Revised: May 2018
SBB AG, Hilfikerstrasse 1, 3000 Bern 65, Switzerland, operates this website and the services offered on it and is thus responsible for processing your data.
Protecting your privacy means a lot to us. We respect your identity and privacy and ensure that they are protected and that your personal data is processed in accordance with the applicable laws.
Personal data includes all the details and information that refer to a specific or identifiable person. In addition to contact details such as your name, telephone number, address and e-mail address, this also includes other details you provide us with, such as your date of birth.
1. HOW DATA IS PROCESSED WHEN YOU VISIT OUR WEBSITE
When customers visit our website, our servers temporarily store each visit in a log file. The following technical data is collected in the process and stored until it is automatically deleted after four weeks at the latest:
- The IP address of the computer requesting access
- The name of the owner of the IP address range (usually your Internet access provider)
- The date and time of access
- The website from which our website is being accessed (referrer URL), including the search term where applicable
- The name and URL of the file being requested
- The status code (e.g. error message)
- The operating system on your computer
- The browser you are using (type, version and language)
- The transmission protocol being used (e.g. HTTP/1.1) and
- Your username from the registration/authentication process, where applicable.
This data is processed and collected for the purposes of system security and stability and for analysing errors and performance as well as for internal statistical purposes. In addition, it enables us to optimise our website.
The IP address is also used to set the default language on the website. The IP address is also analysed together with the other data when there is an attempt to access the network infrastructure or in the event of another unauthorised or improper use of our website for information and defence purposes and, where applicable, is used for the purposes of identification during criminal proceedings and in civil and criminal procedures against the data subject.
SBB does not accept any guarantee for compliance with data protection regulations for external websites that are linked to SBB websites.
2. HOW DATA IS PROCESSED WHEN YOU USE OUR CONTACT FORM
You have the option of using a contact form to get in touch with us. You must provide the following personal data:
- First name and surname
- E-mail address and
- Message or reason for getting in touch.
We will only use this and other data provided voluntarily (such as your title, address, telephone number and company) to answer your message as accurately and specifically as possible. In addition, any information you voluntarily provide as to how you became aware of our offer is used for internal statistical purposes. Your message will be deleted again after six months.
If you get in touch regarding real estate, in certain cases the data you enter may be transmitted directly to a real estate agent working for us. This agent will also process your data for these purposes only.
3. HOW DATA IS PROCESSED WHEN YOU REGISTER FOR A USER ACCOUNT
In order for you to use all of the features on our website, you may be required to create a user account. To do so, you will need to provide the following data truthfully:
- First name and surname
- E-mail address
- Telephone number
We require this data in order to provide the relevant services on our website, to check that the data you have entered is plausible and to prevent misuse.
4. HOW DATA IS PROCESSED IN CONNECTION WITH NEWSLETTERS
You must provide the following data when you subscribe to a newsletter:
- First name and surname
- E-mail address.
You can also enter your interests voluntarily where applicable. We process this data in order to personalise the information and offers we send you and to tailor them more effectively to your interests.
By registering, you give your consent for us to process the data you have provided for the purposes of regularly sending the newsletter to the address you have indicated, statistically analysing your user behaviour and optimising the newsletter. We are entitled to contract third parties to technically implement our advertising activities and are entitled to disclose your data to this end (see section 5 below).
At the end of each newsletter is a link via which you can unsubscribe from the newsletter at any time. When you unsubscribe, you can voluntarily tell us your reason for doing so. Once you have unsubscribed, your e-mail address will be blocked.
We use third-party e-mail marketing services to send out our newsletter. Our newsletter may therefore contain a so-called web beacon (tracking pixel) or a similar technical tool. A web beacon is an invisible graphic measuring 1×1 pixels which is associated with the user ID of the relevant newsletter subscriber. The use of corresponding services enables us to evaluate whether the e-mails containing our newsletter have been opened. We also anonymously record and analyse your click patterns on the links in the e-mail. We use this data for statistical purposes and to optimise the content and structure of the newsletter.
To prevent the use of the web beacon in our newsletter, please adjust the settings to stop HTML being displayed in messages.
5. DISCLOSING DATA TO THIRD PARTIES
We will only disclose your data to third parties if you have given your express consent, there is a legal obligation to do so or it is necessary for us to do so in order to enforce our rights, in particular to assert claims resulting from our relationship with you.
Where applicable, we may also disclose data to various service providers (e.g. host providers, cloud service providers) as part of our provision and maintenance of the website and the services offered on it. These service providers will only use your data for the purposes mentioned and will equally comply with the applicable data protection and data security requirements.
If the website contains any links to third-party websites, we no longer have any influence over the collection, processing, storage or use of personal data by third parties once you have clicked on these links and do not accept any responsibility in this regard.
In this respect, please also note the information in section 2 (real estate agents), section 4 (e-mail marketing service providers), section 10 (tracking tool providers) and section 11 (social plugin providers).
6. TRANSMISSION OF PERSONAL DATA ABROAD
We are entitled to transmit your personal data to third parties (contracted service providers) abroad. These are obliged to comply with data protection law to the same extent as we are. If the level of data protection in a country does not match that in Switzerland, we shall contractually ensure that your personal data is protected to the same level as in Switzerland at all times.
7. YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA
You have the following rights in relation to your personal data:
- You can request information about the personal data we have stored
- You can request for your personal data to be rectified, supplemented, blocked or deleted
- If you have set up a user account, you can have it deleted
- You can object to your data being used for marketing purposes
To exercise these rights, simply write a letter to:
Data protection officer
CH-3000 Bern 65
or by e-mail: [email protected].
8. DATA SECURITY
We employ suitable technical and organisational security measures to protect the personal data we store from manipulation, partial or total loss and unauthorised access by third parties. Our security measures are continuously improved in line with technological development.
We also take data protection within SBB very seriously. We have required our staff and the service providers we contract to maintain confidentiality and to comply with data protection regulations.
We will take appropriate precautionary measures to protect your data. However, the transmission of information over the Internet and other electronic means always carries certain security risks and we cannot offer any guarantee as regards the security of information transmitted in this way.
Cookies help in many respects to make your visit to our website simpler, more pleasant and more worthwhile. Cookies are information files which your web browser automatically stores on your computer’s hard drive when you visit our website. They do not damage your computer’s hard drive and cannot collect any other data stored on it.
Most web browsers accept cookies automatically. However, you can configure your browser so as to prevent cookies from being stored on your computer or so that a message always appears when you receive a new cookie. Please refer to the websites below for advice on configuring how cookies process your data in the most commonly used browsers:
- Microsoft Windows Internet Explorer
- Microsoft Windows Internet Explorer Mobile
- Mozilla Firefox
- Google Chrome for desktop
- Google Chrome for mobile
- Apple Safari for desktop
- Apple Safari for mobile
Deactivating cookies may mean that you cannot use all of the features on our website.
10. TRACKING TOOLS
We use the web analytics services run by AT Internet and Google Analytics for the purposes of designing and continuously optimising our website in line with customer needs. In this connection, pseudonymised user profiles are created and small text files used which are stored on your computer (see “Cookies” above). The information about your use of this website generated by the cookie is transmitted to the servers of these service providers, where it is stored and prepared on our behalf. In addition to the data outlined in section 1, we also receive the following information under certain circumstances:
- The navigation path via which the visitor is accessing the website
- The length of time spent on the website or subpage
- The subpage from which the visitor leaves the website
- The country, region or city from which the visitor is accessing the website
- The device (type, version, colour depth, resolution, width and height of the browser window) and
- Returning or new visitors.
This information is used to analyse how the website is used, to produce reports about website activity and to provide other services relating to website and Internet use for the purposes of market research and in order to design our website in line with customer needs. Where appropriate, this information may also be transmitted to third parties if required by law or if third parties have been contracted to process this data.
B. GOOGLE ANALYTICS
Google Inc., a company of the US-based holding company Alphabet Inc., provides the Google Analytics service. Before the data is transmitted to the provider, the IP address is shortened by activating the IP anonymisation tool (“anonymizeIP”) on this website for users in member states of the European Union or in other contracting parties to the Agreement on the European Economic Area. Google does not link the anonymised IP address transmitted by your browser as part of the Google Analytics service to other data. Only in exceptional cases will the full IP address be transmitted to one of Google’s servers in the US and shortened there. In such cases, we will contractually guarantee that Google Inc. maintains an adequate level of data protection. According to Google Inc., the IP address is never linked to other data relating to the user.
For more information about the web analytics service used, please visit the Google Analytics website. For an introduction to how you can prevent your data from being processed by the web analytics service, visit https://tools.google.com/dlpage/gaoptout?hl=en. You can also use our opt-out feature to deactivate all trackers on our website.
You can also use our opt-out feature to deactivate all trackers on our website.
C. GA AUDIENCES
D. GOOGLE TAG MANAGER
This website uses Google Tag Manager. This service allows website tags to be managed via a single interface. Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. Google Tool Manager activates other tags, which may then collect data where applicable. However, Google Tag Manager does not access this data. If deactivated at domain or cookie level, it will remain in place for all tracking tags implemented by Google Tag Manager.
E. GOOGLE DYNAMIC REMARKETING
This website uses the remarketing feature of Google Inc. (“Google”). This feature is used to show website visitors ads that are related to their interests within the Google advertising network. The visitor’s browser stores “cookies” – text files that are stored on your computer and allow the visitor to be recognised when they access websites that are part of Google’s advertising network. These pages can then show advertisements relating to content previously viewed by the visitor on websites that use Google’s remarketing function. Google states that it does not collect any personal data during this process. However, if you still wish to disable Google’s remarketing feature, you can do so by changing your settings under http://www.google.com/settings/ads. You can also use our opt-out feature to deactivate all trackers on our website.
F. GOOGLE ADWORDS CONVERSION
We use Google AdWords Conversion Tracking to measure the success of our advertising measures. After certain targets (“conversions”) are achieved on our website – such as sending a contact request – these are recorded by Google. Google uses this information to measure the number of target achievements. In addition, Google uses previously stored cookies to identify which advertisements had been clicked on earlier and were thus crucial for target achievement. Google processes this data on servers in the United States, but does not link it with any personal data stored in your Google Account. You can use our opt-out feature to deactivate all trackers on our website.
We use Google’s DoubleClick function on our website to evaluate the use of our site and to allow us, Google and other advertisers who work with DoubleClick to show you user-relevant advertising. A cookie is installed on your computer’s hard drive for this purpose. This cookie is used to give your browser a pseudonymous identification number and to collect information about the advertisements displayed in your browser and how they are accessed. The information collected by the cookie about your use of websites is generally transmitted to one of Google’s servers in the US and stored there. Based on the data collected, categories of interest are assigned to your browser. These categories are used to place adverts that are relevant to those interests. You can use our opt-out feature to deactivate all trackers on our website.
H. DOUBLECLICK FLOODLIGHT
I. LINKEDIN ANALYTICS
LinkedIn Analytics, a web analytics service provided by LinkedIn, collects and stores data on this website and uses it to create user profiles under pseudonyms. The user profiles are used to analyse visitor behaviour and to design and improve our products and services in line with customer needs. Cookies may be used to this end. Cookies are small text files which are stored locally in the Internet browser cache of the person visiting the website. Cookies enable the Internet browser to be identified again the next time the person visits our website. The pseudonymised user profiles will not be matched up with personal data relating to the data subject behind the pseudonym without their express consent being given separately. You can use our opt-out feature to deactivate all trackers on our website.
J. LINKEDIN ADS
We use the Google reCAPTCHA service offered by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order to prevent spam.
reCAPTCHA is a free service that protects websites from spam and misuse. It uses advanced risk analysis technologies to distinguish between people and bots. With the new API, a significant number of your valid human users will pass the reCAPTCHA challenge without having to solve a CAPTCHA. We use reCAPTCHA to protect forms.
Using reCAPTCHA transmits data to Google which uses it to determine whether the visitor is a person or a (spam) bot. You can find out what data Google collects and the purpose for which it is used at https://policies.google.com/privacy?hl=en-GB.
You can read the terms and conditions of use for Google’s services and products at https://policies.google.com/terms?hl=en.
L. AT INTERNET WEB ANALYTICS SERVICE
We use the web analytics service run by France-based AT Internet on our website. The last three digits of the IPv4 address are deleted immediately after it is collected and before it is further processed to ensure the information is anonymous. IPv6 addresses are not collected or processed. Furthermore, the IP address is not linked to any other information that enables us to identify visitors.
For more information on AT Internet’s measuring process, please visit the AT Internet GmbH website: https://www.atinternet.com/en/company/data-protection/data-collection-on-our-customers-sites/. You can use our opt-out feature to deactivate all trackers on our website.
11. SOCIAL MEDIA PLUGINS
A. ACTIVATING AND DEACTIVATING PLUGINS
We use the social media plugins described below on our website to make it more personal. The plugins are disabled on our website by default, meaning they do not send any data. You can enable all the plugins by clicking “Enable social media” (known as the two-click solution). You can of course disable the plugins again with a single click.
B. HOW DATA IS PROCESSED WHEN PLUGINS ARE ENABLED
When the plugins are enabled, your browser establishes a direct connection with the servers of the relevant social network as soon as you access our website. The social network transmits the content of the plugin directly to your browser, which embeds it in the website.
By embedding the plugin, the relevant provider is notified that your browser has accessed the relevant page on our website, even if you do ot have an account with that particular social network or are not currently logged in to your account. Your browser sends this information (including your IP address and the data outlined in section 1) directly to one of the provider’s servers (usually in the US), where it is stored. This means we have no influence on the scope of the data which the provider collects via the plugin.
If you are logged in to a social network, that network will be able to match up your visit to our website with your user account directly. If you interact with the plugins, the corresponding information will also be transmitted directly to one of the provider’s servers and stored there. What is more, the information may be published on the social network or, in certain cases, displayed to other users of the network.
The social network provider may use this information for advertising and market research purposes or to design its products and services in line with customer needs. To this end, user, interest and relationship profiles may be created, for example in order to analyse your use of our website in relation to the adverts displayed to you on the social network, to inform other users about your activities on our website and to provide other services relating to the use of the social network.
Please refer to the privacy policies of the relevant provider for information on the purpose and scope of data collection, how the social network provider further processes and uses the data, your rights in this regard and the settings options for protecting your privacy.
If you would prefer for the social network provider not to match up the data collected on our website with your user account, you must log out of the relevant social network before enabling the plugins.
C. THE PLUGINS WE USE
You can use the following social plugins on our website:
– Facebook: “LIKE” or “SHARE” button; Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
– Twitter: tweet button; Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
– Google Plus: “+1″button; Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
If you have any questions about data protection on our website, please do not hesitate to get in touch with our contact for data protection law by e-mailing [email protected]. Please refer to section 7 regarding requests for information.