Last Update: 03.11.2025
Your privacy is important to us. This Privacy Policy explains how GECo (referred to as "we", "us", or "our"), as the data controller, collects, uses, discloses, and protects your personal data when you visit and use our website and / or attend our events.
You can request to delete any data we store about you. NOTE: Deletion requests may be temporarily refused if there is a legitimate reason, e.g. payment processing, invoice tracing, tax obligations, or if we have a legal obligation to retain it.
Contact Details
VSETH GECo
Universitätstrasse 6
8092 Zürich
Switzerland
Email: vorstand<ät>geco.ethz.ch
General Data
Website Account Information
Possession of a website account is linked with the storage of the following user data:
- Username
- Password hash
- Unlocked achievements
- Steam ID (optional, only if linked to account)
- Discord ID (optional, only if linked to account)
- Profile picture (optional)
- Assigned tickets for seated events (PolyLAN and RPG Day):
- Associated event
- Seat category
- Ticket type (might include student status)
- Seat
- Check-in status
- Orders:
- Date of payment
- Method of payment
- Items with quantity and price
- Status
When?
Upon registering, users are required to provide a username, an email address, and a password. Optionally, users can add a picture to their profile and / or link their Steam and Discord accounts. Additionally, upon buying a ticket for either PolyLAN or RPG Day your attendance and order information for that event is recorded.
Why?
To have a functional account system and event management system.
How Long?
Until the account is deleted.
Third-Parties
The following data is not shared with any third-parties:
- Password hash
- Attended events (if no achievement for that event exists)
- Assigned tickets for seated events
- Orders (an order ID might be shared with the payment provider)
The following data is publicly available on the users profile:
- Username
- Unlocked achievements
- Profile picture (if set)
- Discord account (if linked)
- Steam account (if linked)
Website HTTP Request Information
All HTTP requests made to the website which contains the following data:
- IP address of the client
- URL of accessed page
- Request parameters
- Timestamp
When?
When you access our website, we store the HTTP request information in a log file.
Why?
For debugging purposes.
How Long?
This data is stored an indefinite amount of time. Log files are deleted irregularly.
Third-Parties
This data is not shared with any third-parties.
Event Pictures
Pictures of people taken at the events.
When?
When attending events, it is possible that participants are photographed by us.
Why?
For marketing purposes (Discord, Instagram, etc.).
How Long?
Until requested for deletion.
Third-Parties
This data is not shared with any third-parties but is often publicly available.
PolyLAN
This section is only applicable if you attend PolyLAN
MAC Address to GECo Account Mapping
A mapping of MAC addresses to GECo website accounts.
When?
Before accessing our Network at the PolyLAN, users are required to login with their website account. On doing so, we store a mapping of their device MAC address to their website account.
Why?
This is required such that we can verify that only users with a valid ticket can access the network and the network switch knows which MAC address is logged in.
How Long?
Until the next PolyLAN at most.
Third-Parties
This data is not shared with any third-parties.
Board Game Days
This section is only applicable if you attend the Board Game Day
Legal Name
The full legal name of the participant.
When?
When first paying for the event each semester, your full legal name is recorded.
Why?
So that we know who has already payed for the current semester of Board Game Days.
How Long?
Until requested for deletion.
Third-Parties
This data is stored in a Google Drive sheet and is thus also shared with Google.
RPG Days
This section is only applicable if you attend the RPG Day
Email Addresses
This concerns the website account email addresses in the context of the RPG Day.
Third-Parties
Website account email addresses might be shared with Gamemasters on some occasions.
Why?
So that GMs are able to contact players if important information has to be shared and players cannot be contacted otherwise (e.g. Discord).