Data privacy policy

Below we inform you which data from your visit is used for which purposes. The protection of your personal data is important to us. If you have any further questions about the handling of your personal data, please do not hesitate to contact us.

I. Name and address of the party responsible

The party responsible within the meaning of the General Data Protection Regulation and other national data protection laws and regulations, which decides about the purposes and means of the processing of personal data, is:

ELRO-WERKE AG

Wohlerstrasse 47

5620 Bremgarten

Switzerland

Phone: +41 56 648 91 11

E-Mail: verwaltung@elro.ch

II. General information about the data processing

1. Scope of the processing of personal data

We process your personal data only as long as this is necessary for the provision of a functional website as well as our contents and services. Your personal data is regularly processed only after obtaining your prior consent. An exception applies in cases, where a prior consent cannot be obtained for technical reasons and the data processing is permissible on the basis of legal provisions.

2. Legal bases for the processing of personal data

Insofar as we obtain the consent of the person concerned for the processing of personal data, art. 6 para. 1 lit. a of the EU Basic Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data required for the fulfilment of a contract with the person concerned, art. 6 para. 1 lit. b of the GDPR serves as the legal basis. This also applies to processing operations that are necessary to execute pre-contractual measures.

Insofar as the processing of personal data is required to fulfil a legal obligation, which we are subject to, art. 6 para. 1 lit. c of the GDPR serves as the legal basis.

In the event that vital interests of the person concerned or another natural person necessitate the processing of personal data, art. 6 para. 1 lit. d of the GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the former interest, art. 6 para. 1 lit. f of the GDPR serves as the legal basis for the processing.

3. Data deletion and storage period

The personal data of the person concerned is deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been stipulated in regulations, laws or other provisions, which the party responsible is subject to. The data is also blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

III. Provision of the website and generation of log files

1. Description and scope of the data processing

Each time our website is called up, our system automatically records data and information from the computer system of the computer calling up. The following data is thereby collected:

file called up
the IP address of the user
date and time of the access
quantity of the data sent in bytes

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for the data processing

Legal basis for the temporary storage of data and the log files is art. 6 para. 1 lit. f of the GDPR.

3. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to facilitate delivery of the website to the user’s computer. The IP address of the user must remain stored for the duration of the session.

Data is stored in log files in order to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our IT systems. In this connection, the data is not analysed for marketing purposes. These purposes also correspond to our legitimate interest in the data processing pursuant to art. 6 para.1 lit. f of the GDPR.

4. Storage duration

The data is deleted once it is no longer necessary for achieving the purpose of its collection. If the data is collected for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, it is deleted at the latest after 6 months. Storage going beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that an allocation of the calling client is no longer possible.

5. Option to object and delete

The collection of the data for the provision of the website and the storage of the data in log files is imperatively necessary to operate the website. The user therefore has no option to object.

IV. Use of cookies

1. Description and scope of the data processing

Our website uses cookies. Cookies are text files, which are stored in the Internet browser or by the Internet browser on the computer system of the user. When you access a website, a cookie may be stored on your operating system. This cookie contains a characteristic character string, which enables unique identification of the browser the next time the website is called up.

We use cookies to make our website more user-friendly. Some elements of our website require that the browser calling up can also be identified after a page change. The following data is stored and transmitted in the cookies:

Log-in information

The log-in information is stored with a cookie named “FreakAuth”. This is a session cookie.

When our website is called up, the user is informed about the use of cookies for analysis purposes and his/her consent to the processing of the personal data used in this context is obtained. In this connection, this data protection declaration is pointed out.

2. Legal basis for the data processing

The legal basis for the processing of personal data using technically required cookies is art. 6, para. 1, lit. f of the GDPR.
If relevant consent of the user is available, the legal basis for the processing of personal data using cookies for analysis purposes is art. 6 para. 1 lit. a of the GDPR.

3. Purpose of the data processing

The purpose of using technically required cookies is to simplify the use of websites for the users. Some functions of our website cannot be offered without the use of cookies. For these, the browser must be recognised even after a page change.

We require cookies for the following applications:

Partner login

The user data collected by technically required cookies is not used for creating user profiles.

The use of cookies that are technically not required enables the website to remember the choices made. For example, the filter settings selected or the language selection.

4. Storage duration, option to object and delete

Cookies are stored on the user's computer and sent from this computer to our site. As a user, you therefore also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be deleted at any time. This can also take place automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to the full extent.

V. Registration

1. Description and scope of the data processing

On our website, we offer partners the option to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not forwarded to third parties. The following data is collected within the scope of the registration process:

Company name
Title
Last name
First name
Address
Post code and place
Telephone
Fax (optional)
E-mail
Country
User name
Password

The following data is also stored at the time of the registration:

The IP address of the user
Date and time of the registration

Consent of the user for the processing of this data is obtained in the course of the registration process.

2. Legal basis for the data processing

If the user’s consent is available, legal basis for the data processing is art. 6 para. 1 lit. a of the GDPR.

3. Purpose of the data processing

A registration of the user is required for the provision of certain contents and services on our website.

4. Storage duration

The data is deleted once it is no longer necessary for achieving the purpose of its collection.

For the data collected during the registration process, this is the case if the registration on our website is cancelled or modified.

5. Option to object and delete

As a user, you always have the option to cancel the registration. You can have the data stored about you modified at any time.

VI. E-mail contact

1. Description and scope of the data processing

You can contact us via the provided e-mail address. In this case, the personal data of the user transmitted with the e-mail is stored.

In this context, the data is not forwarded to third parties. The data is used exclusively for processing the conversation.

2. Legal basis for the data processing

Legal basis for processing the data, which is transmitted in the course transmission of an e-mail, is art. 6 para. 1 lit. f of the GDPR. If the aim of the e-mail contact is the conclusion of a contract, art. 6 para. 1 lit. b of the GDPR is the additional legal basis for the processing.
3. Purpose of the data processingIn case of a contact via e-mail, this is also the required legitimate interest in the processing of the data. The other personal data processed during the sending process is used to prevent a misuse of the contact form and to ensure the security of our IT systems.

4. Storage duration

The data is deleted once it is no longer necessary for achieving the purpose of its collection. For the personal data sent via e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be noticed from the circumstances that the matter concerned has been clarified conclusively.The personal data additionally collected during the sending process is deleted at the latest after a period of seven days.

5. Option to object and delete

If you contact us via e-mail, you can object to the storage of your personal data at any time. The conversation cannot be continued in such a case.

An informal e-mail notification to the following address is sufficient for this: verwaltung@elro.ch

In this case, all the personal data that has been stored in the course of the contact is deleted.

VII. Web analysis using Google Analytics

1. Scope of the processing of personal data

This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses cookies; these are saved on the user’s computer and allow an analysis of the use of the website (for cookies, refer above). If individual pages of our website are called up, the following data is stored:

The IP address of the user’s system calling up
Address and title of the page visited or of files downloaded
The website, from which the user has come to the website called up (referrer)
The sub-pages that are visited from the website called up
The dwell time on the website
The frequency of calling up the website
Screen resolution
Browser type
Browser version
Browser window size
Colour depth
Browser language
Java plug-in activated or not
Flash version

The information generated by the cookie about your use of this website is usually sent to a Google server in the USA and stored at this location. Google uses this information on our behalf to evaluate the use of our website, to prepare reports about the website activities and to render additional services associated with the use of the website and Internet vis-à-vis us.

2. Legal basis for the processing of personal data

Legal basis for the processing of the personal data of users is art. 6 para. 1 lit. f of the GDPR.

3. Purpose of the data processing

The processing of the personal data of users allows us to analyse the surfing behaviour of our users. Thanks to the evaluation of the data collected, we are able to compile information about the use of the individual components of our website. This helps us in continuously improving our website and its user-friendliness. These purposes also correspond to our legitimate interest in the data processing pursuant to art. 6 para.1 lit. f of the GDPR. By anonymising the IP address, we do sufficient justice to the users’ interest in the protection of their personal data.

4. Storage duration

The data is deleted once it is no longer required for our recording purposes.

5. Option to object and delete

6. Information about the third-party provider Google

Address: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

User conditions: https://www.google.com/analytics/terms/en.html

Overview of data protection: https://safety.google/?hl=en

Data protection declaration: https://policies.google.com/privacy?hl=en

7.Disabling Google Analytics

You can prevent Google Analytics from collecting data by clicking on the button below. This sets an opt-out cookie which prevents the future collection of your data when visiting this website: Disable Google Analytics for this site.

VIII. Data protection regulations about the use of YouTube

For the integration of videos, our website uses the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Your IP address is normally sent to YouTube and cookies are installed on your computer right when you call up a page with embedded videos. But we have integrated our YouTube videos with the extended data protection mode (in this case, YouTube still contacts the Double Click service from Google; but according to the data protection declaration, Google thereby does not analyse personal data). Thus, YouTube does not store any information about the visitors unless they watch the video. When you click on the video, your IP address is transmitted to YouTube and YouTube knows that you have watched the video. If you have logged in to YouTube, this information is also allocated to your user account (you can prevent this by logging out from YouTube before calling up the video).

We do not have knowledge of and even influence on the collection and use of your data by YouTube, which is possible in this case. For more detailed information, refer to the data protection declaration of YouTube under https://policies.google.com/privacy?hl=en. We would also like to refer to the general description in this data protection declaration for the general handling and deactivation of cookies.

IX. Rights of the person concerned

If your personal data is processed, you are a person concerned within the meaning of the GDPR and you have the following rights vis-à-vis us:

1. Right to information

You can demand a confirmation from us as to whether we are processing your personal data.
In case of such processing, you can demand the following information from us:

the purposes, for which the personal data is processed;
the categories of personal data being processed;
the recipients or categories of recipients, to whom your personal data has been disclosed or is still being disclosed;
the planned duration of storage of your personal data or, if concrete information about this is not possible, the criteria for determining the storage duration;
the existence of a right of rectification or deletion of your personal data, a right of restriction of the processing by us or a right to object to such processing;
the existence of a right of appeal to a supervisory authority;
if the personal data is not collected from the person concerned, all available information about the source of the data;
the existence of automated decision-making including profiling pursuant to art. 22 para. 1 and 4 of the GDPR and - at least in these cases - meaningful information about the logic involved as well as the implications and intended effects of such processing for the person concerned.
You have the right to demand information as to whether your personal data is transmitted to a third country or to an international organisation. In this context, you may demand to be informed about the appropriate guarantees in accordance with art. 46 of the GDPR in connection with the transmission.

2. Right to correction

You have a right of correction and/or completion vis-à-vis us if the processed personal data concerning you is incorrect or incomplete.

3. Right to restriction of the processing

Under the following conditions, you may demand that the processing of your personal data be restricted:

if you contest the accuracy of the personal data concerning you for a period that enables us to verify the accuracy of the personal data;
the processing is unlawful and you refuse to delete the personal data and instead demand that the use of the personal data be restricted;
we no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or
if you have filed an objection to the processing pursuant to art. 21 para. 1 of the GDPR and it is not yet clear as to whether our justified reasons outweigh your reasons.

If the processing of your personal data has been restricted, such data may be processed – apart from its storage – only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal entity or on grounds of an important public interest of the Union or a Member State.

If the processing has been restricted in accordance with the above conditions, you shall be informed by us before the restriction is lifted.

4. Right to deletion

4.1 Obligation to delete

You have the right to ask us to immediately delete the personal data concerning you and we shall be obligated to immediately delete this data if the following reasons apply:

Your personal data is no longer necessary for the purposes, for which it was collected or otherwise processed.
You revoke your consent underlying the processing according to art. 6 para. 1 lit. a or art. 9 para. 2 lit. a of the GDPR and there is no other legal basis for the processing.
You oppose the processing pursuant to art. 21 para. 1 of the GDPR and there are no overriding legitimate grounds for the processing or you oppose the processing pursuant to art. 21 para. 2 of the GDPR.
Your personal data has been processed unlawfully.
The deletion of your personal data is necessary to fulfil a legal obligation under the Union law or the law of the Member States, which the party responsible is subject to.
Your personal data has been collected in relation to information society services offered pursuant to art. 8 para. 1 of the GDPR.

4.2 Exceptions

The right to deletion does not apply if the processing is necessary

for exercising the right to freedom of expression and information;
for fulfilling a legal obligation, which requires the processing according to the Union law or the law of the Member States, which we are subject to, or for performing a task that is in the public interest or takes place in the exercise of public authority, which was assigned to us;
for reasons pertaining to the public interest in the field of public health pursuant to art. 9 para. 2 lit. h and i as well as art. 9 para. 3 of the GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to art. 89 para. 1 of the GDPR if the right stated under section a) probably makes it impossible to realise the objectives of this processing or affects this realisation seriously, or
for asserting, exercising or defending legal claims.

5. Right to data transferability

You have the right to receive your personal data that you provided to us in a structured, common and machine-readable format. You also have the right to transmit this data to another party responsible, to whom the personal data was provided, if

the processing is based on consent pursuant to art. 6 para. 1 lit. a of the GDPR or art. 9 para. 2 lit. a of the GDPR or on a contract pursuant to art. 6 para. 1 lit. b of the GDPR and
the processing is carried out using automated methods.

In exercising this right, you have the right to effect that your personal data is transferred directly by us to another party responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected by this.

The right to data portability does not apply to the processing of personal data required for performing a task in the public interest or for exercising public authority that was assigned to us.

6. Right of objection

You have the right - for reasons arising from your special situation - to object to the processing of your personal data based on art. 6 para. 1 lit. e or f of the GDPR; this also applies to profiling based on these provisions.

We shall no longer process your personal data unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this is also applicable for profiling insofar as it is related to such direct advertising.

If you object to the processing for direct advertising purposes, the personal data concerning you shall then no longer be processed for these purposes.

7. Right to revoke the declaration of consent under the Data Protection Law

You have the right to revoke your declaration of consent under the Data Protection Law at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until the revocation.

8. Right of appeal to a supervisory authority

Irrespective of another administrative or legal remedy, you have the right to appeal to a supervisory authority if you are of the opinion that the processing of your personal data infringes the GDPR.