Data protection.

1. Name and contact data of the entity responsible for processing and the company data protection officer

This data protection information applies for data processing by:

Entity responsible: SRS SPITZKE RAIL SWISS AG

Föhrenweg 25
CH-4600 Olten
+41 62 213 85 97
+41 79 172 41 96
www.srs-ag.ch
srs@spitzke.com

The company data protection officer of the SPITZKE Group can be contacted at:

SPITZKE SE
GVZ Berlin Süd
Märkische Allee 39/​41
14979 Großbeeren, Deutschland
+49 33701 901-0
+49 33701 901-190
datenschutz@spitzke.com

2. Collection and storage of personal data and the nature and purpose of its use

a) When visiting the website

When our website www.srs-ag.ch is retrieved by the browser used on your end device, information is automatically sent to the server of our website. This information is temporarily stored in a so-called ‘logfile’. The following information is collected without any activity by you, and is stored until it is automatically deleted:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • The browser used and if necessary the operating system of your computer, and the name of your access provider

The above data is processed by us for the following purposes:

  • To guarantee a smooth connection to the website
  • To guarantee comfortable use of our website
  • To evaluate system security and stability, and
  • for further administrative purposes

The legal basis for data processing is Art. 6 (1) (f) of the GDPR. Our justified interest arises from the purposes of data collection listed above. Under no circumstances shall we use the data collected for the purpose of tracing it back to you as an individual.

We also use cookies and analysis services when our website is visited. More detailed explanations of these are contained in Items 4 and 5 of this data protection policy.

b) When using our contact form

If you have questions of any kind, we offer you the option of contacting us via a form provided on the website. Here, it is necessary to enter a valid e-mail address, so that we know from whom the enquiry is coming, and in order to respond to it. Further information can be provided voluntarily. The data processing for the purpose of contacting us is conducted in accordance with Art. 6 (1) (1) (a) of the GDPR on the basis of your voluntarily granted approval.

The personal data collected by us for the use of the contact form is automatically deleted after the query submitted by you has been dealt with.

3. Forwarding of data

Your personal data is not transferred to third parties for purposes other than those listed above.

We only forward your personal data to third parties when:

  • You have given your express approval in accordance with Art. 6 (1) (1) (a) of the GDPR.
  • The forwarding is required in accordance with Art. 6 (1) (1) (f) of the GDPR for the assertion, implementation or defence of legal claims, and there is no reason to assume that you have an overriding interest in the non-forwarding of your data that is worthy of protection
  • We are legally required to do so in accordance with Art. 6 (1) (1) (c) of the GDPR, and
  • this is legally permissible and is necessary in accordance with Art. 6 (1) (1) (b) of the GDPR for the processing of contractual relationships with you.

4. Cookies

We use cookies on our website. These are small files that are automatically created by your browser, and which are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause damage to your end device, and do not contain viruses, Trojans or other malware.

In the cookie, information is stored that emerges in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity as a result.

The use of cookies serves on the one hand to make the use of our offer more convenient for you. We thus use ‘session cookies’ to detect that you have already visited individual pages of our website. These are automatically deleted when you leave our site.

We also use temporary cookies to optimise user-friendliness, which are stored for a certain specified period on your end device. If you visit our site again, in order to make use of our services, it is automatically detected that you have already visited us and which inputs and settings you have made, so that you don’t have to enter these again.

We also use cookies to gain statistical information about the use of our website, and in order to evaluate it for the purpose of optimising our offer for you (see Item 5). These cookies enable us to automatically detect when you again retrieve the site that you have already visited us. These cookies are automatically deleted after a specific period of time.

The data processed by cookies is required for the purpose of upholding our justified interest and that of third parties in accordance with Art. 6 (1) (1) (f) of the GDPR.

Most browsers automatically accept cookies. You can configure your browser in such a way, however, that no cookies are stored on your computer, or that a notification always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all functions of our website.

5. Analysis tools

a) Tracking tools

The tracking measures listed below and used by us are conducted on the basis of Art. 6 (1) (1) (f) of the GDPR. With the tracking measures used, we aim to ensure a needs-oriented design and ongoing optimisation of our website.

We also use the tracking measures to gain statistical information about the use of our website, and in order to evaluate it for the purpose of optimising our offer for you. These interests are justified in the sense of the above regulation.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Google Analytics

In order to provide a needs-oriented design and ongoing optimisation of our pages, we use Google Analytics, a web service provided by Google Inc. (httpss://www.google.de/​intl/​de/​about/ ) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; below: ‘Google’). In this connection, pseudonymised usage profiles are created and cookies (see Item 4) are used. The information generated by the cookie about your use of this website, such as

  • Browser type/​version
  • operating system used
  • Referrer URL (the page previously visited)
  • host name of the accessing computer (IP address)
  • Time of the server request

is transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports about website activities and to provide further services related to the use of the website and Internet use for market research purposes and the needs-oriented design of our Internet pages.

This information is also transferred to third parties insofar as is legally specified, or if third parties process this data on our behalf. Under no circumstances is your IP address combined with other data in Google’s possession. The IP addresses are anonymised, so that no assignment is possible (IP masking).

You can prevent the installation of cookies by adjusting your browser settings accordingly; however, please note that in this case you may be unable to fully use all features of this website.

You can also prevent the recording of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (httpss://tools.google.com/​dlpage/​gaoptout?hl=de ).

As an alternative to the browser add-on, in particular when browsing on mobile end devices, you can also prevent the recording of data by Google Analytics when you click on this link. An opt-out cookie is set which prevents the future recording of your data when you visit this website. The opt-out cookie only applies in this browser and is only stored for our website on your device. If you delete cookies in this browser, you need to re-set the opt-out cookie.

For further information on data protection in connection with Google Analytics, see e.g. the Google Analytics Help page (httpss://support.google.com/​analytics/​answer/​6004245?hl=de).

6. Social media plug-ins

On the basis of Art. 6 (1) (1) (f) of the GDPR, we use social plugins from the social networks Facebook, Instagram, XING, LinkedIn and YouTube in order to make our company better known through these channels. The commercial purpose behind such a policy is classified as a justified interest in the sense of the GDPR. The responsibility for operation in conformance with the data protection regulations must be guaranteed by the respective supplier.

a) Facebook

On our website, wee use social media plugins from Facebook in order to make its use more personal. If you access a page of our website that contains such a plugin, your browser will create a direct connection to the Facebook servers. The content of the plugin is transferred by Facebook directly to your browser and integrated into the website.

Through the integration of the plugin, Facebook receives the information that your browser has retrieved the corresponding page of our website, even if you do not have a Facebook account or are not logged in to Facebook at the time. This information (including your IP address) is sent directly by your browser to a Facebook server in the USA and is stored there.

If you are logged into Facebook, Facebook can directly assign your visit to our website to your Facebook account. If you interact with the plugins, for example by actuating the Facebook button, the corresponding information is also sent directly to a Facebook server and stored there. The information is also published on Facebook and shown to your Facebook friends.

Facebook can use this information for advertising and market research purposes, and for the needs-oriented design of the Facebook pages. For this purpose, usage, interest and relationship profiles are created by Facebook, e.g. in order to evaluate your use of our website with regard to the advertisements shown to you by Facebook, inform other Facebook users about your activities on our website, and to provide further services related to the use of Facebook.

If you do not wish Facebook to assign the data collected about our web presence to your Facebook account, you must log out of Facebook before visiting our website.

The purpose and scope of the data collection and the further processing and use of data by Facebook, as well as your  related rights and settings options in order to protect your privacy can be found in the data protection information of Facebook (httpss://www.facebook.com/​about/​privacy/).

b) LinkedIn

Our website uses a function of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. If you click on the LinkedIn button (plugin), you are forwarded to our offer at LinkedIn in a separate browser window and can follow us on LinkedIn if you are logged into your user account with LinkedIn. Via the plugin, a direct connection is created between your browser and the LinkedIn server. As a result, LinkedIn receives the information that you have visited our website with your IP address. In addition, LinkedIn is then able to assign your visit to our website to you and your user account – if you are logged into your user account at LinkedIn. Please note that we have no knowledge about the content of the transferred (personal) data or the use of such data by LinkedIn. You can find further information about this in LinkedIn’s data protection policy at: httpss://www.linkedin.com/​legal/​privacy-policy.

c) YouTube

On some of our web pages, YouTube videos are integrated, which are operated by YouTube, LLC 901 Cherry Ave. San Bruno, CA 94066 USA (‘YouTube’). YouTube is a service provided by Google. For the Google address data, see Item 5 a)i). When you visit our page, the IP address, the specific address of the page of our website that you have retrieved, the transferred identity of the browser and the system date and time of the retrieval, and any cookies via which your browser can be clearly identified, are transferred to Google as the operator of YouTube.

Only when the video is played are cookies and pixel tags set by YouTube in order to personalise advertisements and search results. Google may received further data about cookies already stored in your computer. We have no influence over their use by Google. Google is responsible for collecting and processing this data.

You can find further information about handing user data in YouTube’s Data Protection Policy at: httpss://www.google.de/​intl/​de/​policies/​privacy

7. Rights of data subjects 

You have the right:

  • in accordance with Art. 15 of the GDPR to demand information about your personal data processed by us; in particular, information regarding the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data if this has not been collected by us, and the existence of an automated decision-making process, including profiling, and if necessary, clear information regarding the related details;
  • in accordance with Art. 16 of the GDPR to immediately demand the correction of inaccurate data or the completion of personal data stored with us;
  • in accordance with Art. 17 of the GDPR, to demand the deletion of your personal data stored with us, insofar as the processing is not required in order to exert the right to free expression of opinion and information, the fulfilment of a legal obligation, for reasons of public interest or for the assertion, implementation or defence of legal claims;
  • in accordance with Art. 18 of the GDPR to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is contested by you, processing is in breach of the law, but you do not wish the data to be deleted, and we no longer require the data, but you need it to assert, implement or defend legal claims, or you have submitted an objection to the processing in accordance with Art. 21 of the GDPR;
  • in accordance with Art. 20 of the GDPR, to demand the receipt of your personal data that you have provided us, in a structured, standard, electronically readable format, or the transmission of this data to another controller;
  • in accordance with Art. 7 (3) of the GDPR, to revoke your permission granted to us at any time. As a result, we shall no longer be permitted to continue to process the data on the basis of this approval in the future, and
  • in accordance with Art. 77 of the GDPR to submit a complaint to a supervisory authority. Usually, you can contact the supervisory authority of your usual place of abode or workplace, or of our company headquarters, for this purpose.

8. Right to objection

If your personal data is processed on the basis of justified interests in accordance with Art. 6 (1) (1) (f) of the GDPR, you have the right, in accordance with Art. 21 of the GDPR, to object to the processing of your personal data if reasons are given for doing so that arise from your particular situation, or if the objection is made  against direct advertising. In the latter case, you have a general right to object, which is implemented by us without the submission of a particular situation being required.

If you wish to make use of your right to revocation or objection, simply send an e-mail to Datenschutz@spitzke.com

9. Data security 

Within the website visit, we apply the commonly-used SSL (Secure Socket Layer) method in connection with the respective maximum encryption level that is supported by your browser. Usually, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether an individual page on our website is transferred in an encrypted manner by the locked key or padlock symbol in the lower status bar of your browser.

We also use suitable technical and organisational security measures in order to protect your data against random or intentional manipulation, partial or full loss, destruction or access by unauthorised third parties. We are continuously improving our security measures in line with the latest technological developments.

10. Storage periods

The personal data of the data subject is deleted or blocked as soon as the purpose of storage expires. Data can also be stored if this is stipulated by the European or national legislator in European Union directives, laws or other regulations to which the controller is subject. Data is only blocked or deleted when a storage period specified by the above norm expires, unless there is a necessity for storing the data for the conclusion or fulfilment of a contract.

11. Currency and changes to this data protection policy 

This data protection policy is currently valid and was produced in May 2018.

Through the further development of our website and related offers, or due to changes in the legal or official specifications, it may be necessary to modify this data protection policy. The latest version of the data protection policy can be retrieved at any time under httpss://www.spitzke.com/​datenschutz and printed out.