Privacy Statement

We process personal data (from now on “data”) only within the scope of necessity and to provide a functional and user-friendly Internet presence, including its contents and the services offered there.

This data protection declaration is subject to Swiss law. In those areas where the University of St. Gallen (from now on “HSG”) acts as a public body within the meaning of Art. 1 Para. 1 Letter h of the Data Protection Act of the Canton of St. Gallen (from now on “DSG-SG”), the DSG-SG shall apply. In areas where the HSG does not fulfil any state tasks, the Federal Act on Data Protection (from now on “DSG”) shall apply. Where applicable, provisions of the European Union (from now on “EU”), in particular, the EU Data Protection Basic Regulation (from now on “DSGVO”), are also taken into account.

With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or together with others. Also, we will inform you below about the third-party components used by us for optimisation purposes and to increase the quality of use, insofar as third parties process data on their responsibility.

Our data protection declaration is structured as follows:

I. Information about us as responsible persons

II. Rights of users and data subjects

III. Information on data processing

I. Information about us as responsible persons

Responsible provider of this website in the sense of data protection:

Institute for Customer Insight at the University of St. Gallen

Bahnhofstrasse 8

CH-9000 St. Gallen

Phone: +41 (0)71 224 21 35


II. Rights of users and data subjects

Concerning the data processing described in more detail below, users have the right to obtain

– confirmation as to whether data relating to them will be processed; information on the data processed; further information on the data processing and copies of the data;

– the rectification or integration of inaccurate or incomplete data;

– the immediate erasure of data relating to the user or if further processing is necessary, the limitation of such processing;

– to report data protection infringements to the Office for Data Protection of the Canton of St. Gallen, Government Building, 9001 St. Gallen, Switzerland ( If the DSGVO is applicable, there is a right of appeal to the competent data protection supervisory authority.

Also, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any correction or deletion of data or the restriction of the processing. However, this obligation does not exist if this communication is impossible or involves a disproportionate effort. Irrespective of this, the user has a right to information about these recipients.

The users and affected parties have the right to object to the future processing of the data concerning them, provided that the provider processes the data following legitimate interests or consent. In particular, an objection to data processing for the direct marketing is admissible.

III. Information on data processing

We will delete or block your data processed when using our website as soon as the purpose of storage no longer applies, the deletion of the data is not opposed by any legal storage obligations and no other information on specific processing methods is subsequently provided.

Collected data

When collecting and processing personal data, we comply with the legal requirements of the applicable data protection laws. Legal bases are Art. 6 Para. 2 of the Data Protection Act of the Canton of St. Gallen and Art. 13 Para. 1 of the Federal Data Protection Act (DSG) or, if applicable, Art. 6 Para. 1 lit. b and f of the EU-DSGVO.

We might use contact data for marketing purposes for sending information by post. The legal basis for this is the legitimate interest, according to Art. 13 para. 1 of the Federal Data Protection Act (DSG) or, where applicable, Art. 6 para. 1 lit. f of the EU-DSGVO. You may object to this data processing for direct marketing at any time.

Server data

For technical reasons, in particular, to ensure a secure and stable Internet presence, data is transmitted to our web space provider or us via your Internet browser. With these so-called server log files, the type and version of your Internet browser, the operating system, the website from which you switched to our Internet presence (referrer URL), the website(s) of our Internet presence that you visit, the date and time of the respective access and the IP address of the Internet connection from which the use of our Internet presence is made are collected.

This data will be stored temporarily, but not together with other data from you.

Our legitimate interest lies in the improvement, stability, functionality and security of our Internet presence.

We regularly delete the data, as far as no further storage is necessary for proof purposes. Otherwise, the data will be entirely or partially excluded from deletion until the final clarification of an incident.


a) Session cookies/session cookies

We use so-called cookies with our Internet presence. Cookies are small text files or other storage technologies that are stored on your terminal device by the Internet browser you use. These cookies are used to process certain information from you to an individual extent, such as your browser or location data or your IP address.

This processing makes our Internet presence more user-friendly, more effective and safer, as the processing makes it possible, for example, to reproduce our Internet presence in different languages.

The legal basis for this processing is the contractual relationship, insofar as this cookie data is processed to initiate or process the contract.

If the processing does not serve the contract initiation or contract execution, our legitimate interest lies in improving the functionality of our website.

These session cookies are deleted when you close your Internet browser.

b) Third-party cookies

If necessary, cookies from partner companies with whom we cooperate for advertising, analysis or the functionalities of our Internet presence may also be used with our Internet presence.

Please refer to the following information for details, in particular on the purposes and legal basis for processing such third-party cookies.

c) Possibility of disposal

You can prevent or restrict the installation of cookies by setting your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the type of Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the Flash Player you are using. If you have any questions, please also use the help function or documentation of your Flash Player or contact the manufacturer or user support.

Should you prevent or restrict the installation of cookies, this may, however, result in not all functions of our website being entirely usable.

Contact enquiries / Contact possibility

If you contact us via contact form or e-mail, the data you provide will be used to process your enquiry. The data is required for processing and answering your enquiry – without its provision, we cannot answer your enquiry or only to a limited extent.

The legal basis for this processing is the execution and fulfilment of the contract.

Your data will be deleted if your inquiry has been answered conclusively and if there are no legal obligations to retain data to prevent deletion, e.g. in the event of any subsequent processing of a contract.

Google Analytics

We use Google Analytics on our website. This is a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, from now on referred to as “Google”.

Through the certification according to the EU-US data protection shield (“EU-US Privacy Shield”) Google guarantees to maintain a level of data protection equivalent to Swiss and European data protection law.

The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is our legitimate overriding interests. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

Usage and user-related information, such as IP address, location, time or frequency of the visit to our website, is transferred to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. Through this function, Google shortens the IP address already within the EU or EEA.

Google uses the data collected in this way to provide us with an evaluation of the visit to our website and the usage activities there. This data may also be used to provide other services relating to the use of our website and the Internet.

Google states that it does not link your IP address with other data. Besides, Google provides under further data protection information, e.g. on the possibilities of preventing the use of data.

Also, Google offers under a so-called deactivation add-on together with further information. This add-on can be installed with standard Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information on visits to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or other web analysis services. Which other web analysis services we use, you will, of course, also find out in this data protection declaration.


In our internet presence, we use YouTube. This is a video portal of YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, from now on referred to as “YouTube”.

YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.

The certification according to the EU-US data protection shield (“EU-US Privacy Shield”) Google and its subsidiary YouTube guarantee to maintain a data protection level equivalent to Swiss and European data protection law.

We use YouTube in conjunction with the “Extended Privacy Mode” function to display videos for you. The legal basis is our legitimate overriding interest. Our legitimate interest lies in improving the quality of our Internet presence. According to YouTube, the “extended data protection mode” function means that the data described in more detail below will only be transmitted to YouTube’s server if you start a video.

Without this “Extended Privacy Policy”, a connection to the YouTube server in the USA will be established as soon as you access one of our Internet pages on which a YouTube video is embedded.

This connection is necessary in order to display the video on our website via your Internet browser. YouTube will record and process at least your IP address, the date and time and the website you visited. Also, a connection to the advertising network “DoubleClick” is established by Google.

If you are logged in to YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

YouTube permanently stores cookies on your terminal device via your Internet browser for functionality and analysis of user behaviour. If you do not agree with this processing, you have the option of preventing the cookies from being saved by making a setting in your Internet browser. You can find more information on this under “Cookies” above.

Further information on the collection and use of data, as well as your rights and protection options in this regard, are held by Google in the “Google Privacy Policy” section of this website


The present data protection declaration is based on the model data protection declaration of the law firm Weiss & Partner in partially amended form.

Aus ICI wird IMO und IMC

Nach elf erfolgreichen Jahren am Institut für Customer Insight verändern wir uns.

Zukünftig finden Sie Insights, Weiterbildungs- und Kooperationsmöglichkeiten rund um das Thema Mobilität beim Institute for Mobility (IMO-HSG) und alles rund um das Thema Customer Insight am Institute for Marketing and Customer Insight (IMC-HSG).

Wir freuen uns, wenn Sie mit uns in Kontakt bleiben.