Data processing
Websites
When you access our websites (scto.ch, sctoplatforms.ch, and annualreport.scto.ch), information of a general nature is automatically collected. This information is recorded in the server log file and includes the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, and the like. This information is collected for the following purposes:
- to ensure a trouble-free connection to the website;
- to ensure the smooth use of our website;
- to evaluate system security and stability; and
- to serve other administrative purposes.
These purposes underpin our legitimate interest in data processing and provide, where necessary, the legal basis for its execution.
When accessing specific pages, a so-called cookie is set. This is a small text file that is automatically deleted from your computer at the end of the browser session. This file is used solely to enable the use of certain applications. With most web browsers, you may change the settings so that your browser does not accept new cookies or you may have all cookies deleted. If your browser blocks all cookies, there is no guarantee that you can fully access all of the functions on this website.
Use of Google Analytics
Our website uses the web analysis service Google Analytics. Google Ireland Ltd (registered office in Ireland) is the provider for Google Analytics and the processor. In fulfilling these obligations, Google Ireland relies upon Google LLC (registered office in the United States) as its processor (both referred to as Google). The processing of personal data is subject to a data processing agreement with Google Ireland Limited. If, in the context of the services listed below, personal data are processed in so-called third countries (in particular in the United States by Google), the EU’s standard contractual clauses apply.
The following types of data, for example, may be collected: information related to the operating system and browser, your IP address, the website you accessed prior to ours (referrer URL), and the time and date of your visit to our website. The information generated by this text file about the use of our website is transmitted to and stored on a Google server in the United States. We have activated the IP anonymisation function for this website; as a result, Google will truncate your IP address within the European Union’s member states or within Switzerland before transmitting it to Google in the United States. Only in exceptional cases is the full IP address transmitted to and truncated on a Google server in the United States. We have entered into a data processing agreement with Google LLC that is based on the EU’s standard contractual clauses.
You may prevent cookies from being stored by adjusting the corresponding setting for your browser. Moreover, you may prevent data that are collected by a cookie and related to your use of the website (including your IP address) from being transmitted to and processed by Google by downloading and installing the browser add-on available via this link.
Use of YouTube plug-ins
This website uses YouTube plug-ins. Our service provider is Google Ireland Limited in Dublin, Ireland. The video portal is operated by YouTube LLC in the United States. We have entered into a data processing agreement with our service provider. If personal data are processed in so-called third countries (i.e. in countries outside of Switzerland or the EU, for example in the United States), the EU’s standard contractual clauses apply. When you visit one of our web pages that is equipped with a YouTube plug-in, a connection is established to YouTube’s servers. As a result, YouTube is informed about which of our web pages you have visited.
If you are logged in to your YouTube account, you enable YouTube to link your browsing activities directly with your personal profile. You may prevent this by logging out of your YouTube account.
Contact form and e-mail
Please note that security flaws can occur when transferring data over the internet (e.g. when communicating via e-mail). Absolute protection against third-party access is not possible. For security reasons, our websites use SSL encryption for requests made via the contact form. It is possible to identify an encrypted connection by looking at your browser’s address bar: “http://” becomes “https://” and a lock symbol appears. When SSL encryption is activated, third parties are unable to read data you send us.
When you make a request via the contact form or an e-mail, we save your contact data and information in order to process your request. The legal basis for this lies in the initiation or the execution of a contract. Provided that no contractual relationship exists or is entered into, we delete the data as a rule within one year – unless you have consented to having it stored for a longer period of time.
Form for downloading our tools
When you download a tool from our website, you have the option of providing your e-mail address. We will use this e-mail address to ask you to complete a short survey. In addition, we will use your e-mail address to inform you about new tools available on our website. We do this until you withdraw your consent (preferably via e-mail).
Newsletter
To send our newsletter, we use Mailchimp from The Rocket Science Group LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308, USA (dba Mailchimp). This enables us to directly contact subscribers and analyse their behaviour in order to improve our services. Mailchimp receives your personal data and processes data on our behalf to the extent necessary to send our newsletter. For this purpose, we have entered into an agreement with Mailchimp that is based on the EU’s standard contractual clauses (SCCs). You can find more information at https://mailchimp.com/legal/data-processing-addendum/.
We transmit your e-mail address and – if you have chosen to provide them – your first and last names to Mailchimp. In addition, Mailchimp uses cookies and other tracking methods to collect the following personal data: information about your device (IP address, device information, operating system, browser ID, information about the application you use to read your e-mails) and additional information about your hardware and internet connection. Moreover, usage data is collected, for example the time and date, when you opened an email/a campaign and browser activities (e.g. which e-mails/websites were opened). Mailchimp requires this data in order to ensure the systems’ security and reliability, to comply with the terms of use, and to avoid misuse. This lies within Mailchimp’s legitimate interests and serves to fulfil the contract. In addition, Mailchimp analyses performance data, such as delivery statistics for e-mails and other communication data. This information is used to produce statistics on the services’ use and performance.
The above-mentioned data processing is undertaken based on your consent. You may withdraw your consent at any time. Every e-mail with our newsletter contains an unsubscribe link. In addition, it is possible to withdraw consent via the contact options provided. Your data is processed only as long as consent remains in place. Irrespective of this, your data is deleted when our contract with Mailchimp is terminated unless legal requirements stipulate that your data remains saved.
Data storage
As a rule, we save data and our files for ten years after the corresponding activity or relationship ends unless we previously indicated a different time period.
Your rights to your data
You have the right to request information about the personal data we have processed about you. If we process your personal data on the basis of your consent, you have the right to revoke this consent at any time with future effect. Furthermore, you may – to the extent legally permissible – demand the correction, deletion, or restriction of the processing of your personal data. Finally, you have the right to lodge a complaint with the competent data protection authority.