Privacy Policy

Data Protection Officer

General Information

Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Swiss Confederation (Federal Data Protection Act, FADP), every person has the right to privacy and protection against misuse of their personal data. We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

Please note that as a Swiss institution, we are subject to Swiss law, but as a provider of services and products in the EU area, we also comply with the GDPR.

In cooperation with our hosting providers, we make every effort to protect the databases as much as possible from unauthorized access, loss, misuse, or falsification.

We would like to point out that data transmission on the Internet (e.g., when communicating by email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.

By using this website, you consent to the collection, processing, and use of data in accordance with the following description. This website can generally be visited without registration. Data such as pages accessed or names of files accessed, date and time are stored on the server for statistical purposes without these data being directly related to your person. Personal data, in particular name, address, or email address, are collected as far as possible on a voluntary basis. No data will be passed on to third parties without your consent.

Processing of Personal Data

Personal data refers to all information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, deletion, storage, modification, destruction, and use of personal data.

We process personal data in accordance with Swiss data protection law. Where and to the extent that the EU GDPR is applicable, we process personal data additionally on the following legal bases in connection with Art. 6 (1) GDPR:

• lit. a) Processing of personal data with the consent of the data subject.
• lit. b) Processing of personal data for the performance of a contract with the data subject and for corresponding pre-contractual measures.
• lit. c) Processing of personal data to comply with a legal obligation to which we are subject under applicable EU law or under applicable law of a country where the GDPR applies in whole or in part.
• lit. d) Processing of personal data to protect the vital interests of the data subject or another natural person.
• lit. f) Processing of personal data to pursue our legitimate interests or those of third parties, unless the fundamental freedoms and rights and interests of the data subject prevail. Legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims, and compliance with Swiss law.

We process personal data for the duration necessary for the respective purpose or purposes. For longer-term retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.

Privacy Policy for Cookies

This website uses cookies. Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user's computer. A cookie is primarily used to store information about a user during or after their visit within an online service. Stored information can include, for example, language settings on a website, login status, a shopping cart, or where a video was watched. The term "cookies" also includes other technologies that fulfill the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also referred to as "user IDs").

The following cookie types and functions are distinguished:

• Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user leaves an online service and closes their browser.
• Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user revisits a website. The interests of users who are used for range measurement or marketing purposes can also be stored in such a cookie.
• First-party cookies: First-party cookies are set by ourselves.
• Third-party cookies: Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
• Necessary (also: essential or absolutely required) cookies: Cookies may be absolutely necessary for the operation of a website (e.g., to save logins or other user inputs or for security reasons).
• Statistics, marketing, and personalization cookies: Furthermore, cookies are usually also used in the context of range measurement and when a user's interests or behavior (e.g., viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used to display content to users, for example, that corresponds to their potential interests. This procedure is also referred to as "tracking," i.e., tracking the potential interests of users. Insofar as we use cookies or "tracking" technologies, we will inform you separately in our privacy policy or in the context of obtaining consent.

Notes on legal bases: The legal basis on which we process your personal data using cookies depends on whether we ask for your consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is your declared consent. Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (e.g., in the business operation of our online service and its improvement) or, if the use of cookies is necessary, to fulfill our contractual obligations.

Third-Party Services

This website uses the following services:

• Google Tag Manager (Google Ireland Limited): a management tool through which the measurement components listed below are loaded. The Tag Manager itself sets no measurement cookies and creates no profiles. It is loaded regardless of your decision; in doing so your IP address is transmitted to Google. Without your consent it starts none of the measurement components listed below.
• Google Analytics 4 (Google Ireland Limited): audience measurement. It records which pages are called up, how visitors found us and whether one of our three form enquiries came about. Only with your consent is information stored on your device in the process (cookies “_ga”, “_ga_*”).
• Google Ads (Google Ireland Limited): measurement of advertising success. It records whether a click on one of our advertisements led to a brochure request, a registration or a Masterclass registration. Only with your consent is information stored on your device in the process (cookies “_gcl_*”).
• Fonts and icons are delivered directly by our website. No connection is made to external font or icon providers.

We use neither Google Maps nor Google reCAPTCHA nor embedded videos. Personal details from our forms – name, email address, telephone number – are not transmitted to Google.

Transfers of data to the USA rely on the Swiss Federal Council having recognised the USA as providing an adequate level of data protection for companies certified under the Swiss-U.S. Data Privacy Framework; for individuals in the European Economic Area, the corresponding adequacy decision of the European Commission on the EU-U.S. Data Privacy Framework applies. Google LLC is certified under these frameworks and additionally relies on the Standard Contractual Clauses.

Further information can be found in the Privacy Policy of Google.

Consent to measurement and advertising

Google Analytics and Google Ads only operate to the extent that you have given your consent. When you first visit, we ask you via a bar at the bottom of the page. Declining is exactly as easy as accepting, and declining has no disadvantages – all content and all forms remain fully available.

You can change your decision at any time: via “Privacy settings” in the footer of every page or via the link at the end of this section. A withdrawal takes effect immediately and for the future; the lawfulness of processing carried out beforehand remains unaffected. Cookies that were set under our own address are deleted by us upon withdrawal; cookies that Google has set under its own address cannot be removed by us technically – you can delete them in your browser.

The legal basis is your consent (Art. 6 (1) lit. a GDPR; for Switzerland Art. 31 (1) revFADP). Your decision is valid for twelve months; after that we ask again. If the range of services used changes, we also ask again.

Record of your decision. We record every decision so that we can demonstrate it. We store only: the time, the version of the text shown to you, the language, the route (bar, detailed selection or withdrawal), the four individual decisions and a randomly generated identifier that is also stored in your browser. We do not store your IP address or your browser identifier, and no link is made to your form data.

Storage of your decision on your device. So that we do not have to ask you again on every page, we store your decision in your browser’s local storage. This storage is strictly necessary for operation and takes place independently of your consent. It contains no personal data and is not transmitted to us.

Open privacy settings and change your decision

Privacy Policy for Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

Privacy Policy for Masterclass Registrations

If you register for a Masterclass (free webinar), we process the data you provide in the registration form (salutation, name, email address as well as voluntary details such as title, phone number, company and position) to organise and run the event. This includes the registration confirmation by email with a calendar entry and the delivery of the access details. The data is stored by us and is not shared with third parties without your consent; we use the service provider Brevo to send the confirmation email.

Independently of this, you can voluntarily consent during registration to receiving information about StGallen imt Business School programmes by email. This consent is not a prerequisite for participation and can be withdrawn at any time with effect for the future, for example by writing to info@stgallenimt.ch.

Privacy Policy for Newsletter Data

If you would like to receive the newsletter offered on this website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

You can revoke your consent to the storage of data, the email address, and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.

Privacy Policy for Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the controller for data processing on this website is located outside the European Economic Area or Switzerland, then Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as Google.

In doing so, Google Analytics processes the pages called up, the referral source, information about browser and device, the approximate geographical area (derived from the shortened IP address) and the fact that one of our three form enquiries came about. The IP address is shortened by Google before it is stored. Name, email address and telephone number from our forms are not transmitted.

Processing takes place only with your consent (see “Consent to measurement and advertising”). Without your consent Google Analytics is not started: no information is stored on your device, you are not recognised, and no measurement data is transmitted to Google.

The data is retained for 14 months. You can withdraw your consent at any time via “Privacy settings” in the footer of every page.

Privacy Policy for Google Ads

We advertise our executive education programmes via Google Ads (Google Ireland Limited). With your consent it is recorded whether a click on one of our advertisements later led to a brochure request, a registration or a Masterclass registration, and where applicable that further advertisements from us may be shown to you. For this purpose a click identifier, the time as well as the programme, programme class and language of the page called up are processed – no personal details from our forms.

Without your consent no attribution to an advertisement takes place. The legal basis is your consent; you can withdraw it at any time via “Privacy settings” in the footer of every page.

Privacy Policy for LinkedIn

We also advertise our programmes on LinkedIn (LinkedIn Ireland Unlimited Company). With your consent, our website loads the LinkedIn Insight Tag. It records that you have visited our pages and allows us to measure whether a click on a LinkedIn advertisement led to a brochure request or a registration, and to show visitors of our website advertisements on LinkedIn at a later point. For this purpose, device and browser information, the page visited and – if you are logged in to LinkedIn – a LinkedIn identifier are processed – no personal details from our forms.

Without your consent the LinkedIn Insight Tag is not loaded. The legal basis is your consent; you can withdraw it at any time via “Privacy settings” in the footer of every page. LinkedIn also processes data in the United States; this is based on the EU standard contractual clauses and the EU-US Data Privacy Framework.

Version of this policy: 2026-08-3. The text of the consent banner carries the same version number; if the range of services used changes, it is incremented and we ask again.