schedule changes
• Improve our platform and user experience
• Ensure security and prevent fraud
• Comply with legal obligations

4. Email Communications

You will receive:

• Essential emails: Account verification, password resets, and critical program updates
• Optional emails: Announcements and event reminders (you can manage these preferences in your dashboard)

You can unsubscribe from optional communications at any time using the unsubscribe link in our emails or by adjusting your notification preferences in your dashboard.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With your consent: When you explicitly agree to share information
• Service providers: Third-party vendors who help us operate our platform (email services, hosting providers)
• Legal requirements: When required by law or to protect our rights
• University of St. Gallen: For program coordination and student verification purposes

6. Data Security

We implement industry-standard security measures to protect your information:

• Encrypted password storage using bcrypt hashing
• Secure HTTPS connections for all data transmission
• Email verification tokens with SHA-256 hashing
• Rate limiting to prevent brute-force attacks
• Regular security audits and updates
• Secure authentication cookies with httpOnly and sameSite flags

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account at any time by contacting us at info@sgms-hsg.ch.

8. Your Rights

Under applicable data protection laws (including GDPR and Swiss Data Protection Act), you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability
• Withdraw consent at any time

9. Cookies and Tracking

We use essential cookies to maintain your session and remember your preferences. We do not use third-party advertising cookies. You can control cookies through your browser settings.

10. Children's Privacy

Our services are intended for university students and are not directed to individuals under 16 years of age. We do not knowingly collect information from children.

11. International Data Transfers

Your information may be transferred to and processed in countries other than Switzerland. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our platform. Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: