Revised: May 2018
SBB AG, Hilfikerstrasse 1, 3000 Bern 65, Switzerland, operates this website and the services offered on it and is thus responsible for processing your data.
Protecting your privacy means a lot to us. We respect your identity and privacy and ensure that they are protected and that your personal data is processed in accordance with the applicable laws.
Personal data includes all the details and information that refer to a specific or identifiable person. In addition to contact details such as your name, telephone number, address and e-mail address, this also includes other details you provide us with, such as your date of birth.
1. How data is processed when you visit our website
When customers visit our website, our servers temporarily store each visit in a log file. The following technical data is collected in the process and stored until it is automatically deleted after four weeks at the latest:
- The IP address of the computer requesting access
- The name of the owner of the IP address range (usually your Internet access provider)
- The date and time of access
- The website from which our website is being accessed (referrer URL), including the search term where applicable
- The name and URL of the file being requested
- The status code (e.g. error message)
- The operating system on your computer
- The browser you are using (type, version and language)
- The transmission protocol being used (e.g. HTTP/1.1) and
- Your username from the registration/authentication process, where applicable.
This data is processed and collected for the purposes of system security and stability and for analysing errors and performance as well as for internal statistical purposes. In addition, it enables us to optimise our website.
The IP address is also used to set the default language on the website. The IP address is also analysed together with the other data when there is an attempt to access the network infrastructure or in the event of another unauthorised or improper use of our website for information and defence purposes and, where applicable, is used for the purposes of identification during criminal proceedings and in civil and criminal procedures against the data subject.
SBB does not accept any guarantee for compliance with data protection regulations for external websites that are linked to SBB websites.
2. How data is processed when you use our contact form
You have the option of using a contact form to get in touch with us. You must provide the following personal data:
- First name and surname
- E-mail address and
- Message or reason for getting in touch.
We will only use this and other data provided voluntarily (such as your title, address, telephone number and company) to answer your message as accurately and specifically as possible. In addition, any information you voluntarily provide as to how you became aware of our offer is used for internal statistical purposes. Your message will be deleted again after six months.
If you get in touch regarding real estate, in certain cases the data you enter may be transmitted directly to a real estate agent working for us. This agent will also process your data for these purposes only.
3. How data is processed when you register for a user account
In order for you to use all of the features on our website, you may be required to create a user account. To do so, you will need to provide the following data truthfully:
- First name and surname
- E-mail address
- Telephone number
We require this data in order to provide the relevant services on our website, to check that the data you have entered is plausible and to prevent misuse.
4. How data is processed in connection with newsletters
You must provide the following data when you subscribe to a newsletter:
- First name and surname
- E-mail address.
You can also enter your interests voluntarily where applicable. We process this data in order to personalise the information and offers we send you and to tailor them more effectively to your interests.
By registering, you give your consent for us to process the data you have provided for the purposes of regularly sending the newsletter to the address you have indicated, statistically analysing your user behaviour and optimising the newsletter. We are entitled to contract third parties to technically implement our advertising activities and are entitled to disclose your data to this end (see section 5 below).
At the end of each newsletter is a link via which you can unsubscribe from the newsletter at any time. When you unsubscribe, you can voluntarily tell us your reason for doing so. Once you have unsubscribed, your e-mail address will be blocked.
We use third-party e-mail marketing services to send out our newsletter. Our newsletter may therefore contain a so-called web beacon (tracking pixel) or a similar technical tool. A web beacon is an invisible graphic measuring 1×1 pixels which is associated with the user ID of the relevant newsletter subscriber. The use of corresponding services enables us to evaluate whether the e-mails containing our newsletter have been opened. We also anonymously record and analyse your click patterns on the links in the e-mail. We use this data for statistical purposes and to optimise the content and structure of the newsletter.
To prevent the use of the web beacon in our newsletter, please adjust the settings to stop HTML being displayed in messages.
5. Disclosing data to third parties
We will only disclose your data to third parties if you have given your express consent, there is a legal obligation to do so or it is necessary for us to do so in order to enforce our rights, in particular to assert claims resulting from our relationship with you.
Where applicable, we may also disclose data to various service providers (e.g. host providers, cloud service providers) as part of our provision and maintenance of the website and the services offered on it. These service providers will only use your data for the purposes mentioned and will equally comply with the applicable data protection and data security requirements.
If the website contains any links to third-party websites, we no longer have any influence over the collection, processing, storage or use of personal data by third parties once you have clicked on these links and do not accept any responsibility in this regard.
In this respect, please also note the information in section 2 (real estate agents), section 4 (e-mail marketing service providers), section 10 (tracking tool providers) and section 11 (social plugin providers).
6. Transmission of personal data abroad
We are entitled to transmit your personal data to third parties (contracted service providers) abroad. These are obliged to comply with data protection law to the same extent as we are. If the level of data protection in a country does not match that in Switzerland, we shall contractually ensure that your personal data is protected to the same level as in Switzerland at all times.
7. Your rights in relation to your personal data
You have the following rights in relation to your personal data:
- You can request information about the personal data we have stored
- You can request for your personal data to be rectified, supplemented, blocked or deleted
- If you have set up a user account, you can have it deleted
- You can object to your data being used for marketing purposes
To exercise these rights, simply write a letter to:
Data protection officer
CH-3000 Bern 65
or by e-mail: [email protected].
8. Data security
We employ suitable technical and organisational security measures to protect the personal data we store from manipulation, partial or total loss and unauthorised access by third parties. Our security measures are continuously improved in line with technological development.
We also take data protection within SBB very seriously. We have required our staff and the service providers we contract to maintain confidentiality and to comply with data protection regulations.
We will take appropriate precautionary measures to protect your data. However, the transmission of information over the Internet and other electronic means always carries certain security risks and we cannot offer any guarantee as regards the security of information transmitted in this way.
Cookies help in many respects to make your visit to our website simpler, more pleasant and more worthwhile. Cookies are information files which your web browser automatically stores on your computer’s hard drive when you visit our website. They do not damage your computer’s hard drive and cannot collect any other data stored on it.
Most web browsers accept cookies automatically. However, you can configure your browser so as to prevent cookies from being stored on your computer or so that a message always appears when you receive a new cookie. Please refer to the websites below for advice on configuring how cookies process your data in the most commonly used browsers:
- Microsoft Windows Internet Explorer
- Microsoft Windows Internet Explorer Mobile
- Mozilla Firefox
- Google Chrome for desktop
- Google Chrome for mobile
- Apple Safari for desktop
- Apple Safari for mobile
Deactivating cookies may mean that you cannot use all of the features on our website.
10. Tracking tools
For detailed information, please visit Google’s privacy site: https://policies.google.com/privacy?hl=en
We use the Google reCAPTCHA service offered by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order to prevent spam.
reCAPTCHA is a free service that protects websites from spam and misuse. It uses advanced risk analysis technologies to distinguish between people and bots. With the new API, a significant number of your valid human users will pass the reCAPTCHA challenge without having to solve a CAPTCHA. We use reCAPTCHA to protect forms.
Using reCAPTCHA transmits data to Google which uses it to determine whether the visitor is a person or a (spam) bot. You can find out what data Google collects and the purpose for which it is used at https://policies.google.com/privacy?hl=en-GB.
You can read the terms and conditions of use for Google’s services and products at https://policies.google.com/terms?hl=en.
We use the web analytics service run by France-based AT Internet on our website. The last three digits of the IPv4 address are deleted immediately after it is collected and before it is further processed to ensure the information is anonymous. IPv6 addresses are not collected or processed. Furthermore, the IP address is not linked to any other information that enables us to identify visitors.
For more information on AT Internet’s measuring process, please visit the AT Internet GmbH website: https://www.atinternet.com/en/company/data-protection/data-collection-on-our-customers-sites/. You can use our opt-out feature to deactivate all trackers on our website.
Google Web Font
This site uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into ist browser cache in order to display texts and fonts correctly.
To do this, the browser you are using must connect to Google’s servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. If your browser does not support Web Fonts, a standard font is used by your computer.
Adobe Dynamic Tag Management
The Tag Management System is used to transfer data to the tags mentioned and in the form explained here. Cookies may also be used. However, the data is not stored in the Tag Management System.
You can find further data protection information on the Adobe Launch Tag Management System here: https://www.adobe.com/en/privacy/marketing-cloud.html
You can make use of our opt-out function and deactivate all tags on our website.
Google Tag Manager
This website uses Google Tag Manager. This service allows website tags to be managed via a single interface. Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. Google Tool Manager activates other tags, which may then collect data where applicable. However, Google Tag Manager does not access this data. If deactivated at domain or cookie level, it will remain in place for all tracking tags implemented by Google Tag Manager.
11. Social media plugins
a. Activating and deactivating plugins
We use the social media plugins described below on our website to make it more personal. The plugins are disabled on our website by default, meaning they do not send any data. You can enable all the plugins by clicking “Enable social media” (known as the two-click solution). You can of course disable the plugins again with a single click.
b. How data is processed when plugins are enabled
When the plugins are enabled, your browser establishes a direct connection with the servers of the relevant social network as soon as you access our website. The social network transmits the content of the plugin directly to your browser, which embeds it in the website.
By embedding the plugin, the relevant provider is notified that your browser has accessed the relevant page on our website, even if you do not have an account with that particular social network or are not currently logged in to your account. Your browser sends this information (including your IP address and the data outlined in section 1) directly to one of the provider’s servers (usually in the US), where it is stored. This means we have no influence on the scope of the data which the provider collects via the plugin.
If you are logged in to a social network, that network will be able to match up your visit to our website with your user account directly. If you interact with the plugins, the corresponding information will also be transmitted directly to one of the provider’s servers and stored there. What is more, the information may be published on the social network or, in certain cases, displayed to other users of the network.
The social network provider may use this information for advertising and market research purposes or to design its products and services in line with customer needs. To this end, user, interest and relationship profiles may be created, for example in order to analyse your use of our website in relation to the adverts displayed to you on the social network, to inform other users about your activities on our website and to provide other services relating to the use of the social network.
Please refer to the privacy policies of the relevant provider for information on the purpose and scope of data collection, how the social network provider further processes and uses the data, your rights in this regard and the settings options for protecting your privacy.
If you would prefer for the social network provider not to match up the data collected on our website with your user account, you must log out of the relevant social network before enabling the plugins.
c. The plugins we use
You can use the following social plugins on our website:
- Facebook: “LIKE” or “SHARE” button; Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
- Twitter: tweet button; Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
- Google Plus: “+1″button; Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
If you have any questions about data protection on our website, please do not hesitate to get in touch with our contact for data protection law by e-mailing [email protected]. Please refer to section 7 regarding requests for information.