General Information on the Processing of Personal Data

The following data protection information applies to the online presence of the University of Liechtenstein (www.uni.li) and to personal data collected via this website. For websites operated by other providers, which may be linked to from our site, the respective privacy notices and policies of those providers apply.

Each time our website is accessed or files are transmitted, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected:

• Your consent status or the withdrawal of your consent
• Your IP address
• Information about your browser
• Information about your device
• The date and time of your visit to our website
• The content accessed during your visit

• A universally unique identifier (UUID) of the website visitor who clicked on the banner cookie

   

Purposes of data processing:

• Managing and documenting your consent
• Ensuring system stability and operational security
• Optimizing our website

• Performing statistical analysis

   

Legal basis:

The processing of this data is based either on a legal obligation pursuant to Art. 6(1)(c) GDPR or on our overriding legitimate interests in accordance with Art. 6(1)(f) GDPR, for example, to ensure the stability and operational security of the system.

You can contact us via various means, such as the email addresses or contact forms provided on our website. In doing so, the University collects the following personal data:

• Name and contact details (e.g. salutation, first and last name, address, email address, telephone number)

• Any additional personal data necessary for handling the specific inquiry

   

By contacting us, we process personal data for the following purposes in particular:

• To identify you in relation to your inquiry
• For correspondence with you

• For handling your request

   

You may provide us with data that also relates to other individuals. If you do so, we understand this as confirmation that the data is accurate and that you are authorized to provide it. Since we often do not have direct contact with these third parties, we kindly ask you to inform the affected individuals about our processing of their data (e.g. by referring them to this privacy notice).

Depending on the circumstances, your data is processed on the basis of your consent (Art. 6(1)(a) GDPR), for the initiation or performance of a contract (Art. 6(1)(b) GDPR), or based on our overriding legitimate interest (Art. 6(1)(f) GDPR).

Usually the data collected in this context is not transmitted to any external recipients. Your data will be stored by us only for as long as necessary to fulfil the purposes and tasks stated above.

We use cookies on our website. These are files that your browser automatically stores on your device (laptop, tablet, smartphone, etc.). This allows us to distinguish individual visitors. These text files may contain different types of information, depending on their intended purpose.

When you access our website, you are generally given the option to activate or deactivate certain categories of cookies via a button displayed in your browser. There, we also provide further information about the cookies, such as how long they are stored and what type of information they contain. In addition, you can configure your browser settings to block certain cookies or similar technologies, or to delete cookies and other stored data. Further information can be found in your browser’s help section (usually under the keyword "privacy").

Please note, however, that deactivating cookies may result in not being able to use all the functions of our website.

Cookies on Our Website

The cookies used on our website can be classified into different categories, depending on their purpose. For some of these categories, we require your explicit consent. To obtain and properly document your valid consent to the use and storage of such cookies, we use the service CookieScript. This technology is provided by Objectis Ltd., Laisves st. 60, LT-05120 Vilnius, Lithuania. Website: https://cookie-script.com/. CookieScript is used to obtain the legally required consent for the use of cookies. The legal basis for this is the legal obligation under Article 6(1)(c) GDPR or our legitimate interest pursuant to Article 6(1)(f) GDPR (e.g. in using an efficient and user-friendly service).

Required cookies:
These are necessary to ensure the proper functioning of our website. They are used, for example, to store language preferences, your consent status, the session status, user login management, or to ensure security. The processing of these cookies is based on our legitimate interest pursuant to Article 6(1)(f) GDPR.

Statistics cookies:
Statistics cookies collect data about visitor usage behavior, such as the duration and frequency of website visits, error messages, loading times, the order of visited pages, or search terms used. Based on this data, we can measure and improve our performance. The processing of personal data for these purposes is based on your consent in accordance with Article 6(1)(a) GDPR.

Third-party marketing cookies:
Cookies and similar technologies are often used not only for functionality but also for the marketing purposes of third-party providers (e.g. the "YouTube" service provided by Google). These cookies enable third parties to identify you not only on our website but also to associate data from other services or websites that also cooperate with these third parties. The aim of such providers is often to create a profile of you in order to deliver personalised advertising and to collect data on the effectiveness of their ads (targeting). Please note that if you are registered or logged in with the respective provider, this usage data can be directly associated with you. The processing of personal data for these purposes is based on your consent in accordance with Article 6(1)(a) GDPR.

Functional cookies:
These services provide third-party functionalities for our website. These do not serve the marketing or targeting interests of the external providers, but solely the provision of functionality. The legal basis for this data processing is your consent under Article 6(1)(a) GDPR.

CookieScript:
To obtain your data protection-compliant consent for the storage of certain cookies in your browser and to document this in accordance with legal requirements, we use a cookie consent management service. For our website, we use the CookieScript service, a technology provided by Objectis Ltd. (Laisves st. 60, LT-05120 Vilnius, Lithuania).

This service is used to save your cookie preferences and implement them accordingly during your visit to our website. In particular, the following data is processed:

• Your consent or withdrawal of consent
• Time and scope of the consent
• A randomly generated anonymous ID with information about the browser used, the device, and the IP address

The legal basis for using this service is Article 6(1)(c) GDPR (fulfilment of a legal obligation to obtain consent) and Article 6(1)(f) GDPR (legitimate interest in providing a user-friendly and legally compliant implementation of cookies and services).

Further information about data protection at CookieScript can be found at: https://cookie-script.com/.

Overview table of cookies used on our website:
Each cookie is valid for a defined period of time and is then deleted by your browser. An overview of the cookies set by our website and managed via the cookie banner can be found in the following table.

Additional cookies may also be set during user login as part of the authentication process with Microsoft Entra ID. This online service is required when secure and identity-protecting user authentication is carried out via Microsoft 365 or Azure. A current overview of the cookies used in this context can be found at the following link.

Cookies from External Service Provider Websites

In addition to our own website, we also use services provided by external third parties that are not integrated or embedded into our website. This means that you are generally redirected to an external website via a link, which is outside of our responsibility. Such services may include, for example, Microsoft Bookings or Microsoft Forms, which are used for appointment scheduling or surveys. If you wish to use these external services, you must accept the associated processing of your personal data and thus the use of the corresponding cookies.

Overview table of cookies used by external service providers:

This website uses the open-source web analytics service Matomo by InnoCraft Ltd, New Zealand, to analyse traffic and reach. This allows us to understand how the website is used and to continuously improve and further develop our online presence and public services.

For purely statistical analysis, Matomo processes the following data: IP address of the requesting computer (which is anonymised before analysis), geographic location, browser type, language settings, screen resolution, operating system, time of visit, time zone, duration of visit, accessed URLs with page titles, downloaded files, content loaded during the visit (e.g. images, JavaScript or CSS files), and the frequency of visits to the website.

The Matomo software is configured in such a way that 2 bytes of the IP address are masked before any processing takes place. As a result, a direct association with the accessing device is no longer possible when analysing the data.

The statistical analysis is limited to the visit of individual pages. It is technically not possible for us to track website visitors across different university websites or over multiple days using Matomo. No profiling of visitors takes place through Matomo. The data collected with Matomo is not passed on to third parties and is not used for any other purposes – in particular, it is not used for performance or behavioural monitoring of website users. Further information on Matomo can be found under Configure Privacy Settings in Matomo. Die Datenschutzerklärung von Matomo finden Sie unter Matomo Privacy Policy.

Our website includes videos provided by the YouTube platform. YouTube is a video portal operated by Google LLC in the United States. The contact details of the providers, who also act as data recipients, are as follows:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (responsible for data processing within the European region)
• YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA

• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (parent company: Alphabet Inc.)

   

A contact option is available at: https://www.youtube.com/t/contact_us.

YouTube is a social media platform that allows users to upload, view, rate, and comment on videos free of charge. In order to embed and display a video on our website, YouTube provides a code snippet which we integrate into our web pages. The purpose is to offer an optimal user experience, including the visual presentation of video content.

When you visit a page on our website that contains an embedded YouTube video, YouTube sets a cookie that stores your IP address and the URL of the page you accessed. If you are also logged into your YouTube account, YouTube may directly associate your interactions on our website with your user profile through the use of cookies. Additionally, even without cookies or a user account, Google can generate a usage profile using technologies such as device fingerprinting.

Regarding the categories of data, technical data is processed (e.g. screen resolution, internet service provider, session duration, browser data, operating system or device information, bounce rate, or location data). In addition, your activity data is linked to your profile, such as ratings, shared content, playlists, and interactions with advertising content.

The data processed by the provider is stored on various Google servers, most of which are located in the United States. Google’s data centers can be viewed here: https://datacenters.google/. This global distribution of data facilitates faster access worldwide and provides improved protection against tampering and misuse.

As for deletion periods, Google applies different retention policies depending on the data category. Content in “My Activity,” photos, or documents stored in your personal Google account is only deleted if you delete it manually. However, automated deletion of location and activity data can also occur based on your chosen settings, typically after 3 to 18 months. For information on the deletion of cookies set by Google, please refer to the overview table in this privacy notice or the cookie banner.

The following cookies are stored in your browser when you view our YouTube videos and are logged into your YouTube account at the same time: YSC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, __Secure-ROLLOUT_TOKEN, SOCS, NID, AEC, PREF, DV, __Secure-ENID, __Secure-YEC.

The legal basis for data processing associated with YouTube is your consent in accordance with Article 6(1)(a) GDPR. Please note that personal data may be transferred to a third country. Google is an active participant in the EU-US Data Privacy Framework, which ensures a level of protection comparable to that within the EU/EEA area based on the adequacy decision of the European Commission (Article 45 GDPR). Further information on Google’s privacy policies can be found at: https://business.safety.google/.

We use the online map service “Google Maps” on our website in order to display interactive maps and provide directions. Google Maps is a map service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. For Google services within the EU/EEA, the responsible entity is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

To enable Google Maps to offer its services as intended, personal data must be collected and stored. This includes location data, content data (e.g. search queries), activity or usage data (e.g. interest in content, places, access times), and meta/communication data (e.g. device information, IP address). Furthermore, it should be noted that Google creates and analyses a usage profile of you based on this data. This occurs regardless of whether you are logged into another Google service. If you do have an account with another Google service and are logged in, the collected data may be linked to that account. If you do not want this linkage to your user profile, we recommend logging out of any Google services before using this service.

The following cookies may be stored in your browser when using Google Maps while not being logged into a Google account: NID, AEC, SOCS, __Secure-ENID. Further information about each of these cookies is available via our cookie banner. The University of Liechtenstein processes the personal data described above based on your consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Please also note that Google LLC processes the collection, storage, and analysis of your personal data on the basis of legitimate interest pursuant to Article 6(1)(f) GDPR. This is primarily done for the purpose of displaying personalised advertising, conducting market research, and designing Google websites in a user-oriented manner. You have the right to object to the creation of such a user profile. However, since this data processing falls under Google's responsibility, you must contact Google directly in order to exercise your right to object.

If you wish to prevent the future transmission of your personal data to Google as part of using Google Maps, you also have the option to completely disable the Google Maps web service by deactivating JavaScript in your browser. Please note, however, that if you do so, you will no longer be able to use the Google Maps functionality on our website.

Please also be aware that using Google Maps involves the transfer of your personal data to a third country (USA). Google is an active participant in the EU-US Data Privacy Framework, which ensures a level of protection comparable to that within the EEA based on the European Commission's adequacy decision (Article 45 GDPR). Further information on Google’s data protection practices can be found at the following link: https://business.safety.google/intl/policies/privacy/.

Our website offers the possibility to browse various reports, e-papers, and other publications directly in your browser (e.g. annual reports of the University of Liechtenstein). For this purpose, we use the publishing service Issuu. The operator of this service is Issuu Inc., 131 Lytton Ave, Palo Alto, CA 94301, USA. Their privacy notice can be accessed at: issuu.com/legal/privacy.

Issuu is only activated if you have given your consent via our cookie banner. The legal basis for processing your personal data in this context is therefore your consent in accordance with Article 6(1)(a) GDPR.

Issuu uses cookies that allow an analysis of your interaction with the service. In doing so, personal data is also processed, such as your IP address, the time and duration of your visit, and information about how the published document was used. If you are logged into your Issuu account while using the service, Issuu may link this data directly to your user profile.

The following cookies are stored in your browser when you use Issuu services and are not logged into an Issuu account: _iutk, _mc. For more detailed information about these cookies, please refer to our cookie banner.Issuu is only activated if you have given your consent via our cookie banner. The legal basis for processing your personal data in this context is therefore your consent in accordance with Article 6(1)(a) GDPR.

Issuu uses cookies that allow an analysis of your interaction with the service. In doing so, personal data is also processed, such as your IP address, the time and duration of your visit, and information about how the published document was used. If you are logged into your Issuu account while using the service, Issuu may link this data directly to your user profile.

The following cookies are stored in your browser when you use Issuu services and are not logged into an Issuu account: _iutk, _mc. For more detailed information about these cookies, please refer to our cookie banner.

Our website features a campus radio service provided via Airtime Pro (Sourcefabric z.ú., Salvátorská 10, 110 00 Prague 1, Czech Republic). Airtime Pro is an internet radio platform that enables audio streaming and the publication of custom content for listeners.

Sourcefabric or Airtime Pro does not itself process personal data. However, the University may upload audio content that occasionally contains information which could be classified as personal data (for example, in the context of a recorded interview with an identifiable person). Such data is processed by the University on the legal basis of the data subject’s consent or for the performance of a contract (Article 6(1)(a) or (b) GDPR).

This data is processed by Sourcefabric for the purpose of streaming but is not otherwise used, modified, or further processed beyond this scope. Additional data protection information can be found at: https://www.sourcefabric.org/about/policies.

We have integrated the streaming service "Spotify" (Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden) into our website to offer audio content (podcasts) for listening. The parent company is Spotify USA Inc., 150 Greenwich St, New York, NY 10007, USA.

When you use the Spotify player, Spotify sets various cookies in your browser and processes personal data about you. The data collected through these cookies is used by Spotify, among other purposes, to activate content, record your interactions and preferences (e.g. settings selected in the player), and for marketing purposes (e.g. measuring the effectiveness of Spotify advertising campaigns).

When you visit a page that contains embedded Spotify content, a connection is established to Spotify’s servers, and your IP address and the accessed URL are transmitted. If you interact with the audio content, interaction data (such as timestamp and duration) is transmitted to Spotify along with the audio stream. If you are also logged into a Spotify user account, Spotify associates this data with your account or user profile. In addition, Spotify processes technical data, such as information about your device, network connection, network and device performance, browser type, language, operating system and version, and your approximate location (via IP address).

The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. The following cookies are stored in your browser when using Spotify without being logged into a Spotify account: OptanonAlertBoxClosed, OptanonConsent, eupubconsent-v2, sp_adid, sp_landing, sp_m, sp_t. For detailed information on these cookies, please refer to our cookie banner.

Further information on Spotify’s use and processing of personal data is available in the Spotify Privacy Policy at: https://www.spotify.com/de-en/legal/privacy-policy/, in the Spotify Privacy Center at: https://www.spotify.com/de-en/safetyandprivacy/personal-data-collected, and in the Cookie Policy at: https://www.spotify.com/de-en/legal/cookies-policy/.

The website of the University of Liechtenstein includes a custom search feature provided by the service provider “Google.” This Google Programmable Search Engine (Google PSE) is a search service that can be accessed from any subpage of our website and enables full-text search of content.

Given that our website offers a wide range of content across various topics, this search function provides an ideal alternative for locating the desired information. The purpose is to enhance the user experience and make it easier for users to find relevant content.

When visiting the official website of the University of Liechtenstein, no personal data is transmitted to the search service provider (Google) by default. Data is only transmitted to Google when you actively use the embedded Google search by entering a term into the search box and initiating a search.

By using the full-text search, you consent to the associated data processing and to the transmission of data to the Google service. The legal basis for using the custom search function is your consent pursuant to Article 6(1)(a) GDPR.

The data transmitted may include the search terms you enter, website usage data, your IP address, and potentially information linked to a Google account. It should also be noted that Google creates and analyses a user profile based on this data. This occurs regardless of whether you are logged into another Google service. If you have an account with another Google service and are logged in, the collected data may be linked to that account. If you do not wish for this linkage to occur, we recommend that you log out of any such Google services before using the search function.

The following cookies may be stored in your browser when using Google Search without being logged into a Google account: AEC, SOCS, NID, CONSENT, and 1P_JAR. For further details about these cookies, please consult our cookie banner. More information on how Google handles user data can be found at the following link: https://policies.google.com/privacy.

To provide a modern chat feature, the University of Liechtenstein uses the AI-based support platform offered by LearnWise Software International BV, Kraanspoor 50, 1033 SE Amsterdam, Netherlands (hereinafter: LearnWise).

This service has been trained using the publicly available content of our website and is configured to efficiently assist visitors by answering questions, offering guidance, and providing direct links to the relevant information and subpages.

The University of Liechtenstein processes personal data in this context for the following purposes:

• To offer a user-friendly, efficient, and targeted service that responds to your inquiries
• To continuously improve the chatbot’s performance

• To analyse and identify areas for improvement on our website

   

The chatbot processes the following personal data: your IP address, browser information, device data, session data (used to distinguish between individual users), usage data of the chatbot, and the content of your text messages – including any information you voluntarily provide. It is not technically possible to filter out content that may allow for identification based on data entered by the user. We therefore kindly ask you not to enter any personal information such as your name, email address, phone number or similar into the chat window.

We have concluded a data processing agreement with LearnWise, under which LearnWise is contractually obligated to store data within the EU (Ireland).

The data processing associated with the chatbot on our website is based on our overriding legitimate interest pursuant to Article 6(1)(f) GDPR. This legitimate interest lies in providing a user-friendly and efficient experience for website visitors. Further data protection information from the provider of this service can be found at: https://www.learnwise.ai/privacy-policy. 

There are several ways in which you can subscribe to a newsletter from the University of Liechtenstein. A commonly used method is to register for one or more newsletters via our website. In order to do so, we require your email address and your consent to receive the selected newsletter(s) and to the associated data processing.

In addition to the email input field, you may optionally provide further information. If you do not provide your name, we will not be able to address the newsletter to you personally. However, leaving these fields blank does not result in any disadvantages.

Legal basis

The legal basis for sending newsletters is your consent in accordance with Article 6(1)(a) GDPR.

Double opt-in

We use the so-called double opt-in procedure for sending newsletters. This means that we will only send you the newsletter after you have confirmed your registration by clicking on a confirmation link sent to you by email. This ensures that only you can register for a newsletter using your own email address and that it cannot be misused by third parties.

Purpose

The purpose of collecting your email address is solely to deliver the requested newsletter to you. The email address will not be used for any other purpose.

Withdrawal of consent

You may withdraw your subscription to the newsletter at any time by clicking the "Unsubscribe from newsletter" link. You may also contact us via email or telephone. We will promptly delete your data associated with the newsletter subscription. The lawfulness of the data processing carried out prior to your withdrawal remains unaffected.

If you register for an event at the University of Liechtenstein, you may also have the opportunity to subscribe to specific newsletters via the registration form.

It is also possible that you may be contacted by email after attending an event—for example, to receive presentation materials, to be reminded of the option to subscribe to a newsletter, or to be informed about related follow-up events. In such cases, the email is sent based on our overriding legitimate interest (Article 6(1)(f) GDPR). You may object to this processing at any time.

For prospective students as well as alumnae and alumni, we use the service "MailChimp" to manage newsletter subscriptions. This service is provided by The Rocket Science Group LLC d/b/a MailChimp, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, USA, privacy@mailchimp.com. 

As with our general newsletter process, you will receive a confirmation email after signing up through MailChimp that includes a hyperlink to verify your subscription (see also: double opt-in procedure above). Your registration will only be completed if you click the link within 30 days. If not, your data will be automatically deleted, and no subscription will be recorded.

By confirming your subscription, you consent to us storing your email address along with the date of your registration. Additionally, it is recorded whether and when you open our newsletter and which links you click. This is done using so-called web beacons – small, one-pixel image files that are loaded from MailChimp’s server when the newsletter is opened. This standard practice allows us to analyse the effectiveness of our newsletters and tailor content to your interests. You may prevent this type of data collection by disabling the automatic loading of images in your email program. This form of data processing is based on our overriding legitimate interest.

Further information on data processing by MailChimp is available at: https://mailchimp.com/legal/. The data transfer takes place on the basis of a data processing agreement that includes the EU Standard Contractual Clauses: https://mailchimp.com/legal/data-processing-addendum/. Weitere Additional privacy information can be found at: https://www.intuit.com/privacy/statement/. 

We use the service “Microsoft Bookings” to enable and manage online appointment scheduling (hereinafter referred to as “consultation appointments”). MS Bookings is a service provided by Microsoft Ireland Operations Ltd., 70 Sir John Rogerson's Quay, Dublin 2, 662881, Ireland (hereinafter: “Microsoft”).

Consultation appointments are primarily intended for prospective students and enrolled students who wish to obtain information about services provided by the University of Liechtenstein and to receive personalised guidance. When using Microsoft Bookings for consultation appointments, various types of personal data are processed. This includes the following: first name, last name, email address, date and time of the appointment, and any optional information such as residential address, telephone number, and remarks regarding the purpose of the appointment.

For individuals requesting a consultation session, the legal basis is Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures), particularly when the consultation relates to pre-contractual or contractual services involving prospective or current students. In all other cases, the data is processed on the basis of our legitimate interest in effectively handling incoming requests, in accordance with Article 6(1)(f) GDPR. Our interest lies in the efficient handling and organisation of consultation services. Optional data (residential address, phone number, comments) is processed based on your consent under Article 6(1)(a) GDPR.

Please note that appointments can also be scheduled using alternative contact options, and use of Microsoft Bookings is not mandatory.

The recipient of the data is the aforementioned service provider Microsoft Ireland Operations Ltd., with whom we have concluded a data processing agreement in accordance with Article 28 GDPR. Please note that Microsoft Corporation, the parent company, is located in a third country (USA) from a data protection perspective. Microsoft Corporation is an active participant in the EU-US Data Privacy Framework, which ensures an adequate level of data protection comparable to that of the EEA under the European Commission’s adequacy decision (Article 45 GDPR).

According to Microsoft, the company processes usage data from Bookings for the following internal business purposes: internal reporting and modelling (e.g. forecasting, revenue, capacity planning, product strategy); combating fraud, cybercrime or cyberattacks involving Microsoft or its products; improving core functionality such as accessibility, privacy, or energy efficiency; and compliance with legal obligations. Microsoft does not process data for profiling, advertising, or other commercial purposes. As Microsoft determines the purposes and means of processing for these specific use cases, it is considered a controller and is independently responsible for fulfilling its legal obligations.

Further information on Microsoft Bookings can be found in Microsoft's privacy policy: https://www.microsoft.com/en-us/privacy/privacystatement
A list of Microsoft’s subprocessors can be found under Microsoft Privacy Resources.

We delete personal data when it is no longer necessary to achieve the purposes described above — generally after your request has been processed. Microsoft’s retention periods are as follows:

• 93 days after deletion of content data or once the data is no longer needed
• 90 days after account deletion or opt-out (especially for employees)
• 180 days for log files and system-generated protocol data

To use certain services on our website, registration may be required. This applies, for example, when submitting an application for a study programme or when registering for events. Registration results in the creation of a personal user account. If the email address is not confirmed, the account will not be activated, and the registration data will be automatically deleted after 30 days. Once your user account has been successfully created, you can make full use of the services and offerings provided by the University.

The following personal data is stored when creating a user account:

• Email address
• First and last name
• Password
• Email verification status

• Log data (timestamp, IP address, error code if applicable)

   

The creation of a user account serves the purpose of restricting access to non-public areas of the website and its services.

The legal basis for creating a user account is Article 6(1)(b) GDPR.

The University of Liechtenstein regularly conducts surveys, which are generally carried out with the support of external IT service providers (software-based services). For this purpose, invitations containing links to the survey are sent via email to specific groups of individuals. These invitations may be sent via our internal mailing system, via MS Outlook using blind carbon copy (BCC), or directly through the external IT service provider. In this context, we process your email address on the basis of our overriding legitimate interest pursuant to Article 6(1)(f) GDPR. Participation in a survey is generally voluntary and therefore based on your consent under Article 6(1)(a) GDPR.

Surveys may be conducted on either a personally identifiable or anonymous basis. If the survey is personally identifiable, the results may be linked to you as an individual. In the case of anonymous surveys, no such identification is possible.

Purpose of Data Processing

The purpose of using IT service providers by the University of Liechtenstein is to enable the efficient and user-friendly execution of surveys. You will be informed about the specific purpose of each survey either in the invitation or in the introductory text before participation. In general, however, most of our surveys are aimed at identifying potential improvements to our services and offerings (such as study programmes, academic courses, and campus life organisation). In addition, the University conducts surveys for the purpose of research and knowledge generation.

For selected surveys, the University of Liechtenstein uses the external IT service provider SurveyMonkey (SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland). This is a web-based service for creating and evaluating online surveys. SurveyMonkey’s privacy policy is available at: https://www.surveymonkey.com/mp/legal/privacy/. 

What data is collected by SurveyMonkey?

If the email invitations for the survey are sent via SurveyMonkey, the following data is typically processed: email address, IP address, and tracking data (cookies or page tags).

Further processing of personal data by SurveyMonkey only takes place if you decide to participate in a survey by clicking the link provided in the email. In that case, you will be redirected to an external website hosted by SurveyMonkey. When this happens, SurveyMonkey automatically collects information about the device used. This may include your IP address, operating system version, device type, device ID/MAC address, system and performance data, and browser type. If you use a mobile device, SurveyMonkey may also collect the UUID of that device. SurveyMonkey also sets cookies in your browser, which may contain a unique identifier ("cookie ID"). These cookies are used, among other things, to determine who has already participated in a survey, to prevent misuse, and to fix technical issues. Cookies are automatically deleted after a maximum of one year. Survey content is processed and stored by SurveyMonkey before being transmitted to the University of Liechtenstein.

If a survey is conducted anonymously, no further link to your identity is possible from the University’s side. Important: to ensure the anonymity of the survey, we kindly ask you not to enter any personal data (e.g. name or contact details) in the free-text fields. Once a survey has been submitted, individual responses cannot be edited. In compliance with the GDPR, we reserve the right to delete such entries or have them deleted by SurveyMonkey. For more information on how SurveyMonkey handles anonymous responses, see: https://help.surveymonkey.com/en/surveymonkey/send/anonymous-responses/.

Data transfers

As SurveyMonkey Europe UC is a subsidiary of SurveyMonkey Inc., based in the USA, data collected by SurveyMonkey may be transferred to the United States. SurveyMonkey Inc. is currently an active participant in the EU-US Data Privacy Framework, meaning that the data transfer is based on the European Commission’s adequacy decision pursuant to Article 45(1) GDPR. In addition, appropriate safeguards in accordance with Article 46 GDPR have been implemented — specifically, the European Commission’s Standard Contractual Clauses under Article 46(2)(c) GDPR are used for data processing.

Retention Period

SurveyMonkey stores respondents’ IP addresses in backend logs and deletes them after 13 months. Cookies are automatically deleted after a maximum of one year. For further details regarding how your data is stored by SurveyMonkey, please refer to their privacy policy at: https://www.surveymonkey.com/mp/legal/privacy/. 

Another IT service provider whose services we primarily use for conducting surveys in the research context is SoSci Survey (SoSci Survey GmbH, Erchanbertstrasse 6, 81929 Munich, Germany). Further information on SoSci Survey’s handling of personal data can be found at: https://www.soscisurvey.de/en/data-protection.

What data is collected by SoSci Survey?

For the execution of surveys, SoSci Survey does not store IP addresses or user activity. However, in the case of error logs (e.g. use of invalid login credentials), the IP address may be temporarily stored. Neither third-party nor tracking cookies are used. SoSci Survey may process the following categories of personal data across various subprocesses:

1. Survey data: responses provided by participants in the questionnaire, which are stored directly in the dataset
2. Uploaded files: where applicable, files uploaded by participants during an interview
3. Contact details: where applicable, contact information entered by respondents in the questionnaire, stored separately from the dataset and other address data

4. Address data (email addresses): used for sending bulk emails, which may be entered by the project team or provided by respondents through an opt-in question. Depending on the data protection mode used, address data may or may not be linked to respondents’ answers.

    

Data transfers

Personal data collected through surveys is transferred to SoSci Survey GmbH (Germany), which acts as a data processor in accordance with Article 28 GDPR and processes the data strictly based on instructions.

Retention period

In addition to the University of Liechtenstein’s ability to delete survey data manually, SoSci Survey also performs automated data deletion. A survey project is automatically archived (i.e. all data is deleted from the database and the questionnaire including its contents is stored as a file) if the University of Liechtenstein has not logged into the survey project for a period of 3 months and no new data has been collected during that time.

Further information on the handling of personal data by SoSci Survey can be found at: https://www.soscisurvey.de/help/doku.php/en:general:dsgvo.

Purpose and Categories of Data

We process the personal data you provide during your registration for events solely for the purpose of registering, organising, and carrying out the respective event. We ensure that only the data necessary for these purposes is collected and processed.

Legal Basis

The processing of your personal data is based on the performance of pre-contractual measures or the fulfilment of a paid or unpaid contract in accordance with Article 6(1)(b) GDPR. Without providing the required data, registration and fulfilment of the contract are not possible.

If you voluntarily provide additional information in optional fields (fields not marked with *), the processing of such data is based on your consent in accordance with Article 6(1)(a) GDPR.

Categories of Data Collected for Paid Events

For the administration of paid events, we require the following personal data:

• Salutation, first name, last name
• Street address, postal code, city, country
• Email address
• Name of the event
• Confirmation of acceptance of the terms and conditions
• Billing information

Any additional, non-mandatory fields are optional and serve to support further communication or event coordination.

Sending of Electronic Event Invitations

The contact data collected in the context of events may be used to send you invitations to similar events or offerings of the University of Liechtenstein, provided you do not object to such use.

This processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR (see Recital 47 of the GDPR). You may object to this use at any time – either at the point of data collection, via a link included in the respective email, or by contacting us directly (see the section “Controller and Contact Details”).

Disclosure of Data

As a rule, your personal data will not be passed on to third parties. However, if a sponsor or partner is involved in organising the event, it may be necessary to share personal data with them. In such cases, we rely on our legitimate interest in accordance with Article 6(1)(f) GDPR.

You will be informed separately if such disclosure takes place. Of course, you have the right to object to this transmission at any time without incurring any disadvantages.

Purpose

The processing of personal data is carried out for the purpose of live streaming events and conducting online meetings (e.g. webinars, conferences, discussions). In certain cases, these events or meetings may also be recorded.

Categories of Data Processed

Depending on the type of event (e.g. live events, webinars), different categories of personal data may be processed. In publicly accessible online events, the image and audio recordings, displayed username, and all shared content (chat messages, uploaded documents, etc.) of all participants may be visible. In such cases, you have the option at any time to enable or disable your camera and microphone. You may also voluntarily submit input via the chat window (including emojis, etc.). For more information, see the section on Photo and Video Recordings.

There are also online events in which only speakers have access to video and audio transmission functionalities.

Online meetings are generally not recorded. If a recording is planned, you will be informed in advance by the event organisers. Giving consent to the recording is voluntary. Neither failure to provide consent nor withdrawal of consent has any negative consequences for you.

Legal Basis

Depending on the context, the legal basis for the processing of data is our legitimate interest under Article 6(1)(f) GDPR in making the event accessible to as many people as possible, or your consent under Article 6(1)(a) GDPR, which primarily applies to optional, user-controlled features.

Different software providers may be used for these purposes. These providers typically act as data processors, such as in the case of Microsoft Teams and Zoom.

A) Use of Software – MICROSOFT TEAMS

The University of Liechtenstein uses the service "Microsoft Teams." This cloud-based service provided by Microsoft includes chat, telephony, file sharing and collaboration, and video conferencing functionality. If participants require functionalities beyond basic guest access, the creation of a Microsoft account is necessary. Depending on the functions used, additional personal data beyond the categories listed above may be processed.

Categories of Data Processed

When using Microsoft Teams, in addition to login data (first name, last name, email address, account, organisational unit, usage country), the following personal data may be processed:

• Communication data (video stream, audio stream, chat content, metadata)
• Activity data
• IP address and other device information
• Personal data contained in documents and files
• Access logs and other diagnostic data
• Other personal data required for the use of specific features

The legal basis is the legitimate interest under Article 6(1)(f) GDPR, particularly for the purpose of enabling a modern, digital, and smooth university operation.

B) Use of Software – ZOOM

We also use the video conferencing service “Zoom” (Zoom Video Communications, Inc.) to conduct online meetings, video conferences, and/or webinars.

Categories of Data Processed

The way data is processed depends on how the service is used. Participants can decide whether to use chat, enable their microphone, or share their camera.

Participant Data

If you join as a guest (without logging into a Zoom account), you will be asked to enter a name. You may choose an alias to avoid disclosing your name to Zoom.

If you join by phone, your phone number will be processed.

If you log in via a Zoom account, the personal data stored in the account will be processed.

Video, Audio, and Text Data

• Video data, if the camera is enabled
• Audio data, if the microphone is enabled

• Text data, if the chat, question, or polling functions are used

   

Meeting Data

• Duration of the meeting
• Start and end time of participation
• Name and description of the meeting
• Scheduled date and time of the meeting
• Chat status
• IP address of the device used
• Meeting recording (optional)

• Information shared during use of the service

   

If a meeting is being recorded, you will be informed by the organiser before or at the start of the meeting, and/or a technical notice will be displayed. The legal basis for processing is your consent under Article 6(1)(a) GDPR.

We have entered into a data processing agreement with Zoom Video Communications, Inc. pursuant to Article 28 GDPR. Further information about data processing by Zoom can be found in Zoom’s privacy policy at: https://explore.zoom.us/de/privacy/.

Purpose of Data Processing

Beyond regular teaching activities, we also organise lectures, conferences, workshops, and similar events. In the context of such events, photographs and/or video recordings (visual material) of participants may be taken. These recordings are not intended to identify individual persons. The primary purpose of the visual material is documentation, reporting, and public relations (showcasing the University’s activities) both online and offline.

Such material may be published in online and print media, on our website, in social media channels (such as LinkedIn, YouTube, Instagram), newsletters, press releases, or brochures. In some cases, this visual content may be supplemented by your name, title, and function — but only with your explicit consent.

For specific events such as graduation ceremonies or award presentations, visual recordings may also be taken as a service to the participants and shared with them. In the context of externally funded projects, visual material may be required to meet documentation and reporting obligations.

Legal Basis

In most cases, we rely on the legal basis of your voluntary consent (Article 6(1)(a) GDPR). Where the visual material may reveal health-related information or other sensitive data, the legal basis is Article 9(2)(a) GDPR (consent for processing special categories of personal data).

Where the recording and storage of photographs and video footage is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out on the basis of your consent before its withdrawal. You will not suffer any disadvantages if you do not grant or later withdraw your consent.

In the case of public events, we assume there are no overriding objections to photo and video recordings, and base the processing on our legitimate interest pursuant to Article 6(1)(f) GDPR. You may object to such processing at any time without suffering any disadvantages.

We instruct our photography and video staff to avoid taking images of individuals who do not wish to be recorded. However, we kindly ask you to proactively inform the camera crew if you do not want to be photographed or filmed. Should you discover an image of yourself published online despite this, we will delete it upon request as far as technically and legally possible.

Retention Period

Photographs and recordings made on the basis of consent will be deleted without delay upon withdrawal of that consent or upon objection. Otherwise, they will be retained until the purpose for which they were collected no longer applies.

If the material is deemed to be of archival value, it may be transferred to the Liechtenstein State Archive, where it is generally preserved indefinitely.

For all social media channels operated by the University of Liechtenstein, both the University of Liechtenstein and the respective service provider (e.g. LinkedIn, Instagram) are jointly responsible for the processing of personal data in accordance with Article 26(1) GDPR.

In general, we rely on two different legal bases for our use of social media platforms — depending on how you interact with our pages. The legal basis for operating our social media channels is Article 6(1)(f) GDPR. This is based on our legitimate interests, which include: executing, analysing, and improving our marketing activities; enabling efficient and targeted communication; as well as informing the public, documenting activities, and conducting statistical analysis as part of our public relations efforts.

In exceptional cases, the processing of your personal data on our social media channels may also be based on Article 6(1)(b) GDPR — i.e. for the performance of a contract or in order to take steps prior to entering into a contract. This applies, for example, if you use one of our social media channels to submit inquiries about services and offerings provided by the University. If necessary to respond to your request, we may process personal data such as your first and last name, salutation, and any other data you have voluntarily submitted for the purpose of handling the matter.

All major providers of social media platforms maintain a registered office in Ireland and are thus subject to EU data protection law. In the event of a complaint, you may contact the Irish supervisory authority. Their contact details are as follows: https://www.dataprotection.ie

The University of Liechtenstein maintains an active presence on LinkedIn (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; hereinafter: LinkedIn). For users based in Europe, the controller is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

Use of this service is not required in order to contact us or access our information. Please note that you use this service and its functionalities under your own responsibility. This applies in particular to the use of interactive features such as sharing content.

In addition to our privacy information, please also consult LinkedIn’s own privacy policy. Keep in mind that when using our LinkedIn page, data may be processed by LinkedIn — for example, when you like, comment on, or share our posts. LinkedIn provides detailed information on which data is collected, how it is used, on which legal basis, and how long it is stored in its privacy policy: https://www.linkedin.com/legal/privacy-policy.

To exercise your data subject rights in relation to LinkedIn, you can find contact details at: https://www.linkedin.com/help/linkedin/ask/TSO-DPO.

Processing of Personal Data and Purpose of Use

The following categories of personal data may be processed when users interact with our LinkedIn page:

1. public information from users’ LinkedIn profiles;
2. comments and the information shared within them;
3. the content of messages sent to us via LinkedIn;
4. all data made available to us through LinkedIn Insights.

When you visit our LinkedIn page, follow it, or interact with its content, LinkedIn processes certain personal data. LinkedIn uses this information to provide us with pseudonymised statistics and so-called "Page Insights." These help us understand how users interact with our page — for example, which posts receive the most views or clicks.

LinkedIn may use profile data that you have provided, such as your job title, country, industry, seniority, employer company size, or current employment status.

We use this data to optimise our content and communication strategies and to improve the effectiveness of our LinkedIn presence. More information about the processing of Page Insights data can be found here: https://legal.linkedin.com/pages-joint-controller-addendum.

In the context of recruitment processes, personal data may also be processed based on our legitimate interest under Article 6(1)(f) GDPR. This applies in cases where curriculum vitae data provided in applications is cross-checked with the associated LinkedIn profile of the candidate. This validation is carried out for accreditation purposes related to verifying professional qualifications. In this context, the following personal data may be processed: first and last name, salutation, employer, job title, city/country, time periods, and other data voluntarily provided by the applicant. The University of Liechtenstein notes that submitting applications via LinkedIn’s messaging or page functions is not permitted.

Information on the legal bases and purposes for LinkedIn’s processing of personal data as well as a summary of the Page Insights Addendum can be found in LinkedIn’s privacy policy and in the information on Page Insights. Details on LinkedIn’s use of cookies can be found at: Privacy Policy of LinkedIn as well as Information about LinkedIn-Pages-Insights. You can find more information about the use of cookies at the following link:  https://www.linkedin.com/legal/l/cookie-table.

The University of Liechtenstein uses the social media service Instagram, provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA, which is part of the parent company Meta Platforms Inc.).

Data processed by Instagram:

Information on which data is processed by Instagram and for what purposes it is used can be found in Instagram’s privacy policy at: https://help.instagram.com/155833707900388/. 

The data collected includes:

• Information provided during registration, such as email address or telephone number
• Content you share: posts, comments, audio, hashtags
• Information provided via the Instagram camera or your own device’s camera, such as effects or body parts used when creating avatars
• Activity: content you click or like, including ads, posts, photos, and messages
• Friends or followers — including those you interact with most frequently, and their activities
• Purchases and sales, including credit card information
• Time, frequency, and duration of Instagram usage
• Information about the device used (e.g. smartphone, tablet, computer), including device type and app version
• Information from partners about actions inside and outside Instagram, such as websites visited, apps used, or online games played
• Some location-related data — even if location services are turned off, such as IP address used to estimate general location
• Contact information from your address book, call logs, or SMS history if uploaded, synced, or imported from your device
• Content such as photos or videos in which you appear if others have uploaded and shared them, including their comments on your image

The University of Liechtenstein has no influence over the data processing activities carried out by Instagram, including the type of data collected or how it is shared with third parties. By using this service, your personal data is processed by Meta Ireland Ltd. and transferred to, stored in, and used in the United States, Ireland, and any other country where the parent company operates — regardless of your place of residence.

For analytical purposes, data about usage and interaction with our Instagram page may be processed using the analytics tool Instagram Insights. However, we do not receive any personal data — only aggregated, non-personal information such as the number of likes or clicks on a particular post or profile is made visible to the University of Liechtenstein via its account. Moreover, the University of Liechtenstein has no ability to prevent or disable the use of such tools on its Instagram profile.

As of 27 May 2025, Meta has begun using publicly available profile data from Instagram and Facebook users to train its generative AI models. According to Meta, this includes names, usernames, profile pictures, activity in groups and channels, content (such as comments and reactions), and avatars that are publicly accessible. It remains unclear how and for what specific purposes these data are used by AI models, or whether they can be deleted afterward.

To object to the use of publicly available Instagram data for AI training, you can visit the following link: https://help.instagram.com/contact/767264225370182.

Even though Instagram is a service provider based in a third country, its European headquarters is located in Ireland, making it subject to the provisions of the General Data Protection Regulation (GDPR). This includes your rights to access, restrict, or delete your personal data.

You can control how your data is processed through the general settings in your Instagram profile by navigating through the different menu options available. Further information on these topics is available on the following Instagram support page: https://help.instagram.com/519522125107875.

Further information on the use of AI by Meta is available at:
https://www.facebook.com/privacy/genai

Information about the inferences Instagram may draw about you can be found at:
https://help.instagram.com/181231772500920
and
https://help.instagram.com/155833707900388

Details about the use of cookies on Instagram can be found at:
https://privacycenter.instagram.com/policies/cookies/

Information on available personalisation and privacy settings can be found here:
https://help.instagram.com/116024195217477

In addition, you have the option to submit privacy-related concerns, objections, or the exercise of your data subject rights directly to Instagram via the following form:
https://help.instagram.com/contact/1845713985721890

Data Processed by the University of Liechtenstein

The University of Liechtenstein also processes personal data. However, we do not independently collect any data via our Instagram profile. The data you have provided on Instagram — in particular, your username and the content published under your account — may be processed by us to the extent that we comment on your posts or publish our own posts referring to your account.

The data you have voluntarily made public on Instagram may thus be included by the University of Liechtenstein in its communications and made accessible to its followers.

The University of Liechtenstein operates several Facebook pages, a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (parent company: Meta Platforms Inc.).

Data processed by the University of Liechtenstein

When users interact with our Facebook pages, the University of Liechtenstein may process the following personal data:

1. public profile information of the user,
2. posts and the information they contain,
3. comments and any information included in them,
4. messages sent to us directly, including their content.

As with Instagram, Facebook Insights may be used to analyse usage and interactions with our Facebook pages. We do not receive any personal data from this tool. Only aggregated, non-personal information — such as page views, tab visits, comments, clicks, shares, and demographic metrics — is made visible to the University via its account.
Further information on the processing of Insights data can be found here: https://www.facebook.com/legal/terms/page_controller_addendum.

Every time a Facebook page is visited, Facebook sets cookies — regardless of whether or not you are logged in to Facebook. You can find Facebook’s cookie policy at: https://www.facebook.com/policies/cookies/

Facebook and Instagram share infrastructure, systems, and technology with other Meta companies (including WhatsApp and Oculus). For these purposes, Facebook also processes your information across Meta platforms. For example, Facebook may process data from WhatsApp accounts involved in spam activity in order to take action against those accounts on Facebook, Instagram, or Messenger.
Meta also attempts to understand how individuals use and interact with the various Meta products, for example, to estimate the total number of individual users across the Meta ecosystem.

Please be aware that Facebook collects a variety of technical and usage data during platform use, including your computer system, browser type and version, IP address, and processor type.
Moreover, Facebook learns about every visit to other websites that have a Facebook button or Facebook Pixel installed. This allows Facebook to build a highly detailed profile of users’ interests, preferences, contacts, and browsing habits — far beyond activity within Facebook itself.

As of 27 May 2025, Meta has begun using public profile data from Facebook and Instagram users for training its generative AI models. According to Meta, this includes names, usernames, profile photos, group and channel activity, public content (such as comments and reactions), and avatars. It remains unclear how exactly this data is used by the AI systems or whether it can be deleted once processed.
To object to the use of your publicly available Facebook data for AI training, visit: https://www.facebook.com/help/contact/712876720715583.

Details about which data Facebook processes and for what purposes can be found in Facebook’s Privacy Policy: (https://www.facebook.com/privacy/policy). You can also access your personal data on Facebook via this page: (https://www.facebook.com/your_information/). Information on Meta’s use of AI can be found here: https://www.facebook.com/privacy/genai.

To contact Facebook’s Data Protection Officer, you can use the online form provided (contact details).
If you have concerns about Facebook’s data processing practices, you have the right to contact your local data protection authority, or the lead supervisory authority for Meta Platforms Ireland Limited.

The University of Liechtenstein operates the presence https://www.tiktok.com/@uniliechtenstein using the online platform TikTok. TikTok is a service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. The parent company is Beijing Bytedance Technology Ltd., based in Beijing, China.

You do not need to create a TikTok account in order to use certain functions of the platform, such as searching for and viewing public profiles or watching publicly available videos. However, TikTok still processes technical data during such use. This includes your IP address, instance IDs, mobile network provider, time zone settings, advertising identifiers (ad IDs), app version, and device data (such as device system, network type, device ID, screen resolution, operating system, audio settings, and connected audio devices). If you access the platform via a mobile device, TikTok also collects location data, regardless of whether you have enabled location services.

If you have a TikTok account, are logged in, and choose to follow our account, we are able to see you listed as a “follower.” We then process the personal data contained in your username and your public profile.

We process the same categories of data if you interact with our content by liking, commenting, sharing, or mentioning our channel — even if you are not following our page. You can contact us via our TikTok profile through messages, comments, mentions, or likes. The personal data you provide in such messages is transmitted to us by TikTok and used solely to respond to your request. Your message will be deleted once your inquiry has been answered, resolved, and documented.

TikTok provides us with anonymous, aggregated statistics and reports on the use of our social media profile that do not contain any personal data. We receive the following anonymised information:

• Total play time: the cumulative viewing time of all videos on our channel
• Average watch time: how long users typically watch the videos before stopping
• Full video views: the number of users who watched a video until the end
• Demographics: age, gender, follower activity, and region
• Traffic sources: how users discovered our videos
• Followers: the number of people following our account
• Likes, removed likes, “not interested” ratings, comments, and shares
• Profile views: who has viewed our profile in the past 30 days

We use these statistics to further develop and optimise our TikTok content and tailor it to the interests of our audience. It is not possible for us to associate this statistical data with individual user accounts.

Information about which data TikTok processes in connection with the use of its services and for what purposes can be found in TikTok’s privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en. In addition, the types of data TikTok collects and how this data is used depend on how you interact with the platform and how you manage your privacy settings.

The operator of the platform is the Chinese company ByteDance. When using TikTok, personal data may therefore be transmitted to or disclosed in the People’s Republic of China. From a data protection perspective, China is considered a third country. There is no adequacy decision by the European Commission that would confirm a level of data protection equivalent to that of the EU/EEA. Under China’s Multi-Level Protection Scheme 2.0, Chinese companies are required to disclose data to government authorities. This grants unrestricted access to all data held by Chinese companies. As a result, the European standards for data protection cannot be guaranteed when using the TikTok application.

The transfer of personal data to a third country for a specific purpose is therefore based on the derogation provided in Article 49(1)(a) GDPR, meaning that your informed consent is required after being made aware of the associated risks. Please note that the University of Liechtenstein has no influence over TikTok’s further processing of your personal data.

Further information on the service can be found at:

• Privacy Policy TikTok
• Joint Controllership Agreement
• Cookie Policy TikTok

The University of Liechtenstein maintains public YouTube channels as part of its presence on social networks. YouTube is a video platform operated by the Google Inc. group based in the USA. The providers and simultaneous recipients of your data can be contacted at the following addresses:

• Google Ireland Limited
  Gordon House, Barrow Street, Dublin 4, Ireland
  (Responsible for data processing within the European Economic Area)
• YouTube, LLC
  901 Cherry Ave., San Bruno, CA 94066, USA
• Google Inc.
  1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  (Parent company: Alphabet Inc.)

A contact form for user inquiries is available at: https://www.youtube.com/t/contact_us. YouTube is a social media platform that enables users to upload, view, rate, and comment on videos free of charge.

Data processed by the University of Liechtenstein:

The content we publish provides information about upcoming or past events, academic topics, or university services. These videos can be commented on, shared, or rated by users with "likes" or "dislikes." As such, we process your personal data when you interact with us via our YouTube channel—e.g., by leaving comments or providing feedback.

Please note that, in addition to the data and content you actively share with us, we may also have access to further information from your user profile, including your published content and ratings. Access to such information depends on the privacy settings you have configured in your YouTube account.

To learn how to review and adjust your privacy and data protection settings on YouTube/Google, please refer to the guidance provided here: Link to your data on Youtube.

In addition, we receive aggregated information regarding interaction data related to our content. This means we can analyze how often our videos have been viewed, which videos are popular, and how long they were watched.

Data processed by Google Ireland (YouTube)

YouTube (Google) processes additional information about you, which we outline below:

• User data: This includes, for example, name, username, email address, phone number, location data, or device-related information (IP address, log data, timestamps, browser information, operating system data).
• Content data: YouTube stores information about uploaded or shared videos, comments, likes, and subscriptions.
• Activity data: YouTube records all activities on the platform, such as search queries, which videos were watched and for how long, your watch history, and interactions with advertisements.

• Personalisation data: YouTube analyses your activity data and creates a profile to offer personalised advertising measures, recommendations, and search results (more information on this can be found below).

   

YouTube (Google) evaluates your activity behaviour and shared content in order to build a user profile for advertising purposes (targeting). Through the use of cookies and comparable technologies (e.g. device fingerprinting), Google can clearly identify you as a person and link your activities to your profile – even if you are not signed in to a Google or YouTube account. This also applies when you use third-party apps or websites that integrate Google services. As a result, Google can personalise advertising content specifically based on the activity data collected about you.

The University of Liechtenstein has no influence over the nature, scope, purpose, use or disclosure (to third parties) of the data processed by YouTube. Further information on data processing by the provider can be found in the Google Data Policy.

You can restrict the processing of your data via the privacy settings of your user profile. In addition, on mobile devices (smartphones, tablet computers), you can limit the service’s access to contact and calendar data, photos, location data, etc. through the device settings. Please note that these options may vary depending on the operating system used.

You have the option to review and update how your data is processed through Google’s activity controls. Using the Google Dashboard, you can review and manage certain types of information associated with your account. The Ads Settings allow you to view and modify your preferences for Google advertising. Further information on these and other settings and choices can be found here: https://policies.google.com/

You may also configure your browser to block all cookies, including those set by the provider, or to notify you whenever a cookie is placed.

The University of Liechtenstein website features an embedded media search function provided by the Swiss provider SLSP AG (Swiss Library Service Platform, “swisscovery”). “swisscovery” allows users to search the collections of more than 500 libraries across Switzerland, comprising billions of electronic resources (such as journal articles, e-books, dissertations, conference proceedings, etc.).

In principle, no personal data is transmitted to SLSP when visiting the official websites of the University of Liechtenstein. Data is only transferred when you actively use the search function (by entering a search term and pressing Enter or clicking the search button). In doing so, you will be redirected to an external page operated by SLSP, where the search results are displayed.

Personal data in the form of cookies may be processed during this process. This data processing falls under the responsibility of SLSP AG. Further information on data protection can be found in the SLSP privacy policy: https://slsp.ch/en/data-protection/.

To use our library services such as borrowing media, registration with swisscovery, operated by SLSP AG (Swiss Library Service Platform), is required. In order to log in to swisscovery (SLSP) and access library content, you need a SWITCH edu-ID account, which you must use to register with SLSP (see also the section on SWITCH edu-ID / AAI).

For further information on how your personal data is processed by swisscovery, please refer to the SLSP privacy notice (German).

Purposes of Data Processing

• The purposes for processing your personal data in the context of library services are as follows:
• Administration of media borrowing and related transactions
• Invoicing and handling of reminders (including management of lost or damaged items)
• User registration on the SLSP registration platform, including identity verification via SWITCH edu-ID

• Organisation of access to or from libraries affiliated with the Institutional Zone (IZ)

   

In the course of media borrowing and the necessary platform registrations, the following categories of personal data are processed by the University of Liechtenstein and by SLSP (referred to by SLSP as “transaction data”): information on copy requests, reservations, holds, purchase suggestions, interlibrary loans, bookings, fees, borrowing history over a defined period (completed loans, user note fields), account blocks, and user groups.

As registration via a SWITCH edu-ID account is required to use swisscovery (SLSP), additional personal data may be processed, if provided. These include: barcode numbers of library cards, matriculation number, information on institutional affiliation (university association), and preferred language. Once the SWITCH edu-ID account is registered, your data is transmitted to SLSP AG with your consent and continuously synchronised. This data transfer is necessary for the provision of library services.

Legal Basis

The legal basis for processing your personal data is the performance of a contract in accordance with Art. 6(1)(b) GDPR. The transfer of your data to SWITCH and subsequently to SLSP AG (both based in Switzerland) is based on an adequacy decision pursuant to Art. 45(1) GDPR.

Retention Period

Transaction data (such as borrowing records and fees) are anonymised after two years. Other account data within swisscovery (SLSP) is deleted after ten years of inactivity. You may also request deletion of your personal data from SWITCH at any time via your SWITCH account or directly via SLSP AG, provided the data is no longer required for an ongoing transaction.

Recipients

In addition to the University of Liechtenstein, the following are recipients of your personal data:

• SWITCH, Werdstrasse 2, 8004 Zurich, Switzerland
• SLSP AG, Kasernenstrasse 77A/B, 8004 Zurich, Switzerland – www.slsp.ch
• Libraries of the Institutional Zone (IZ)

The SWITCH edu-ID service offers end users a personal digital identity (edu-ID), which enables access to services within the SWITCH edu-ID federation in Switzerland and, via interfederation, to services within other international identity federations.

The use of SWITCH edu-ID is open to all natural persons who wish to create an edu-ID account to access services within the SWITCH edu-ID federation. The primary purpose of this service is to provide authentication and authorisation for services connected to the federation. When creating a SWITCH account, the terms of use of SWITCH must be observed.

Categories of Personal Data Processed

The following categories of personal data are processed when using a SWITCH account:

• Personal contact details (first name, last name, email address, profile photo – optional)
• Technical identifiers and attribute specifications (e.g. date of birth, address, phone number, SSH key, group information)
• Authentication credentials (e.g. email address and password)
• Log data (e.g. IP addresses, timestamps, actions)

• Support data (name, first name, email address, edu-ID identifier of the requester such as swissEduPersonUniqueID and eduPersonTargetedID, timestamp, subject, description of the issue, attachments provided by the user)

   

Legal Basis

The legal basis for processing your personal data is the performance of a contract pursuant to Art. 6(1)(b) GDPR. The transfer of your personal data to SWITCH is based on an adequacy decision in accordance with Art. 45(1) GDPR.

Retention Period

As long as end users have an active affiliation with an organisation, SWITCH – acting as a data processor on behalf of the organisation – is not authorised to delete the edu-ID account. All other edu-ID accounts may be deleted at any time by contacting: eduid-support@switch.ch. Deletion of the edu-ID account results in the loss of access rights and all related functionalities. Once deleted, the edu-ID account and all personal data associated with it are permanently erased and cannot be restored.
Please note: the deletion of an edu-ID account does not automatically lead to the deletion of data processed by individual service operators during use of their services. Such deletion must be requested directly from the respective service operator.

Service Operators

Examples of service operators affiliated with the University of Liechtenstein include:

• swisscovery (SLSP)
• courseware.uni.li
• lindedigital.at and test-courseware.uni.li

• WLAN EDU-Roam

   

Recipient of Your Personal Data
SWITCH, Werdstrasse 2, 8004 Zurich, Switzerland

Unless otherwise stated in connection with specific data processing activities regarding storage periods, deletion limitations, or the rights to withdraw consent or object, the following applies:

Consent (Art. 6(1)(a) GDPR)
We retain personal data processed based on your consent until such consent is withdrawn, or until the stated purpose has been fulfilled, whichever occurs first. After that, we retain only those personal data necessary to document your consent and its withdrawal (e.g. name, date, evidence such as a signature) — for a period of three years from the date of withdrawal.

Contract Performance (Art. 6(1)(b) GDPR)
Personal data required to fulfil a contract are retained for the duration of the contractual relationship. Further retention only occurs if mandated by statutory retention obligations or where limitation periods for potential legal claims remain open.

Legal Obligation (Art. 6(1)(c) GDPR)
As a public institution, the University of Liechtenstein is subject to various legal obligations under national law (e.g. the University Act [LUG], the Archiving Act [ArchivG], etc.). These include, for example, the transmission of anonymised statistical data to the Office of Statistics. Where processing is based on a legal obligation, data are retained as long as required by law. Further retention may occur if legal retention periods or applicable limitation periods necessitate it.

Performance of a Task in the Public Interest (Art. 6(1)(e) GDPR)
Where data are processed for the performance of a task carried out in the public interest, they are retained for as long as necessary to fulfil this task or until a valid objection is raised. In such cases, data may be retained beyond this period only where statutory retention or limitation periods apply.

Legitimate Interests (Art. 6(1)(f) GDPR)
Where data processing is based on legitimate interests, data are stored only as long as necessary to safeguard those interests or until a legitimate objection is raised. Extended storage occurs only where legally required.

Note on further processing for scientific or historical purposes
In accordance with its mission, the University may process personal data for archiving purposes in the public interest or for scientific or historical research purposes (pursuant to Art. 5(1)(b) GDPR). In such cases, data subjects are informed separately.

Hyperlinks to External Websites
Our websites contain hyperlinks to websites of other providers. When activating such hyperlinks, you will be redirected from one of our websites directly to the external site. You can recognise this, among other things, by the change in URL or by the external link icon (usually an arrow). Please note that we cannot assume responsibility for the handling of your personal data on these third-party websites, as we have no control over their compliance with data protection regulations. Please consult the respective privacy policies of those external websites for information on how your data is handled.

Transfers to Third Countries
As a rule, personal data will not be transferred to countries outside the EU or EEA ("third countries"). If, in exceptional cases, such a transfer becomes necessary, it will only take place in strict compliance with the requirements of the General Data Protection Regulation (Articles 44 et seq. GDPR). This includes, in particular, the existence of an adequacy decision by the European Commission or the implementation of appropriate safeguards such as standard contractual clauses. In the absence of such safeguards, a data transfer to a third country may only occur if an exception under Article 49 GDPR applies — for example, your explicit consent, necessity for contract performance, or for the establishment, exercise, or defence of legal claims.

Website
For security reasons and to protect the transmission of confidential content that you send to the University of Liechtenstein as the website operator, this site uses SSL or TLS encryption. This ensures that data you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the "https://" in the address bar of your browser and the lock icon in the browser line.

Please note, however, that due to the structure of the internet, it is possible that data protection regulations and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, data disclosed in unencrypted form — such as via email — can potentially be read by third parties. We have no technical influence over this. It is your responsibility to protect the data you provide from misuse by encrypting it or using other protective methods.

General Data Processing
In addition, we implement appropriate technical and organisational security measures in all data processing activities to protect your personal data against accidental or intentional manipulation, partial or total loss, destruction, or unauthorised access by third parties. These measures are continuously improved and adapted in line with technological developments.

Microsoft 365 (M365) is a platform for collaboration, communication, and productivity, used by individual users, teams, and across organisational units. Below, we provide information about the processing of your personal data in connection with the use of M365.

As a data subject, you have the following rights under Articles 15 to 18 and 21 of the General Data Protection Regulation (GDPR) with regard to the processing of your personal data:

• You may request further information about how we process your personal data. We are happy to provide this upon request.
• You have the right to request access to your personal data, including a copy of the data we hold about you (subject access request).
• You may object to the processing of your personal data, particularly in connection with direct marketing activities.
• You have the right to have inaccurate or incomplete personal data rectified, completed, or supplemented with a dispute annotation.
• You may request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
• Where the processing is based on your consent, you may withdraw your consent at any time with future effect. Please note that the lawfulness of data processing carried out prior to the withdrawal remains unaffected.

If you wish to exercise any of these rights, please contact us (see section “Controller and Contact Details”). In most cases, we will need to verify your identity (e.g. by requesting a copy of your identification document).

Furthermore, you are entitled to lodge a complaint with a supervisory authority. In Liechtenstein, the competent authority is: 

Data Protection Office (in German: Datenschutzstelle)
Kirchstrasse 8,
P.O. Box 684,
FL-9490 Vaduz
T +423 236 60 90
E-mail: info.dss@llv.li