Privacy policy according to GDPR

1. General matters on data processing

The operators of these sites take protection of your personal data seriously. We treat your personal data confidentially and in accordance with the statutory data protection directives as well as this privacy policy.

1.1 Scope of the processing of personal data

As a matter of principle, we only process our users' personal data to the extent that this is necessary to provide a functional website and our contents and services. Our users' personal data are regularly only processed following consent by the user. An exception applies in the cases in which previous obtaining of the consent is not possible for factual reasons and processing of the data has been permitted by statutory directives. 

1.2 Duration of storage and erasure of data

The data subjects' personal data are erased or blocked as soon as the purpose of storage no longer applies. Storage exceeding this may be possible if this has been provided for by European or national legislation in ordinances, acts or other directives to which the controller is subject. Blockage or erasure of the data also takes place if a storage period prescribed by one of the aforementioned norms expires, unless there is a necessity for further storage of the data for conclusion or performance of a contract.

1.3 SSL and TLS encryption

For security reasons and to protect the transmission of confidential contents such as orders or inquiries which you send to us as the operator of the site, this site uses an SSL or TLS encryption. An encrypted connection can be recognised by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in the browser line.

When the SSL or TLS encryption is activated, the data which you transmit to us cannot be read by third parties.

 

2. Data protection officer

We have appointed a data protection office for our enterprise.

Swiss Tracking Solution AG

Seestrasse 20

CH-6052 Hergiswil

Switzerland


E-Mail: office@sts-ag.com

 

3. Legal basis

To the extent that we obtain the data subject's consent for processing personal data, Art. 6 subparagraph 1 lit. a European General Data Protection Regulation (GDPR) serves as the legal basis.

In the processing of personal data necessary for performance of a contract to which the data subject is a contracting party, Art. 6 subparagraph 1 lit. b GDPR serves as the legal basis. This also applies to processing which is necessary for performance of pre-contractual measures.

To the extent that processing of personal data is necessary to fulfil a legal duty to which our enterprise is subject, Art. 6 subparagraph 1 lit. c GDPR serves as the legal basis.

In the event of vital interests of the data subject or of another person making processing of personal data necessary, Art. 6 subparagraph 1 lit. d GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our enterprise or of a third party and if the interests, basic rights and basic freedoms of the data subject do not override the former interest, Art. 6 subparagraph 1 lit. f GDPR serves as the legal basis for the processing.

 

4. Data recording on our website

4.1 Description and scope of the data processing

Each time our internet site is accessed, our system automatically records data and information from the computer system of the accessing computer (server log files). 

The following data are recorded:

  • Browser type and browser version
  • Operating system used
  • Referrer URL (= site previously visited)
  • Host name of the accessing computer
  • Date and time of the access
  • IP address
  • Name of the accessed site/file
  • Quantity of data transmitted

 

4.2 Legal basis for the data processing 

The legal basis for the temporary storage of the data and the log files is Art. 6 subparagraph 1 lit. f GDPR.

4.3 Purpose of data processing

The provider only uses the protocol data for statistical evaluations for the purpose of operation, security and optimisation of the offer. However, the provider reserves the right to examine the protocol data subsequently if a justified suspicion of unlawful use exists on the basis of specific indications. 

These data are not put together with other sources of data. 

These purposes are also our legitimate interest in data processing in accordance with Art. 6 subparagraph 1 lit. f GDPR.

4.4 Duration of storage

The data are erased as soon as they are no longer necessary for the achievement of the purpose of their recording. As a rule, this is after 1 year. 

4.5 Possibility of objection and removal

Recording of the data for provision of the website and storage of the data in log files is absolutely necessary for the operation of the internet site. For this reason, the user does not have any possibility of objection. 

 

5. Use of cookies

5.1 Description and scope of the data processing

Some of the internet sites use so-called cookies. Cookies serve to make our offer user-friendlier, more effective and more secure. Cookies are small text files which are placed on your computer and which your browser stores. 

Most of the cookies used by us are so-called "session cookies". They are automatically deleted after the end of your visit. These cookies make it possible for us to identify your browser, e.g. in a protected personal area (login).

Other cookies remain stored on your terminal device until you delete them. These cookies make it possible for us to recognize your browser again at your next visit and to take over information like language settings automatically.

No user-relevant data are stored in cookies. 

5.2 Legal basis for the data processing

The legal basis for the processing of personal data making use of cookies is Art. 6 subparagraph 1 lit. f GDPR.

5.3 Purpose of data processing

The purpose of the use of technically necessary cookies is to simplify the use of the websites for the users. Some functions and areas of our internet site cannot be offered without the use of cookies. For them, it is necessary for the browser to be recognised again after a change of site.

These purposes are also our legitimate interest in data processing in accordance with Art. 6 subparagraph 1 lit. f GDPR. 

5.4 Duration of storage, possibility of objection and removal

Cookies are stored on the user's computer and transmitted to our site by it. For this reason, you as the user also have complete control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies which have already been stored can be deleted at any time. If cookies are deactivated for our website, not all the functions of the website can be completely used any more.

 

6. Analyse Tools – Google Analytics

6.1 Description and scope of the data processing

This website uses functions of the Google Analytics web analysis service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 

Google Analytics uses so-called "cookies". These are text files which are stored on your computer and enable an analysis of the use of the website by you. The information generated by the cookie about your use of this website is transmitted to a Google service in the USA and stored there as a rule. 

Storage of Google Analytics cookies is done on the basis of Art. 6 subparagraph 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of the users' conduct in order to optimise his offer. 

6.2 Legal basis for the data processing

The legal basis for the processing of the data if the user's consent exists is Art. 6 subparagraph 1 lit. a GDPR.

6.3 Purpose of data processing

Processing of these data is done exclusively for statistical purposes to determine the users' conduct when visiting our website.

6.4 Processing

We have concluded an agreement with Google for commissioned processing and completely implement the strict requirements of the data protection authorities in the use of Google Analytics. 

6.4.1 Demographic features with Google Analytics

This website can use the "demographic features" function of Google Analytics. In this way, reports containing information on the age, gender and interests of the site visitors can be produced. These data come from interest-related advertising by Google and from visitors' data from third-party providers. These data cannot be assigned to a specific person. You can deactivate this function at any time via the display settings in your Google account or generally prevent recording of your data by Google Analytics as shown in the point "Objection to data recording". 

6.4.2 IP anonymization

On this website, we have activated the IP anonymization function. In this way, your IP address is curtailed by Google within member states of the European Union or in other contracting states of the European Economic Area Treaty before transmission to the USA. Only in exceptional cases is the complete IP address transmitted to a Google server in the USA and curtailed there. By order of the operator of this website, Google will use this information in order to evaluate your use of the website, in order to collate reports about the website activities and in order to render further services connected with the use of the website and the internet for the website operator. The IP address transmitted by your browser within the framework of Google Analytics is not put together with other data by Google.

6.4.2 Duration of storage

The data are erased as soon as they are no longer necessary for the achievement of the purpose of their recording. As a rule, this is after 1 year.

6.4.3 Possibility of objection and removal

You can prevent recording of your data by Google Analytics by clicking on the following link. An opt-out cookie is set and prevents recording of your data in future visits to this website: Deactivate Google Analytics .

You can prevent storage of cookies by a matching setting in your browser software; however, we point out that you will possibly not be able to use all the functions of this website completely in such a case. In addition, you can prevent the recording of the data generated by the cookie and relative to your use of the website (incl. your IP address) to Google and the processing of these data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout

 

7. Newsletter

7.1 Description and scope of the data processing

If you register on our internet site or acquire services, the e-mail address used can be used by us after this for the dispatch of a newsletter. In such a case, the newsletter is exclusively used to dispatch direct advertising for our own goods or services.

In addition, registered users receive relevant information about their members' area or services or commodities which they have purchased.

In connection with data processing for the dispatch of newsletters, there is no forwarding of the data to third parties. 

7.2 Legal basis for the data processing

For direct advertising, the legal basis for the processing of the data following registration for the newsletter by the user is Art. 6 subparagraph 1 lit. f GDPR if consent from the user exists.

Provision of information on the basis of your user data from purchased services, commodities or other areas of the website cannot be revoked. 

7.3 Purpose of data processing

Recording the user's e-mail address serves to provide the newsletter. 

Recording of other personal data within the framework of the registration process serves to prevent misuse of the services or of the e-mail address which is used. 

7.4 Duration of storage

The data are erased as soon as they are no longer necessary for achievement of the purpose of their recording. The user's e-mail address is accordingly stored for as long as the newsletter subscription is active. 

7.5 Possibility of objection and removal

The newsletter subscription can be terminated by the user in question at any time. A matching link is provided in each newsletter for this purpose. 

 

8. Data subject's rights

If personal data concerned with you are processed, you are a data subject within the meaning of the GDPR and the following rights accrue to you vis-à-vis the controller:

8.1 Right to information

You can demand a confirmation from the controller about whether personal data concerned with you are processed by us. 

If such a processing takes place, you can demand notification from the controller about the following information:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data which are processed;

(3) the recipients or categories of recipients to whom the personal data concerned with you have been or are yet to be disclosed;

(4) the planned duration of storage of the personal data concerned with you or, if no specific statement on this is possible, criteria for the stipulation of the duration of storage;

(5) the existence of a right to rectification or erasure of the personal data concerned with you, of a right to restriction of the processing by the controller or of a right to object against this processing; 

(6) the existence of a right of complaint to a supervisory authority;

(7) all the available information about the origin of the data if the personal data are not collected from the data subject;

(8) the existence of automated decision-making including profiling according to Art. 22 subparagraph 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved and the implications and the intended effects of such a processing for the data subject.

You have the right to demand information about whether the personal data concerned with you are transmitted to a third country or to an international organisation. In this context, you can demand to be informed about the adequate safeguards according to Art. 46 GDPR in connection with the transmission.

This right to information can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or seriously impairs them and the restriction is necessary for the fulfilment of the research or statistical purposes.

8.2 Right to rectification

You have a right to rectification and/or completion against the controller to the extent that the processed personal data concerned with you are incorrect or incomplete. The controller must make the rectification without delay.

Your right to rectification can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or seriously impairs them and the restriction is necessary for the fulfilment of the research or statistical purposes.

8.3 Right to restriction of the processing

Under the following preconditions, you can demand the restriction of the processing of the personal data concerned with you:

(1) if you dispute the correctness of the personal data concerned with you for a duration making it possible for the controller to verify the correctness of the personal data;

(2) the processing is unlawful and you reject erasure of the personal data and demand restriction of the use of the personal data instead;

(3) the controller no longer needs the personal data for the purpose of processing, but you need them to establish, to exercise or to defend legal claims or

(4) if you have objected to the processing according to Art. 21 subparagraph 1 GDPR and it is not yet clear whether the controller's legitimate reasons override your reasons.

If the processing of the personal data concerned with you has been restricted, these data - apart from their storage - may only be processed with your consent or to establish, to exercise or to defend legal claims or for the protection of the rights of a natural or a legal entity or for reasons of an important public interest.

If the processing has been restricted according to the aforementioned preconditions, you are informed by the controller before the restriction is rescinded.

Your right to restriction of the processing can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or seriously impairs them and the restriction is necessary for the fulfilment of the research or statistical purposes.

8.4 Right to erasure

8.4.1 Erasure duty

You can demand that the controller erases the personal data concerned with you without delay and the controller is obliged to erase these data without delay to the extent that one of the following reasons applies:

(1) The personal data concerned with you are no longer necessary for the purposes for which they were recorded or processed in any other way.

(2) You withdraw your consent on which the processing was based according to Art. 6 subparagraph 1 lit. a or Art. 9 subparagraph 2 lit. a GDPR and there is no other legal basis for the processing. 

(3) You object to the processing according to Art. 21 subparagraph 1 GDPR and there are no overriding legitimate reasons for the processing or you object to the processing according to Art. 21 subparagraph 2 GDPR. 

(4) The personal data concerned with you have been processed unlawfully. 

(5) Erasure of the personal data concerned with you is necessary for fulfilment of a legal obligation to which the controller is subject. 

(6) The personal data concerned with you were collected in relation to the offer of information society services according to Art. 8 subparagraph 1 GDPR.

8.4.2 Information to third parties

If the controller has made the personal data concerned with you public and if he is obliged to erase them according to Art. 17 subparagraph 1 GDPR, he takes suitable measures. also of a technical nature, in order to inform controllers processing the personal data about the fact that you as a data subject have demanded erasure of all links to these personal data or copies or replications of these personal data, taking the available technology and the costs of implementation into due account. 

8.4.3 Exceptions

The right to erasure does not exist to the extent that processing is necessary 

 (1) for fulfilment of a legal obligation to which the controller is subject;

 (2) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes according to Art. 89 subparagraph 1 GDPR, to the extent that the right stated under section a) prospectively makes implementation of the purposes of this processing impossible or seriously impairs them or

(3) to establish, to exercise or to defence legal claims.

8.4.4 Right to notification

If you have claimed the right to rectification, erasure or restriction of the processing vis-à-vis the controller, the latter is obliged to notify all the recipients to whom the personal data concerned with you have been disclosed of this rectification or erasure of the data or restriction of the limitation, unless this proves to be impossible or is connected with disproportionate efforts.

You have the right vis-à-vis the controller to be notified about these recipients.

8.4.5 Right to data portability

You have the right to receive the personal data concerned with you which you have provided to the controller in a structured, commonly used and machine-readable format. In addition, you have the right to transmit these data to another controller without inhibition by the controller to whom the personal data have been provided insofar as

(1) the processing is based on a consent according to Art. 6 subparagraph 1 lit. a GDPR or Art. 9 subparagraph 2 lit. a GDPR or on a contract according to Art. 6 subparagraph 1 lit. b GDPR and

(2) the processing is done by means of automated methods.

When exercising this right, you further have the right to have the personal data concerned with you transmitted directly by one controller to another controller to the extent that this is technically feasible. Freedoms and rights of other persons may not be impaired by this.

8.4.6 Right to object

You have the right to object to processing of the personal data concerned with you which is done on the basis of Art. 6 subparagraph 1 lit. e or f GDPR for reasons relating to your particular situation; this also applies to profiling based on these provisions. 

The controller no longer processes the personal data concerned with you unless he can prove important reasons worthy of protection for the processing which override your interests, rights and freedoms, or the processing serves to establish, to exercise or to defend legal claims.

If the personal data concerned with you are processed for purposes of direct advertising, you have the right to object against the processing of the personal data concerned with you for the purpose of such advertising at any time; this also applies to the profiling to the extent that it is connected with such direct advertising.

If you object to processing for the purpose of direct advertising, the personal data concerned with you are no longer processed for these purposes.

You have the possibility of exercising your right to object by means of automated procedures in which technical specifications are used in connection with the use of information society services, notwithstanding Regulation 2002/58/EC.

You also have the right to object to the processing of personal data concerned with you done for scientific or historical research purposes or for statistical purposes according to Art. 89 subparagraph 1 GDPR at any time for reasons relating to your particular situation.

Your right to object can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or seriously impairs them and the restriction is necessary for the fulfilment of the research or statistical purposes.

8.5 Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. By withdrawal of the consent, the lawfulness of the processing done on the basis of the consent up to the withdrawal is not affected. It is possible that your use of the services purchased is limited or is no longer accessible as a result of the withdrawal.

8.6 Right to complain to a supervisory authority

Notwithstanding any other administrative law or judicial remedy, the right to complain to a supervisory authority at your place of residence, your workplace or the place of the assumed breach accrues to you if you are of the opinion that the processing of the personal data concerned with you breaches the GDPR. 

The supervisory authority at which the complaint is made notifies the complainant of the status and the outcome of the complaint including the possibility of an effective judicial remedy according to Art. 78 GDPR.

 

 
swiss tracking solutions swiss tracking solutions