Data protection
What data is recorded?
There are two types of data recorded for campus card management purposes, in addition to purely technical data, namely a numerical identifier and an account number associated with each holder.
- Personal data
This is used to identify the holder. For unambiguous identification on campus three pieces of data are required, the name, the first name and the date of birth; the case where two people have the same name and first name is not uncommon. Also recorded is data useful for contacting the holder: his or her @unil.ch e-mail address and postal address. - Financial data
Bits, credits and account balance associated with the holder.
For what purpose?
Consumption data is recorded in the database used to manage the campus card and catering services so that restaurant owners can justify an invoice in the event of a dispute, but above all for statistical purposes (anonymised) on the products sold.
Disputes over invoicing at checkouts are not dealt with directly by the Campus card team but are passed on to the restaurants, who alone are able to determine whether a complaint is justified.
Debit' data is only used for day-to-day management: payment to restaurants of the price of drinks, collection of the price of photocopies and, in the future, payment to other service providers of the cost of their services. The ‘Credit’ data is used to reimburse users in the event of problems with loading at the terminals.
What kind of protection?
Access to financial data is regulated in the same way for all UNIL data, whether it concerns salaries, invoice payments or campus card transactions.
Access is restricted to authorised UNIL staff (password authentication required), i.e. for the campus card to technicians responsible for maintaining the database and ensuring its smooth operation, to Financial Service staff responsible for making payments to service providers and carrying out the appropriate financial controls, and to the campus card project manager.
Campus card holders have access to the last two years of entries recorded on their personal account via the secure MyUNIL portal (password authentication required).
If the campus card is used to pay in EPFL catering outlets, the following data will be sent to authorised EPFL administrators: cardholder identification, university status granting a preferential rate, account balance and list of transactions.
Where does the money go?
The charging points are regularly collected by security guards, who hand over the money to a local bank. The bank sets up a UNIL account, which pays the service providers their fees and keeps the accounts of the account holders up to date.