Privacy policy – RSAG Schweiz

Privacy policy RSAG Switzerland

§ 1 GENERAL

Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Swiss Confederation (Data Protection Act, DSG), every person is entitled to protection of their privacy and protection against misuse of their personal data. RSAG takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

It is generally possible to use the website without expressly providing personal data. However, by using this website, you consent to the collection, processing and use of data in accordance with the following description. However, if a person wishes to make use of specific services via the website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

With the following privacy policy, we inform you about the processing purposes, recipients, legal bases and storage periods as well as your rights and the person responsible for your data processing. This privacy policy only applies to our website www.rsag-schweiz.ch. If you are redirected to other sites via links on our pages, please inform yourself there about the respective handling of your data.

§ 2 Person responsible for data processing

Inquiries and information can be sent by e-mail or post to the address below. We reserve the right to request a copy of your identity card when requesting information. The person responsible for data processing on this website is

Reparatur- und Sanierungstechnik AG, Güterstrasse 5, 3550 Langnau, info(at)rsag-schweiz.ch

§ 3 Processing of personal data

Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, erasure, retention, modification, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law (Data Protection Act, DPA). If and insofar as the EU GDPR is applicable, we also process personal data on the following legal bases in conjunction with Art. 6 (1) EU GDPR:

lit. a) Processing of personal data with the consent of the data subject.

lit. b) Processing of personal data for the performance of a contract with the data subject and for the implementation of corresponding pre-contractual measures.

lit. c) Processing of personal data for compliance with a legal obligation to which we are subject under applicable EU law or under applicable law of a country in which the GDPR is applicable in whole or in part.

lit. d) Processing of personal data to protect the vital interests of the data subject or another natural person.

lit. f) Processing of personal data for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the fundamental freedoms and rights and interests of the data subject. The legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for the duration required for the respective purpose or purposes. In the case of longer-term retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.

§ 4 Visiting this website

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a log file. The following information is automatically recorded and stored until it is deleted:

IP address,
Date and time of access,
Name and URL of the retrieved file,
Website from which access is made,
the browser used and, if applicable, the operating system of your computer and the name of your access provider.

This data is processed for the following purposes:

Ensuring a smooth connection to the website,
Ensuring convenient use of the website.

The legal basis for data processing is the Swiss Data Protection Act (DSG). Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. We also use cookies and analysis services when you visit our website.

§ 5 Safety measures

Taking into account the state of the art and its legal requirements, suitable technical and organizational measures have been taken to ensure an appropriate level of protection for all personal data.

§ 6 SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

§ 7 Social media plugins

LinkedIn

On our website, we use marketing services (such as LinkedIn conversion tracking) of the social network LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, with its European headquarters at LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. These use cookies, i.e. text files that are stored on your computer. This enables us to analyze your use of the website. For example, we can measure the success of our advertising and show users products in which they have previously shown an interest. For example, information is collected about the operating system, the browser, the previously visited website (referrer URL), the websites visited, the offers clicked on and the date and time of your visit to our website.the information generated by the cookie about your use of this website is transmitted in pseudonymous form to a LinkedIn server in the USA and stored there. LinkedIn therefore does not store the name or e-mail address of the respective user. Rather, the aforementioned data is only assigned to the person for whom the cookie was generated. This does not apply if the user has allowed LinkedIn to process the data without pseudonymization or has a LinkedIn account.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also object to the use of your data directly at LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Facebook & Instagram

Social plugins (such as Meta pixels) from Facebook and Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, 462129 Dublin, Ireland, are integrated on our website. If you visit a website that contains a social plugin, your browser can transmit data about your visitor behavior to Meta’s servers. If you are logged in to Facebook or Instagram, they can assign the visit to our website directly to your account created there. If you do not want this data to be associated with your Facebook or Instagram account, please log out of Facebook or Instagram before visiting our site. We have no influence on the type and scope of the data collected, transmitted and stored. Details on the handling of your personal data, your privacy and your rights in this regard can be found on the websites of the respective social network Facebook or Instagram. You can find out more at de-de.facebook.com/about/privacy.

YouTube

Functions of the YouTube service are integrated on this website. YouTube is owned and operated by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland. Your legal agreement with YouTube consists of the terms and conditions, which you can find at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de.

These Terms constitute a legally binding agreement between you and YouTube regarding your use of the Services. Google’s privacy policy explains how YouTube handles and protects your personal data when you use the service.

If you have deactivated the storage of cookies for the Google Ad program, you will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at YouTube can be found in the provider’s privacy policy at: www.google.ch (data protection).

§ 8 Analysis tools

Google Analytics

When you visit our website, Google Analytics, offered by Google Ireland Limited, Gordon House, Barrow Street, D04 E2W2, Dublin, Ireland, is activated to analyze website usage. The service uses “cookies”, which are stored on your end device. However, we use IP anonymization, which shortens the IP address so that specific persons cannot be identified. As part of the order processing agreement with Google Ireland Limited, Google Ireland Limited uses the information collected to analyze website usage and website activity.

You give us your consent to this by confirming the cookie request immediately after accessing our website. You have the option of preventing the storage of cookies on your end device by making use of the opt-out option or by making the appropriate settings in your browser. However, there is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies. You can find more information on the use of data by Google Ireland Limited here: https://support.google.com/analytics/answer/6004245?hl=de

Google Maps

This website uses Google Maps. This enables us to display interactive maps directly on the website and allows you to conveniently use the map function. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. You can find more information on the purpose and scope of data collection and processing by Google as well as further information on your rights in this regard and setting options to protect your privacy at: www.google.de/intl/de/policies/privacy.

Google Ads

This website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google Ads will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Ads customers. The information obtained using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this – for example, by using a browser setting that generally deactivates the automatic setting of cookies or by setting your browser to block cookies from the domain “googleleadservices.com”.

Please note that you must not delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

§ 9 Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there (such as name, address, email or telephone number), will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent and will be deleted after processing has been completed or, in the case of further business relationships, transferred to our database.

§ 10 E-mail marketing

This website uses the services of Active Campaign for sending email marketing activities. The provider is the US provider ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, US, USA. Active Campaign is a service that can be used to organize and evaluate the sending of email marketing, among other things. If you enter data for the purpose of email marketing (e.g. your email address), this data is stored on Active Campaign’s servers in the USA.

Active Campaign enables us to analyze our email marketing campaigns. When you open an email sent with Active Campaign, a file contained in the email (a so-called web beacon) connects to Active Campaign’s servers in the USA. In this way, it can be determined whether an email marketing message has been opened and which links, if any, have been clicked on. In addition, technical information is collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective e-mail marketing recipient. It is used exclusively for the statistical analysis of e-mail marketing campaigns. The results of these analyses can be used to better adapt future e-mail marketing activities to the interests of the recipients.

If you do not wish to be analyzed by Active Campaign, you must unsubscribe from email marketing. For this purpose, we provide a corresponding link in every email marketing message. Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time by unsubscribing from email marketing. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Active Campaign is certified according to the “EU-US Privacy Shield”. The “Privacy Shield” is an agreement between the European Union (EU) and the USA to ensure compliance with European data protection standards in the USA. Switzerland has the “CH-US Privacy Shield”.

§ 11 Information about cookies

Technically necessary cookies are used on this website. These are small text files that are stored in or by your internet browser on your computer system. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies is not used to create user profiles. This safeguards your interest in data protection.

The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a lifespan that varies from a few minutes to several years.

If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may limit the functionality of our website. You can also delete permanently stored cookies at any time via your browser. Alternatively, you can deactivate or not accept the cookie notice on our website.

§ Section 12 Rights of the data subjects

If your personal data is processed, you are the data subject and you have the following rights vis-à-vis the controller:

Right to information

You can request confirmation from the controller as to whether personal data concerning you is being processed. If such processing is taking place, you can request the following information from the controller:

the purposes for which the personal data is processed;
the categories of personal data that are processed;
the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the duration of storage;
the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
the existence of a right of appeal to a supervisory authority;
all available information on the origin of the data if the personal data is not collected from the data subject;
the existence of automated decision-making, including profiling and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards in connection with the transfer.

Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without delay.

Right to restriction of processing

Under the following conditions, you may request that the processing of your personal data be restricted:

if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data;
the controller no longer needs the personal data for the purposes of the processing, but you need them for the establishment, exercise or defense of legal claims, or
if you have objected to the processing and it is not yet certain whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

Right to erasure

Obligation to delete

You may request the controller to delete the personal data concerning you immediately and the controller is obliged to delete this data immediately if one of the following reasons applies:

The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
You withdraw your consent on which the processing was based and there is no other legal basis for the processing.
You object to the processing and there are no overriding legitimate grounds for the processing.
Your personal data has been processed unlawfully.
The deletion of personal data concerning you is necessary to fulfill a legal obligation under the law to which the controller is subject.
The personal data concerning you was collected in relation to information society services offered.

Information to third parties

Where the controller has made the personal data concerning you public and is obliged to erase it, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, this personal data.

Exceptions

The right to erasure does not exist if the processing is necessary

to exercise the right to freedom of expression and information;
for compliance with a legal obligation which requires processing by law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as it is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
for the assertion, exercise or defense of legal claims.

Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the controller.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where

the processing is based on consent or on a contract and
the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, insofar as this is technically feasible. The freedoms and rights of other persons must not be impaired by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

In connection with the use of information society services, you have the option of exercising your right to object by means of automated procedures that use technical specifications.

Right to revoke the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

is necessary for the conclusion or performance of a contract between you and the controller,
is permissible on the basis of legal provisions to which the controller is subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
with your express consent.

However, these decisions may not be based on special categories of personal data unless appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

In the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the Swiss Data Protection Act or the GDPR. The supervisory authority with which the complaint has been lodged will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy.

§ 13 Retention and deletion of personal data

We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations or otherwise for the purposes pursued with the processing, i.e., for example, for the duration of the entire business relationship (from the initiation, execution to the termination of a contract) as well as beyond that in accordance with the statutory retention and documentation obligations. It is possible that personal data may be stored for the period in which claims can be asserted against RSAG and insofar as we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymized as far as possible. For operational data (e.g. system protocols, logs), shorter retention periods of twelve months or less generally apply.

§ 14 Data transfer to third-party providers

Personal data may be transferred or disclosed to third-party companies. In such cases, we always comply with the legal requirements and always conclude corresponding order processing contracts in advance, which guarantee the protection of all transferred personal data, just as it is protected by our company. If data is transferred to third-party providers, we will always contact and inform you in advance.

§ 15 Data transfer to third countries & USA

If personal data is processed in a third country or transferred to a third country, this is always and only done in accordance with the legal requirements. A third country is understood to be a country outside the European Union or the European Economic Area. Subject to express consent or transfer required by contract or law, our company will only process your personal data in third countries with a recognized level of data protection, contractual obligation through standard protection clauses of the EU or in the presence of certifications.

Applications and tools from companies based in the USA may be integrated on our website. These may automatically transfer your personal data to servers in the USA. We would therefore like to point out that the USA is not a safe third country within the meaning of Swiss and European data protection law. Companies based in the USA are obliged to hand over personal data to authorities on request, without you as the data subject being able to take legal action against this. As a company, we also have no influence on these processing activities, but we ensure that all relevant contracts have been issued or obtained.

§ 16 Disclaimer

All information on this website has been checked carefully and to the best of our knowledge and belief. Our company constantly endeavors to keep all information correct, complete and up-to-date. Nevertheless, errors can occur and cannot be completely ruled out. We therefore assume no guarantee for the correctness, completeness and topicality of all information on this homepage. Liability claims arising from material or non-material damage of any kind caused by the use of the information provided are excluded, unless there is evidence of willful intent or gross negligence. Access to our homepage is at the user’s own risk and all responsible parties are not responsible for damages, such as direct, indirect or accidental damages as well as consequential damages, which are allegedly caused by the homepage visit. No liability is assumed for this.

§ 17 Data Protection Officer

If you have any further questions about the processing of your personal data, you are welcome to send your request to the data protection officer. The data protection officer can be contacted at info@rsag-schweiz.ch. For security reasons, appropriate measures may be taken to verify your identity.

§ 18 Status and amendment of the privacy policy

Due to the further development of the website and services or due to changes in legal or regulatory requirements, it may be necessary to change this privacy policy at any time and without prior notice.

This privacy policy was last updated on 06.09.2023.