Privacy Policy — DF Community — Careers
The Department of Finance (DF) of the University of Zurich (UZH) is pleased that you are visiting DF Community — Careers. The protection of your personal data and your privacy is important to us. The following information explains which data we collect from visitors and users of DF Community — Careers, for what purposes we process this data in accordance with the applicable data protection regulations, and which measures we take to protect it. The general data protection provisions of UZH can be found at: https://www.uzh.ch/en/privacy.html
Status: March 2026 This is a translation of the original statement in German. The translation is provided for information purposes only and has no legal bearing. Only the German document is legally binding.
1. Principles and Subject Matter of Data Protection
1.1 Data protection serves to safeguard your personal rights. It obliges the responsible parties to act lawfully and grants data subjects enforceable rights with regard to the processing of their personal data. 1.2 We adhere to the following principles when processing data: • Purpose limitation: Data is collected and processed only for the purposes stated in this policy. Under no circumstances will your data be sold to third parties or used for commercial advertising. • Data minimisation ("privacy by design"): We only collect the data necessary for the respective purposes and design the platform in such a way that as little personal data as possible is processed. • Data location: Your data is stored and processed on servers located in Switzerland and/or the EU. 1.3 According to § 3 of the Information and Data Protection Act of the Canton of Zurich (IDG ZH), personal data includes all information relating to an identified or identifiable person. This includes, for example, name, postal address, e-mail address, phone number or an IP address, where it can be linked to a person.
2. Functionality of DF Community — Careers
2.1 DF Community — Careers is an information platform on which job postings and events from companies are published in the form of PDF documents and/or structured entries. 2.2 Visitors to the platform — in particular students — do not need to register or log in to view the content. As a rule, no personal data about students is collected beyond the customary logging of access (server log files and anonymised usage statistics). 2.3 Interested students are directed, if they wish to apply, to the application channel specified by the respective company (e.g. application portal, e-mail address, website). The application process takes place outside DF Community — Careers and is governed solely by the respective company's data protection practices.
3. Data from Companies
3.1 The only personal data that DF Community — Careers typically actively collects and stores from companies are: • Contact details for the posting: name of the contact person, e-mail address and, where applicable, phone number; • Billing details: name or company name and address for invoicing as well as, where applicable, other details necessary for billing. 3.2 This data is collected and processed exclusively for the following purposes: • Publication and administration of job and event postings; • Communication with companies in relation to postings and events; • Issuance and processing of invoices; • Compliance with statutory retention obligations, in particular in the area of accounting. 3.3 By submitting a job posting or event, companies and their contact persons consent to the processing of this data for the purposes stated above. 3.4 Data is stored only for as long as necessary for the purposes described or for as long as statutory retention obligations (in particular in the areas of accounting and bookkeeping) require.
4. Server Log Files
4.1 Each time DF Community — Careers is accessed, our hosting provider automatically stores certain technical information in so-called server log files. These include in particular: • IP address of the requesting computer; • Date and time of access; • Requested URL and/or retrieved files and pages; • Volume of data transferred and access status (HTTP status code); • Information on the browser and operating system used. 4.2 On their own, this data does not allow direct identification of a particular person. However, it cannot be ruled out that a person may be identifiable when combined with additional information; therefore, this data may qualify as personal data. 4.3 This data is processed for the following purposes: • Ensuring the secure and stable operation of the platform; • Optimising the use of DF Community — Careers; • Detecting and tracing unauthorised or harmful access attempts (e.g. attacks on the IT infrastructure). 4.4 Web server log files are generally stored for a period of 6 months and then automatically deleted unless a detected attack or other security-relevant incident requires longer storage for evidentiary purposes.
5. Disclosure of Personal Data to Third Parties
5.1 Personal data is not sold to third parties nor passed on for purposes other than those described in this privacy policy. 5.2 Personal data is disclosed to third parties (e.g. authorities or courts) only if: • this is required under mandatory legal provisions or on the basis of official or court orders; or • it is necessary for legal or criminal prosecution (e.g. in the event of attacks on our IT infrastructure, misuse of the platform, or for the enforcement of claims). 5.3 Insofar as external service providers (e.g. hosting providers, internal IT services of UZH) have access to personal data, such access is based on appropriate contractual arrangements and in compliance with applicable data protection requirements.
6. E-Mail Newsletter and Distribution via CleverReach
6.1 DF Community — Careers may offer e-mail newsletters or similar information (e.g. updates on new job and event postings on the DF Community — Careers website) to interested individuals (e.g. students). 6.2 Such e-mails are sent only if you have explicitly subscribed to them (e.g. by ticking a corresponding checkbox or entering your e-mail address in a subscription form on the website) or if another legal basis permits this. 6.3 For managing subscriptions and sending newsletters, the Department of Finance uses the service CleverReach, provided by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. CleverReach is a specialised e-mail marketing provider based in the EU. We have concluded a data processing agreement with CleverReach to ensure that CleverReach processes personal data solely in accordance with our instructions and in compliance with applicable data protection regulations. 6.4 In connection with the newsletter, the following data is in particular processed: • E-mail address (mandatory); • Where applicable, affiliation (e.g. status as student or alumnus/alumna), insofar as this is required to segment newsletter content; • Information related to your use of the newsletter (e.g. time of registration and confirmation, technical delivery information, open and click rates), insofar as this is necessary for the secure operation and optimisation of the newsletter. These usage data are anonymised or pseudonymised to the greatest extent possible. 6.5 The data is stored by CleverReach on servers in the EU and is used exclusively for the purpose of sending and analysing the newsletters on our behalf. Independent disclosure of this data by CleverReach to third parties is contractually prohibited unless legally required. 6.6 You may unsubscribe from the newsletter at any time, e.g. via the unsubscribe link contained in each e-mail or by contacting us at the address specified in section 14. After unsubscribing, your e-mail address will be deleted or technically blocked for newsletter distribution, unless statutory retention obligations or overriding interests justify longer storage (e.g. proof of consent for a certain period).
7. Tracking Settings (Matomo)
7.1 To better tailor the structure and content of DF Community — Careers to the needs of its users, page views and clicked elements within the pages are logged and analysed. For this purpose, we use the software Matomo. 7.2 Matomo uses so-called "cookies" (see also section 8). The usage information generated by these cookies, including truncated IP addresses, is not transmitted to third parties, but stored on UZH servers for the purpose of usage analysis and website optimisation. 7.3 In this process, IP addresses are promptly anonymised (e.g. by truncating the last blocks of digits), so that no conclusions can be drawn about a specific individual.
8. Cookies
8.1 When you access DF Community — Careers, so-called cookies may be used. These are small files stored on your device that enable optimal use of the website and the creation of usage statistics. 8.2 In particular, we use: • Temporary (session) cookies: These are required for the functioning of certain pages and are automatically deleted at the end of the session. • Analytics cookies (Matomo): These are used for anonymised usage analysis (see section 7). 8.3 You can generally prevent the use of cookies by adjusting the settings in your web browser (e.g. "Do not accept cookies" or "Delete cookies when closing the browser"). Please note that rejecting, blocking or deactivating cookies may lead to restrictions in the functionality of DF Community — Careers.
9. Links to Websites of Other Providers
9.1 This privacy policy applies exclusively to DF Community — Careers. 9.2 Where links provide access to content of other providers — in particular to the application portals of advertising companies — please refer to the respective providers' privacy policies. 9.3 The Department of Finance is neither responsible for the content nor for the data protection practices of such providers and, in particular, cannot guarantee that their content is free from malware.
10. Data Security
10.1 The Department of Finance employs technical and organisational security measures to ensure that data collected and processed via DF Community — Careers is: • treated confidentially and protected from accidental or unlawful access, alteration or disclosure, as well as from loss and destruction; • accessible only to those persons who require such access in order to perform their duties ("need-to-know" principle). 10.2 The type and scope of these measures depend on: • the sensitivity of the data; • the nature, scope, context and purpose of processing; and • the current state of the art.
11. Rights of Data Subjects
11.1 Data subjects — in particular contact persons of posting companies and newsletter subscribers — have the following rights regarding their personal data, in accordance with applicable data protection law: • Right of access: You may request information about whether and which personal data we process about you. • Right to rectification: You may request the correction of inaccurate or the completion of incomplete personal data. • Right to erasure: You may request the deletion of your personal data ("right to be forgotten"), provided no statutory retention obligations or other legal reasons oppose this. • Right to restriction of processing: You may request that the processing of your data be restricted. • Right to object: You may object to the processing of your data with effect for the future, insofar as the processing is not based on a mandatory legal basis. 11.2 To exercise these rights, please contact us using the contact details provided in section 14.
12. Withdrawal of Consent
12.1 Where data processing is based on your consent, you may withdraw this consent at any time with effect for the future. 12.2 To do so, it is sufficient to send an e-mail to the address specified in section 14. The lawfulness of processing carried out prior to the withdrawal remains unaffected.
13. Changes to this Privacy Policy
13.1 The Department of Finance reserves the right to amend this privacy policy at any time with effect for the future, in particular if this is necessary due to the implementation of new technologies, the further development of DF Community — Careers, or changes in legal requirements. 13.2 The current version of this privacy policy is published on DF Community — Careers. We recommend that you review this privacy policy regularly.
14. Contact Details
Responsible for DF Community — Careers (operator): Department of Finance, University of Zurich Plattenstrasse 14 CH-8032 Zurich careers@df.uzh.ch Data Protection Office of the University of Zurich: University of Zurich — Legal Services and Data Protection Hirschengraben 60 CH-8001 Zurich E-mail: privacy@rud.uzh.ch Website: https://www.uzh.ch/en/privacy.html