1. Name and contact data of the entity responsible for processing and the company data protection officer
This data protection information applies for data processing by:
Entity responsible: SRS SPITZKE RAIL SWISS AG i. L.
The company data protection officer of the SPITZKE Group can be contacted at:
GVZ Berlin Süd
Märkische Allee 39/41
14979 Großbeeren, Deutschland
+49 33701 901-0
+49 33701 901-190
2. Collection and storage of personal data and the nature and purpose of its use
a) When visiting the website
When our website www.srs-ag.ch is retrieved by the browser used on your end device, information is automatically sent to the server of our website. This information is temporarily stored in a so-called ‘logfile’. The following information is collected without any activity by you, and is stored until it is automatically deleted:
The above data is processed by us for the following purposes:
The legal basis for data processing is Art. 6 (1) (f) of the GDPR. Our justified interest arises from the purposes of data collection listed above. Under no circumstances shall we use the data collected for the purpose of tracing it back to you as an individual.
b) When using our contact form
If you have questions of any kind, we offer you the option of contacting us via a form provided on the website. Here, it is necessary to enter a valid e-mail address, so that we know from whom the enquiry is coming, and in order to respond to it. Further information can be provided voluntarily. The data processing for the purpose of contacting us is conducted in accordance with Art. 6 (1) (1) (a) of the GDPR on the basis of your voluntarily granted approval.
The personal data collected by us for the use of the contact form is automatically deleted after the query submitted by you has been dealt with.
3. Forwarding of data
Your personal data is not transferred to third parties for purposes other than those listed above.
We only forward your personal data to third parties when:
In the cookie, information is stored that emerges in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity as a result.
We also use temporary cookies to optimise user-friendliness, which are stored for a certain specified period on your end device. If you visit our site again, in order to make use of our services, it is automatically detected that you have already visited us and which inputs and settings you have made, so that you don’t have to enter these again.
The data processed by cookies is required for the purpose of upholding our justified interest and that of third parties in accordance with Art. 6 (1) (1) (f) of the GDPR.
Most browsers automatically accept cookies. You can configure your browser in such a way, however, that no cookies are stored on your computer, or that a notification always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all functions of our website.
5. Analysis tools
a) Tracking tools
The tracking measures listed below and used by us are conducted on the basis of Art. 6 (1) (1) (f) of the GDPR. With the tracking measures used, we aim to ensure a needs-oriented design and ongoing optimisation of our website.
We also use the tracking measures to gain statistical information about the use of our website, and in order to evaluate it for the purpose of optimising our offer for you. These interests are justified in the sense of the above regulation.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
b) Google Analytics
In order to provide a needs-oriented design and ongoing optimisation of our pages, we use Google Analytics, a web service provided by Google Inc. (https://www.google.de/intl/de/about/ ) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; below: ‘Google’). In this connection, pseudonymised usage profiles are created and cookies (see Item 4) are used. The information generated by the cookie about your use of this website, such as
is transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports about website activities and to provide further services related to the use of the website and Internet use for market research purposes and the needs-oriented design of our Internet pages.
This information is also transferred to third parties insofar as is legally specified, or if third parties process this data on our behalf. Under no circumstances is your IP address combined with other data in Google’s possession. The IP addresses are anonymised, so that no assignment is possible (IP masking).
You can prevent the installation of cookies by adjusting your browser settings accordingly; however, please note that in this case you may be unable to fully use all features of this website.
You can also prevent the recording of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en ).
As an alternative to the browser add-on, in particular when browsing on mobile end devices, you can also prevent the recording of data by Google Analytics. More information can be found under the link mentioned below. An opt-out cookie is set which prevents the future recording of your data when you visit this website. The opt-out cookie only applies in this browser and is only stored for our website on your device. If you delete cookies in this browser, you need to re-set the opt-out cookie.
For further information on data protection in connection with Google Analytics, see e.g. the Google Analytics Help page: https://support.google.com/analytics/answer/6004245?hl=en .
6. Social media plug-ins
On the basis of Art. 6 (1) (1) (f) of the GDPR, we use social plugins from the social networks Facebook, Instagram, XING, LinkedIn and YouTube in order to make our company better known through these channels. The commercial purpose behind such a policy is classified as a justified interest in the sense of the GDPR. The responsibility for operation in conformance with the data protection regulations must be guaranteed by the respective supplier.
On our website, we use social media plugins from Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland) in order to make its use more personal. If you access a page of our website that contains such a plugin, your browser will create a direct connection to the Facebook servers. The content of the plugin is transferred by Facebook directly to your browser and integrated into the website.
Through the integration of the plugin, Facebook receives the information that your browser has retrieved the corresponding page of our website, even if you do not have a Facebook account or are not logged in to Facebook at the time. This information (including your IP address) is sent directly by your browser to a Facebook server in the USA and is stored there.
If you are logged into Facebook, Facebook can directly assign your visit to our website to your Facebook account. If you interact with the plugins, for example by actuating the Facebook button, the corresponding information is also sent directly to a Facebook server and stored there. The information is also published on Facebook and shown to your Facebook friends.
Facebook can use this information for advertising and market research purposes, and for the needs-oriented design of the Facebook pages. For this purpose, usage, interest and relationship profiles are created by Facebook, e.g. in order to evaluate your use of our website with regard to the advertisements shown to you by Facebook, inform other Facebook users about your activities on our website, and to provide further services related to the use of Facebook.
If you do not wish Facebook to assign the data collected about our web presence to your Facebook account, you must log out of Facebook before visiting our website.
The purpose and scope of the data collection and the further processing and use of data by Facebook, as well as your related rights and settings options in order to protect your privacy can be found in the data protection information of Facebook: https://www.facebook.com/about/privacy/.
On our website, so-called social plugins (‘plugins’) from Instagram are used, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland.
The plugins are labelled with an Instagram logo, for example in the form of an ‘Instagram camera’.
If you access a website that contains such a plugin, your browser will create a direct connection to the Instagram servers. The content of the plugin is transferred by Instagram directly to your browser and integrated into the website. Through the integration of the plugin, Instagram receives the information that your browser has retrieved the corresponding page of our website, even if you do not have an Instagram profile or are not logged in to Instagram at the time.
This information (including your IP address) is sent directly by your browser to an Instagram server in the USA and is stored there. If you are logged into Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by actuating the Instagram button, this information is also sent directly to an Instagram server and stored there. The information is also published on your Instagram account and shown to your contacts there.
If you do not wish Instagram to assign the data collected about our web presence to your Instagram account, you must log out of Instagram before visiting our website.
For more information, see the Instagram data protection policy: https://help.instagram.com/155833707900388.
Our website uses a function of the XING network. The provider is XING SE, Dammtorstraße 29-32, 20354 Hamburg, Germany. If you click on the XING button (plugin), you are forwarded to our offer at XING in a separate browser window and may follow us on XING if you are logged into your XING user account. Via the plugin, a direct connection is created between your browser and the XING server. As a result, XING receives the information that you have visited our website with your IP address. Please note that we have no knowledge about the content of the transferred (personal) data or the use of such data by XING. You can find further information in the XING data protection policy under: https://www.xing.com/app/share?op=data_protection.
Our website uses a function of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. If you click on the LinkedIn button (plugin), you are forwarded to our offer at LinkedIn in a separate browser window and can follow us on LinkedIn if you are logged into your LinkedIn user account. Via the plugin, a direct connection is created between your browser and the LinkedIn server. As a result, LinkedIn receives the information that you have visited our website with your IP address. In addition, LinkedIn is then able to assign your visit to our website to you and your user account – if you are logged into your LinkedIn user account. Please note that we have no knowledge about the content of the transferred (personal) data or the use of such data by LinkedIn. You can find further information about this in LinkedIn’s data protection policy at: https://www.linkedin.com/legal/privacy-policy.
On some of our web pages, YouTube videos are integrated, which are operated by YouTube, LLC 901 Cherry Ave. San Bruno, CA 94066 USA (‘YouTube’). YouTube is a service provided by Google. For the Google address data, see Item 5 a)i). When you visit our page, the IP address, the specific address of the page of our website that you have retrieved, the transferred identity of the browser and the system date and time of the retrieval, and any cookies via which your browser can be clearly identified, are transferred to Google as the operator of YouTube.
Only when the video is played cookies and pixel tags are set by YouTube in order to personalise advertisements and search results. Google may received further data about cookies already stored in your computer. We have no influence over their use by Google. Google is responsible for collecting and processing this data.
You can find further information about handing user data in YouTube’s Data Protection Policy at: https://policies.google.com/privacy?hl=en&gl=de
7. Rights of data protection
You have the right:
8. Right to objection
If your personal data is processed on the basis of justified interests in accordance with Art. 6 (1) (1) (f) of the GDPR, you have the right, in accordance with Art. 21 of the GDPR, to object to the processing of your personal data if reasons are given for doing so that arise from your particular situation, or if the objection is made against direct advertising. In the latter case, you have a general right to object, which is implemented by us without the submission of a particular situation being required.
If you wish to make use of your right to revocation or objection, simply send an e-mail to firstname.lastname@example.org
9. Data security
We use the common SSL (Secure Socket Layer) procedure in connection with the highest encryption level, which is supported by your browser. Generally, this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. If a single page of our website is being transmitted in encrypted form you will see a closed key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
10. Storage periods
The personal data of the data subject is deleted or blocked as soon as the purpose of storage expires. Data can also be stored if this is stipulated by the European or national legislator in European Union directives, laws or other regulations to which the controller is subject. Data is only blocked or deleted when a storage period specified by the above norm expires, unless there is a necessity for storing the data for the conclusion or fulfilment of a contract.
11. Currency and changes to this data protection policy
This data protection policy is currently valid and was produced in May 2018.
Through the further development of our website and related offers, or due to changes in the legal or official specifications, it may be necessary to modify this data protection policy. The latest version of the data protection policy can be retrieved at any time under https://www.srs-ag.ch/en/data-protection and printed out.