The controller within the meaning of the Swiss Federal Act on Data Protection (FADP) is the Institute for Law and Economics at the University of St. Gallen, Varnbüelstrasse 19, 9000 St. Gallen (hereinafter "Organizer").
Contact: legal-hackathon@unisg.ch
This privacy policy provides information on the nature, scope and purpose of the processing of personal data in connection with the Legal Hackathon organized by the Organizer on 7 and 8 November 2026 in St. Gallen (hereinafter "Hackathon") and the associated website (https://www.legalhackathons.org/). The respective data protection provisions of the relevant provider apply to external websites to which reference is made.
In the course of registration and organization of the Hackathon, the Organizer collects the following personal data: first name, last name, e-mail address, degree program and semester, as well as any additional data provided in the registration form. This data is processed exclusively for the organization, conduct and follow-up of the Hackathon and for communication with participants.
Participants have the option of voluntarily uploading a curriculum vitae. This will be shared with the sponsors of the respective challenge in which the participant takes part. The purpose of this disclosure is to enable sponsors to contact participants. By uploading a curriculum vitae, the participant expressly consents to this disclosure. Participants who do not upload a curriculum vitae will not suffer any disadvantage with regard to their participation in the Hackathon.
Photographs and video recordings may be taken during the Hackathon. The Organizer uses such recordings for public relations and reporting purposes, in particular on the Organizer's website and on social media. By registering for the Hackathon, participants generally consent to the creation and use of such recordings. Participants may object to the use of recordings in which they are recognizable at any time or request that they be made unrecognizable by contacting the address stated above.
When a participant completes a form on the Hackathon website (e.g. registration form, contact form), the Organizer processes the data provided insofar as this is necessary to fulfill the respective purpose. This data will be deleted once the purpose of processing no longer applies and no statutory retention obligations exist.
When accessing the Hackathon website, the following data is automatically stored in log files by the hosting provider (GitHub Pages, GitHub Inc., USA): IP address, date and time of access, page accessed, browser type and operating system. This data is used for the technical provision of the website. The Organizer has no direct access to these log files. GitHub's privacy policy applies: GitHub Privacy Statement.
The Hackathon website does not set any cookies itself. However, the website uses the following third-party services which may set cookies or process personal data:
Google Fonts (Google LLC, USA): Used to display fonts. When the page loads, your IP address is transmitted to Google servers.
Google Maps (Google LLC, USA): An embedded map is displayed in the location section. When loaded, Google Maps may set cookies and your IP address is transmitted to Google.
Microsoft Forms (Microsoft Corporation / Microsoft Ireland Operations Ltd.): Used for event registration. When accessing the form, Microsoft may set cookies.
For further information, please refer to Google's privacy policy and Microsoft's privacy policy.
Personal data is only retained for as long as is necessary to fulfill the respective processing purpose. Statutory retention obligations remain reserved. Data will be deleted upon expiry of the applicable retention periods.
The Organizer only discloses personal data to third parties if this is necessary for the conduct of the Hackathon or if a legal obligation exists (e.g. official order, court decision). This does not apply to the disclosure of voluntarily uploaded curricula vitae to the sponsors of the respective challenge pursuant to Section 3 b). Sponsors are obliged to use the data received exclusively for contacting participants and not to pass it on to any further third parties. No further disclosure of personal data will take place without the express consent of the data subject.
Personal data is processed in Switzerland and, to the extent described in this privacy policy, abroad. Specifically: The website is hosted by GitHub Pages (GitHub Inc., USA). Google Fonts and Google Maps are provided by Google LLC (USA), whereby IP addresses are transmitted to Google servers when the page is loaded. The registration form is operated via Microsoft Forms as part of the University of St. Gallen's Microsoft 365 license agreement, with data stored on Microsoft servers within the EU (Microsoft Ireland Operations Ltd.). For data transfers to the USA, the Organizer relies on the respective providers' compliance with applicable data protection standards (Standard Contractual Clauses).
The Organizer takes appropriate technical and organizational measures to protect the integrity and confidentiality of personal data. These include, in particular, access controls and encrypted data transmission via the website using TLS. Access to personal data is granted only to those persons who require it to fulfill their duties. The website is served exclusively via HTTPS (TLS encryption) and hosted on GitHub Pages, which provides infrastructure-level security measures.
The Hackathon website may contain links to third-party websites. The Organizer has no influence on the content or data protection practices of external websites and assumes no responsibility in this regard.
Every data subject has the following rights under applicable data protection law with respect to their personal data: the right to information as to whether and which personal data is being processed; the right to receive or have transferred their personal data in a commonly used electronic format; the right to rectification of inaccurate personal data; the right to deletion; and the right to object to the processing of their personal data. These rights are subject to the statutory requirements and exceptions.
Requests should be directed to legal-hackathon@unisg.ch. In addition, data subjects have the right to enforce their claims in court or to file a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
The Organizer reserves the right to amend this privacy policy at any time with future effect if new technological developments or the legal situation so require.
This privacy policy is governed by Swiss law, in particular the Federal Act on Data Protection (FADP).