Privacy Policy for Bouygues E&S Group companies in Switzerland

The protection of your personal data (hereinafter also referred to as 'data') and the safeguarding of your privacy is important to us. Accordingly, we regard it as a matter of course when processing your personal data to comply with the revised Swiss Federal Act on Data Protection (DSG), the Ordinance on Data Protection (DSV) and other data protection regulations that may apply, such as the EU General Data Protection Regulation (GDPR).

 

Personal data means any information that identifies you or makes you identifiable, such as your surname, first name, address and email address.

 

When we refer to the processing of your personal data in this Privacy Policy, we mean any handling of your personal data. This in particular includes the retention, processing, use and deletion of the data.

 

We collect personal data in a transparent manner and with due regard to the principles of proportionality and legitimate purpose. The data is processed only to the extent and for the period of time necessary for us to carry out our functions and duties.

 

This Privacy Policy provides an explanation of what we do with your data when you visit our website, use our services or otherwise engage with us through a contract, communicate with us or otherwise have dealings with us. We may also inform you separately about how we process your data, for example via consent forms, contractual terms and conditions, additional data privacy statements, forms and notices.

 

The most current version at the time of use always applies. We reserve the right to update our Privacy Policy at any time.

 

1. Who is responsible for the processing of data?

 

The following companies are responsible for the processing of data described in this Privacy Policy:  

 

• Bouygues E&S InTec Schweiz AG, Förrlibuckstrasse 150, 8005 Zurich, Switzerland
• Bouygues Energies & Services Schweiz AG, Landis + Gyr-Strasse 1, 6301 Zug, Switzerland
• Bouygues E&S EnerTrans AG, Oltnerstrasse 61, 5013 Niedergösgen, Switzerland
• Bouygues E&S Prozessautomation AG, Rötzmattweg 115, 4600 Olten, Switzerland

 

For questions related to data protection and for information regarding your rights and how to exercise them, you may contact our data protection advisors at: dataprivacy.ch@equans.com .

 

2. Which personal data do we process?

 

The following are examples of the categories of data that we routinely process on our website:

 

• Contact data (including surname, first name, e-mail address, postal address and telephone numbers)
• Data on online forms (including contact details)
• Credentials (including user name and password for the online portal)
• Content data (including text entries)
• Usage data (including websites visited, access times, click behaviour, interest in content)
• Payment data (including bank details, payment history)
• Creditworthiness data (including contact details, payment history, as well as judicial, debt collection and insolvency data)
• Metadata/communication data (including IP address, date, time, pages visited, device information)
• Meeting metadata (including participant IP addresses, device/hardware information)
• Server log files (including browser type and version, operating system used, referrer URL, host name of the computer requesting access to the server and time of server request)
• Marketing data (including leads, e.g.contact/sales opportunities, newsletter subscriptions and unsubscriptions, marketing messages sent)
• Newsletter data (including personal details and email address, subscription/unsubscription data and opening rates)
• Applicant data (in addition to your personal details this includes data regarding education, work experience, skills, comments on previous employment as well as availability, notice period and customary correspondence data such as postal address, email address and telephone number)

 

We also process the following additional data in the course of maintaining customer and business relationships:

 

• Contract data (including consumer groups, types of consumption, services used, payment information
• Customer data (including personal details, customer number, customer type, customer history, data on purchased goods or services, order data, payment data

 

3. Who do we receive your personal data from?

 

In principle, we collect personal data directly from you. The majority of the data we process is provided to us by you (or your end device) (e.g. in connection with our services, the use of our website and apps, or in your communication with us). You are under no obligation to disclose your data, with the exception of individual cases (e.g. legal obligations). If, however, you want to enter into a contract with us or use our services, for example, you must disclose certain data to us. The use of our website is also not possible without data processing.

 

We may also obtain data from publicly available sources (e.g. debt collection registers, land registers, commercial registers, the media or the internet, including social media) or receive such data from (i) public authorities, (ii) your employer or client who is either in a business relationship with us or otherwise has dealings with us, as well as from (iii) other third parties (e.g. clients, counterparties, legal expenses insurers, credit reference agencies, address providers, associations, contractual partners, internet analysis services). This particularly includes data that we process as part of initiating, concluding and processing contracts, as well as data from correspondence and communication with third parties, but also includes all other categories of data.

 

4. Whose data do we process?

 

We collect and process data from the following categories of people:

 

• Clients/customers
• Suppliers
• Business partners
• Job applicants
• Sales partners

 

5. For what purposes do we process personal data?

 

On our website and in order to provide our services, we process your data for the following purposes in particular:

 

• Enabling the use of our website by users
• Responding to contact requests and communicating with users (blogs, news)
• Security measures 
• Conversion rate measurement (measuring the effectiveness of marketing measures) 
• Targeting
• Reach measurement/marketing 
• Tracking (e.g. interest/behavioural profiling, use of cookies) 
• Application procedure (substantiation and possible subsequent implementation as well as possible subsequent termination of the employment contract) 

 

6. On what legal basis do we process personal data?

 

As a general rule, the following provide the legal basis for us to process your personal data:

 

• conclusion or fulfilment of a contract with you or your request for this in advance
• your consent, which you may revoke at any time
• a weighing of interests, to which you may however object under certain circumstances
• legal obligations, which may also be considered in the context of a weighing of interests

 

Constituting a further legal basis for processing your personal data are our overriding interests in processing this data. Our overriding interests may include, but are not limited to:

 

• providing customer support and maintaining our business relationships (e.g. maintaining contacts, communicating with our business partners)
• our advertising and marketing activities
• the opportunity to get to know the users of our website and our online services better
• improving and further developing our products and services (e.g. IT security related to the use of our website, improving our range of online services)
• internal group administration

 

Where required, we will obtain your consent. If you have provided your consent electronically by activating a tick box, we will log this declaration of consent; in the process, we will for example store the user account name and relevant location on the website, as well as the date and time. You can revoke your declaration of consent informally at any time or you can object to the processing of your data. Your revocation and/or objection should be sent to the address stated under section 1 or to the following email address: dataprivacy.ch@equans.com .

 

7. Is personal data passed on to third parties?

 

We share your personal data if you have expressly consented to the sharing of the data, if we are legally obliged to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual agreement.

 

In addition, we disclose your personal data to third parties insofar as we are entitled to do so and to the extent that this is necessary or relevant for the use of the website or for providing any services.

 

We disclose your personal data to the following categories of recipients:

 

• Other companies in the group
• Service providers who process the personal data on our behalf and on our instructions (known as contractors, such as IT providers, newsletter dispatch service providers, etc.
• Other service providers such as debt collection companies, credit reference agencies, address verifiers or consultancy firms
• Customers, partners, suppliers, insurance companies, credit rating service providers and other business partners
• Parties acquiring or parties interested in acquiring business units, the company or other entities of the Group
• Courts, arbitration bodies, law enforcement agencies, regulators, lawyers and other parties to potential or actual legal proceedings where disclosure of personal data is necessary to comply with the law or to establish, exercise or defend rights or legal claims

 

We select our partners and contractors prudently and only entrust them where we have sufficient assurance that they have adequate technical and organisational measures in place in line with legal requirements. Our contractors may only process personal data on our documented instruction. They are all subject to confidentiality obligations and are only permitted to use your personal data to the extent necessary to achieve the purpose for which your personal data was collected and where the law does not state otherwise.

 

8. Is data disclosed to parties located abroad?

 

We process and store personal data primarily in Switzerland and the European Economic Area (EEA), but also potentially in any country in the world, depending on individual cases – for example, through subcontracted processors of our service providers or in the case of proceedings conducted before foreign courts or authorities.

 

If we do disclose your personal data to third parties abroad (i.e. outside Switzerland or the EEA), third parties are obliged to comply with data protection regulations to the same extent that we are ourselves obligated. If the level of data protection in the country concerned is inadequate but we have no suitable alternative, we will ensure that your personal data is suitably protected.

 

We achieve this in particular by concluding what are known as standard data protection clauses of the EU Commission (available here) with the companies concerned and/or by providing other guarantees that comply with the relevant data protection legislation. Where this is not possible, we limit disclosure of the data to that which is absolutely necessary for fulfilment of the contract.

 

9. How long is data retained?

 

We process and store your personal data solely for the time period required to achieve the stated purpose or insofar as this is provided for in laws or regulations to which we are bound. If the purpose for which the data is stored no longer applies or if a mandatory retention period expires, your data will be automatically blocked or deleted in accordance with legal stipulations. Furthermore, we will delete your data if you request us to do so and we have no legal or other obligation to retain or secure this personal data.

 

If we store the data on account of a contractual relationship with you, this data will remain stored for at least the duration of the contractual relationship and at the longest for the duration of the limitation periods for any potential claims on our part or for the duration of any statutory or contractual retention obligations.

 

10. Which safeguards are applied to protect personal data?

 

We implement technical and organisational security measures to protect your personal data against manipulation, loss, destruction or access by unauthorised persons and to ensure the protection of your rights and compliance with the applicable data protection regulations.

 

The measures taken are designed to safeguard the confidentiality and integrity of your data and to ensure the availability and robustness of our systems and services in processing your data on an ongoing basis. These measures also seek to ensure that availability of your data and access thereto can be quickly restored in the event of a physical or technical incident. The security measures that we undertake also include the encryption of your personal data. Any information you enter online is transferred via an encrypted transmission route. This prevents unauthorised third parties from viewing this information at any time. Our data processing and security measures are constantly adapted in line with technological developments.

 

We also take data protection within our own company very seriously. Our employees as well as the service companies we use are obliged to maintain confidentiality and to comply with the data protection regulations. Furthermore, they are only given access to personal data to the extent necessary.

 

11. What are your rights?

 

You have the following rights concerning your personal data:

 

• Right of access: You have the right to be informed regarding which personal data we process, what happens to this data and for how long the data is retained.
• Right to restriction/blocking and rectification: You have the right to amend, rectify or block the processing of your personal data at any time.
• Right to erasure: You have the right to request the deletion of your personal data at any time.
• Right to have your data disclosed and transferred: You have the right to request all your personal data from the data controller and to transfer the data in full to another data controller.
• Right to object: You have the right to object to the processing of your data. We will comply with this objection unless legitimate grounds exist for processing the data.
• Right to withdraw consent: You have the right to withdraw your consent for the processing of your personal data and the right to request that your personal data be deleted.

 

To enable us to prevent any misuse of your data, we need to identify you (e.g. by means of a copy of your identity card, if necessary).

 

Please note that these rights are subject to conditions, exceptions or restrictions (e.g. for the protection of third parties or commercial secrets or on account of our professional duty of confidentiality).

 

You can contact the data protection advisors mentioned in section 1 regarding your rights or direct your enquiry to them via the following email address: dataprivacy.ch@equans.com.

 

You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) if you consider that the processing of your personal data is in violation of data protection law.

 

12. What are cookies and when are they used?

 

On our website as well as for the use of other digital services and products, we use cookies and similar technologies (hereafter, all these are grouped under the term 'cookies'). In addition, we may use cookies and similar technologies (e.g. pixel tags or fingerprints) to identify visitors to our website, to analyse their behaviour and to determine their preferences. A cookie is a small file transmitted between the server and your system that enables the recognition of a particular device or browser. The following cookies (techniques with comparable functionalities such as fingerprinting also count here) are differentiated:

 

• Essential cookies: Certain cookies are necessary in order for the website to function as such or for certain functions. For example, these cookies enable you to switch between pages without losing information you have entered in a form. They also ensure that you remain logged into the site. These cookies are only temporary ('session cookies'). If you block these cookies, the website may not function. Other cookies are required so that the server can save decisions you have made or entries you have submitted for more than one session (i.e. one visit to the website) if you use this function (e.g. language selected, consent given, the automatic login function, etc.).
• Performance cookies: These cookies are used to collect information on how a website is used, for example, on how visitors accessed our website, which pages visitors open most often, how visitors navigated our website while visiting it, and whether they received any error messages. We may also use these cookies to collect certain statistical and analytical information, such as how many visitors have visited our website. These cookies are used to monitor the level of activity on the website and to improve website performance.
• Advertising or targeting cookies: These cookies allow us or third-party providers to display customised advertisements on our website or on third-party websites. They may also be used to assess the effectiveness of advertising or for sales promotional purposes.

 

The technical data we collect as well as cookies do not generally contain any personal data. However, personal data about you that we or third-party providers commissioned by us may store (e.g. where you have a user account with us or these providers) may be linked to the technical data or to the information stored in and obtained from cookies and thus may possibly be linked to you personally.

 

Most internet browsers are by default configured to accept cookies. If you do not want this, you can set your browser to inform you when cookies are set and to allow you to only accept them in individual cases or to generally disable them. You can also activate the automatic deletion of cookies when you close the browser. In addition, you may at any time delete cookies that have already been set via an internet browser or other software programs. The procedure for controlling and deleting cookies depends on the browser you use.

 

You can refuse the use of cookies by selecting the appropriate settings in your browser. However, you should be aware that this may affect your ability to use our website. For more information about cookies, including how to manage, refuse or delete them, go to https://allaboutcookies.org/.

 

You can use the following links to find out how to manage cookies for the most commonly used browsers:

 

• Microsoft Edge
• Firefox 
• Google Chrome 
• Safari 
• Opera

 

13. Scope and purpose of processing personal data in detail

 

13.1 Visiting our website 

 

You can generally visit our website without having to provide any personal information.

 

When you visit our website, our servers use a log file, known as a server log file, to automatically and temporarily store the following data:

 

• IP address of the computer making the request
• landing page (the website from which you accessed our website)
• browser settings
• language and version of the browser software
• date and time of access/retrieval
• name and URL of the retrieved data
• operating system of your computer and the browser used by you
• country from which our website is accessed
• name of your internet access provider
• time zone difference to Greenwich Mean Time (GMT)
• content of the request (specific page)
• access status/HTTP status code
• amount of data transferred
• most recently visited website
• activated browser plugins

 

The purpose of processing this data is to facilitate the use of our website (establishing connection), to ensure system security and stability on an ongoing basis and to improve what we offer; it is also used for internal statistical purposes. A personal user profile is not created.

 

Our overriding interest in the processing of your personal data is the legal basis for the processing of this data.

 

Log file information is stored for security reasons (e.g. to investigate acts of abuse or fraud) for a maximum of 30 days and then deleted. Data which must be retained for the purpose of providing evidence is exempt from deletion until the incident in question has been conclusively resolved.

 

13.2 How to contact us

 

You may contact us by email, by contact form, via social media or by telephone. In order to be able to process your email enquiries, we require you to enter your email address and your message. The provision of any other data is voluntary.

 

The processing of this data is in our overwhelming interest for corresponding with you or for the purpose of processing and handling your enquiry.

 

Responding to contact enquiries as part of contractual or pre-contractual relationships is carried out in order to fulfil our contractual obligations or to respond to (pre-)contractual enquiries and also on the basis of the legitimate interests in responding to the enquiries.

 

A user’s details may be stored in a customer relationship management system ('CRM system') or a comparable type of enquiry system. We delete enquiries if they are no longer required. You can object to this processing of data at any time. If you raise an objection, we will no longer process your personal data for this purpose. Send your objection to the contacts specified under section 1 or to the following email address: dataprivacy.ch@equans.com .

 

13.3 Communication 

 

We use various collaboration tools for conducting conference calls, online meetings and video conferences (collectively referred to below as: 'online meeting'). When using these tools, different types of data are processed. The scope of the data depends, among other things, on what data is provided prior to or when participating in an online meeting. This data includes, for example:

 

• first name and surname, participant name if necessary, company email address
• meeting metadata: e.g. date, time, meeting ID, telephone numbers, location
• audio, video or chat content
• name of the meeting and, if relevant, password for attending the meeting
• profile picture if applicable
• any other personal data provided by the data subjects during the meeting

 

If online meetings are to be recorded, this is communicated transparently in advance and, if necessary, consent is requested. You can object to this processing of data at any time. If you raise an objection, we will no longer process your personal data for this purpose. Send your objection to the contacts specified under section 1 or to the following email address: dataprivacy.ch@equans.com .

 

The processing of this data is in our overriding interest. Our overriding interest in these cases is to ensure that the meetings are held effectively. The other legal basis for data processing in the case of online meetings is the contract, insofar as the meeting is held as part of a contractual relationship.

 

13.4 Microsoft Teams 

 

We use the Microsoft Teams tool to conduct telephone conferences, online meetings, video conferences and/or online seminars (collectively referred to below as: 'online meeting'). Microsoft Teams is a product of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

 

When using Microsoft Teams, various types of data are processed. The scope of data also depends on the information provided before or when participating in an online meeting. The following data may be subject to processing:

 

• User details: e.g. display name, possibly email address, profile picture (optional), preferred language
• Meeting metadata: e.g. date, start and end time, meeting ID, phone numbers, location
• Text, audio and video data: Meeting participants can use the chat function during an online meeting. In this case, text entries made by users are processed in order to display them in the online meeting. For the purpose of video display or audio playback, the relevant data is processed by the microphone or any video camera on your end device for the duration of the meeting. Users may themselves at any time during the meeting deactivate or mute their camera or microphone via the Microsoft Teams application.

 

If online meetings are to be recorded, this will be clearly communicated in advance and, if necessary, you will be asked for your consent. You can object to this processing of data at any time. If you raise an objection, we will no longer process your personal data for this purpose. Send your objection to the contacts specified under section 1 or to the following email address: dataprivacy.ch@equans.com.

 

Chat content is documented when Microsoft Teams is used. If necessary for the purpose of documenting the results of an online meeting, we will document the chat content.

 

The processing of this data is in our overriding interest. Our overriding interest in these cases is to ensure that the online meeting is conducted effectively.

 

Further information regarding the processing of data through MS Teams is available in the data protection information of this tool.

 

13.5 Processing for the provision of our contractual services 

 

We may process your data in order to provide our own services.

 

We process personal data to the extent necessary in any given case in order to provide you with our contractual or pre-contractual services and to carry out other services requested by you. The data processed in this regard and the type, scope, purpose and necessity of its processing are governed by the underlying contractual relationship.

 

The personal data processed includes

 

• Master data: This includes, for example, name, address
• Contact details: This includes, for example, email address, telephone number(s)
• Contract data: This includes, for example, services utilised, subject of the contract, contractual communication, names of contact persons
• Payment data: This includes, for example, bank details, payment history

 

This data is processed for the following purposes in particular:

 

• Process automation
• Wastewater systems
• Dosing and mixing systems
• Energy distribution systems
• Specialised facilities
• Incineration plants and power generation plants
• Office design, build & refurbishment
• Energy/transport/telecom
• Facility management
• Building technology
• Green solutions
• Property management
• Estimate
• Smart solutions

 

The legal basis for the processing of data for these purposes is to fulfil a (preliminary) contract.

 

The data is deleted when it is no longer needed to fulfil contractual or legal obligations, although the need to retain the data is periodically reviewed. In all other respects, the legal retention obligations apply.

 

13.6 Administration, financial accounting, administrative organisation, contact management

 

We process data as part of our administrative activities and the organisation of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services.

 

This processing applies to customers, stakeholders, business partners and visitors to the website.

 

In the interests of our business, we also store details of suppliers, event organisers and other business partners, for example for the purpose of contacting them at a later date. We generally store this data, most of which is company-related, on a permanent basis.

 

The purpose of and our interest in processing the data lies in the administration, financial accounting, office organisation and archiving of data, namely tasks that serve to ensure the continuation of our business activities, the performance of our tasks and the provision of our services.

 

13.7 Application procedure 

 

If you apply for a job with us, we will process the personal data that we receive from you as part of the application process. In addition to your personal details, details regarding education, work experience, skills, references to previous employment and availability/notice period, this includes customary correspondence information such as postal address, email address and telephone number. We also process all documents submitted by you relating to the application, such as letters of motivation, curriculum vitae, references, certificates, diploma/degree certificates and other documents that you provide. You can also choose to provide us with additional information voluntarily.

 

This data will only be stored, analysed, processed or forwarded as part of your application. We may also process your personal data for statistical purposes (e.g. reporting). However, this process does not allow any conclusions to be drawn about an individual person.

 

When you submit an application, we use a service provider to process the application who ensures the secure and confidential processing of your personal data. To this end, you must create a user account and enter your email address, a password, your first name, your surname and the country. If you do not log in to your user account for more than six months, we will irreversibly delete it and all the data contained in it.

 

Data from applications will remain in the system for five months after the application for the purpose of dealing with any queries. Thereafter, your content data (but not your user account) is automatically anonymised. Your applicant data is stored separately from the other user data and is not combined with it.

 

Your applicant data is processed on the legal basis of our (pre-)contractual obligations as part of the application process and our legitimate interests in processing your application.

 

You can object to this processing of data and withdraw your application at any time. Send your objection to the contacts specified under section 1 or to the following email address: dataprivacy.ch@equans.com.

 

If we enter into an employment contract with you, the data transferred will be further processed for the purpose of managing the employment relationship in compliance with the statutory provisions.

 

If you have given us your consent to store your data for further application procedures and to contact you again if required, we will delete this data after a period of three years. You can revoke this consent at any time. Your revoke your consent by sending it to the contacts listed under section 1 or to the email address given in the job posting.

 

13.8 Newsletter mailing

 

We only distribute newsletters, emails and other electronic notifications containing advertising information (hereinafter referred to as 'newsletters') if the recipient has given their consent and insofar as this distribution is permitted by law, e.g. for advertising to existing customers.

 

If you have subscribed to our newsletter, we will use your email address to inform you about us and our products, services and offers. Any other data you provide is done so voluntarily.

 

Registration for the newsletter involves a double opt-in process. This means that after you have registered and clicked on the corresponding check box, you will receive an email containing a link that you must click on to confirm your registration.

 

The newsletter contains what is known as a web beacon, i.e. a pixel-sized file that is retrieved from the mailing service provider’s server when the newsletter is opened. This retrieval process first involves collecting technical information such as details of your browser and system, your IP address and the time of retrieval. This information is used to technically enhance the services based on the technical data or the target groups and your browsing behaviour based on where you accessed content (identifiable using the IP address) or access times. The data collection also includes establishing whether the newsletters are opened, when they are opened and which links the reader clicks on. While this information can be assigned to individual newsletter recipients for technical reasons, it is not our intention, nor that of the mailing service provider, to observe individual users. We use the analysis to identify the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

 

You can unsubscribe from the newsletter at any time and withdraw your consent to use of your data. To do this, click on the corresponding button (link) in the newsletter sent to you. You can find this link for unsubscribing from the newsletter at the end of each newsletter. You can withdraw your consent by contacting the contacts specified under section 1 or to the following email address: dataprivacy.ch@equans.com.

 

13.9 Competitions 

 

When you take part in competitions, we collect data about you that is required to run the competition. This generally means your name and contact details. We may pass on your personal data to our competition partners, e.g. to arrange for a potential prize to be sent to you. Participation in a competition and the related collection of data is, of course, voluntary. Detailed information can be found in our terms and conditions of participation for the respective competition.

 

The legal basis for the processing of data for these purposes is to fulfil a (preliminary) contract.

 

You can withdraw your consent to the use of the data for the purpose stated above at any time. Your consent withdrawal should be sent to the contact point listed under section 1 or to the email address given in the job posting:  dataprivacy.ch@equans.com.

 

13.10 Product assessments and satisfaction surveys 

 

We conduct surveys on our products and services from time to time in order to improve the customer experience and address customer needs. For this purpose, we require your name or a pseudonym, which is displayed alongside your country of origin.

 

The legal basis for processing data for these purposes is our overriding interest in optimising our services and products.

 

You can withdraw your consent to the use of the data for the purpose stated above at any time. Your consent withdrawal should be sent to the contact point listed under section 1 or to the email address given in the job posting: dataprivacy.ch@equans.com.

 

13.11 Security purposes and access control 

 

We obtain and process personal data for the purpose of ensuring and continuously improving the appropriate security of our IT environment and our other infrastructure (e.g. buildings). This includes, for example, monitoring and controlling electronic access to our IT systems as well as physical access to our premises (including using procedures involving the processing of biometric data), analyses and tests of our IT infrastructures, system and error checks and the creation of backup copies. For documentation and security purposes (for prevention and to investigate incidents), we also keep access logs and visitor records for our premises and use surveillance systems (e.g. security cameras). We indicate surveillance systems at the relevant locations by means of appropriate signage.

 

13.12 Risk management and corporate governance 

 

Risk management and corporate governance: We obtain and process personal data for the purpose of risk management (e.g. protection against criminal offences) and corporate governance. This includes the organisation of our business (e.g. resource planning) and corporate development (e.g. the acquisition and sale of business units or companies).

 

13.13 Marketing measures 

 

We also use your contact details for the following purposes:

 

• to maintain contact with you
• to inform you about certain services
• to recommend services that may interest you
• for statistical purposes

 

The processing of your personal data is in our overriding interest.

 

You can object to this processing of data at any time. If you submit an objection, we will no longer process your personal data for the purposes stated.

 

Your consent withdrawal should be sent to the contact point listed under section 1 or to the email address: dataprivacy.ch@equans.com.

 

14. How are marketing and analysis services used?

 

14.1 Google Services 

 

We use the following services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, in the case that your main place of residence is in the European Economic Area (EEA) or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (abbreviated to: Google):

 

• Google Analytics 4
• Google Tag Manager
• reCAPTCHA
• Google Maps
• Google Marketing Platform (GMP)
• Google Fonts
• Google Ads marketing platform

 

Google generally uses cookies. The cookies used by Google allow us to analyse how our website is used. The information generated by the cookies about how you use our website (including your IP address) is transmitted to a Google server in Ireland or in the USA and stored there.

 

Google states itself that it may process personal data for advertising products in any country in which Google or subcontractors of Google operate facilities. Information about the locations of Google’s data centres can be found at www.google.com/about/datacenters/locations/.

 

The following subcontractors may be used for Google Tag Manager, Google Analytics and Google Ads: business.safety.google/adssubprocessors. Google gives its assurance that it guarantees an adequate level of data protection by acting in line with the EU standard contractual clauses (cf. business.safety.google/processorterms).

 

You can get more detailed information on Google’s processing of personal data and its privacy settings in the Privacy Policy as well as the Privacy Controls.

 

14.1.1 Google Analytics 4

 

On our website we use Google Analytics 4, a web analysis service from Google, which enables us to analyse your use of our website.

 

Google Analytics uses cookies that are stored on your end device (laptop, tablet, smartphone, etc.) and enable us to analyse how you use our website. This allows us to evaluate usage behaviour on our website and use the statistics/reports obtained to make our website content more interesting.

 

With Google Analytics 4, the anonymisation of IP addresses is activated by default. This means that your IP address is truncated by Google within Switzerland or the EU/EEA before it is transferred. The full IP address is only transmitted to a Google server and truncated there in exceptional cases.

 

We have an order processing contract with Google that ensures the protection of data belonging to visitors of our website and prohibits unauthorised disclosure to third parties. For the transfer of data to the USA, Google adheres to standard contractual clauses of the European Commission, which are designed to ensure compliance with the European standard of data protection. You can find more legal information on Google Analytics 4, including a copy of the standard contractual clauses referred to above, here.

 

Demographic details: Google Analytics 4 features the special function 'demographic details' which it can use to create statistics that make statements about the age, gender and interests of visitors to the website. This is done by analysing advertising and information from third-party providers. This enables target groups to be identified for marketing activities. The data collected cannot, however, be assigned to a specific person and is deleted after being stored for a period of two months.

 

Google Signals: As an extension to Google Analytics 4, Google Signals can be used on the website to generate cross-device reporting. If you have activated personalised ads and linked your devices to your Google account, Google can use Google Analytics 4 to analyse your usage behaviour across devices and create database models, including for cross-device conversions. We only receive statistics from Google, not personal data. If you want to stop the cross-device analysis, you can deactivate the 'Personalised advertising' function in your Google account settings. Follow the related instructions on this page.

 

User IDs: The 'User IDs' function can be used on the website as an extension to Google Analytics 4. If you log in with this account on different devices, your activities, including conversions, can be analysed on all devices.

 

Google uses this information to analyse your [pseudonymised] use of our website, to produce reports on website usage and to provide us with other services related to website and internet usage. Google states that the IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. When you visit our website, your user behaviour is recorded in the form of events (such as page views, purchase activities including sales, interaction with the website or your 'click trail') as well as other data such as your approximate location (country and city), technical information about your browser and the end devices you are using or the referrer URL, i.e. from which website/advertising media you accessed our website.

 

You can prevent the collection and transmission of the data generated by the cookie and associated with your use of our website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on to deactivate Google Analytics. If you want to opt out of targeted advertising by Google, you can use the settings and opt-out options provided by Google.

 

If you allow cookies to be stored, Google Analytics will store your data for two months. Data that has been stored for this period will be deleted automatically. An overview of how Google Analytics uses date and the measures taken by Google to protect your data can be found in the  Google Analytics Help Center.

 

14.1.2 Google Tag Manager 

 

We use Google Tag Manager to integrate Google’s analytics and marketing services into our website and to manage these. Google Tag Manager is a tag management system that allows you to create and monitor tags on a user interface without having to modify code each time. The tool itself, which implements the tags, is a cookie-free domain and does not collect any personal data. However, the tool activates other tags, which themselves may collect data. Google Tag Manager itself, however, does not access this data.

 

If deactivation has been implemented at domain or cookie level, this remains in place for all tracking tags that are managed with Google Tag Manager.

 

More information regarding Google Tag Manager can be found in the Usage Guidelines of Google.

 

14.1.3 reCAPTCHA 

 

Captcha is the abbreviation for 'completely automated public Turing test to tell computers and humans apart'. This is a test designed to distinguish between humans and machines/robot programs, known as 'bots' for short.

 

reCAPTCHA is a captcha service provided by Google that attempts to distinguish whether a certain action online is performed by a human or by a computer program. reCAPTCHA is used as part of the double opt-in process when registering for the newsletter.

 

More information on data processing and instructions on data protection by reCAPTCHA can be found at: Google Terms of Service – Privacy Policy & Terms of Service – Google.

 

14.1.4 Google Maps 

 

We incorporate Google Maps on our website. This allows us to show you interactive maps directly on the website and enables you to use the map function easily.

 

By using Google Maps, information about how you use our website (including your IP address) may be transferred to a Google server in Ireland or the USA and stored there. Google may store this data as usage profiles for the purposes of customising its services, advertising and market research. If you are logged in to Google, your data will be assigned directly to your account. If you don’t want this to happen, you must first log out of your Google account. If you do not agree to the processing of your data, you can deactivate Google Maps and thus prevent the transmission of data to Google To do this, you must deactivate the JavaScript function in your browser. However, we would like to point out that, if you do this, you will not be able to use Google Maps, or only to a limited extent.

 

Your personal data is processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operating of our website).

 

14.1.5 Google marketing platform 

 

The Google Marketing Platform (GMP) is an advertising tool provided by Google that can be used to place and display adverts tailored to the interests of visitors to our website and third-party websites. A pseudonymous identification number (ID) is assigned to your browser in order to verify which adverts have been displayed in your browser and which adverts have been viewed. The use of GMP cookies enables Google to display adverts based on previous visits to our or other websites.

 

You can disable the storage of the cookies used by this tool by adjusting your browser settings accordingly, by deactivating the execution of JavaScript in your browser or by installing a tool such as 'NoScript'. You can also prevent the processing of the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: www.google.com/settings/ads/plugin.

 

14.1.6 Google Fonts 

 

We use some script and font libraries (Google Fonts) on our website to display our content correctly and in an appealing way in all browsers. Google Fonts are transferred to the cache of your browser to avoid repeated loading. If your browser does not support Google Fonts or prevents access to them, content will be displayed in a standard font.

 

Accessing script libraries or font libraries automatically activates a connection to the library operator. In theory it is possible that Google will collect personal data (e.g. IP address) and forward this to a server in Ireland or the USA.

 

You can prevent data processing by Google Fonts by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note however that this may result in restricting the functioning of the website.

 

More information on Google Fonts can be found at Frequently Asked Questions | Google Fonts | Google Developers and in Google’s Privacy Policy: Privacy Policy – Privacy Policy & Terms of Service – Google.

 

14.2 What is a CDN and how is it used? 

 

We use the Content Delivery Network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany (Cloudflare), and Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereafter referred to as “Cloudflare”), to enhance the security and performance of our website. This is in our legitimate interest. A CDN is a network of [globally] distributed servers capable of delivering optimised content to the website user. For this purpose, personal data may be processed in Cloudflare's server log files. Please compare the explanations under 'Hosting'.

 

A CDN is a network of [globally] distributed servers capable of delivering optimised content to the website user. For this purpose, personal data may be processed in Cloudflare’s server log files. Please compare the explanations under 'Hosting'.

 

Cloudflare is the recipient of your personal data and acts as a contractor for us.

 

Cloudflare has full access to the data traffic between its customers and their website visitors. This allows the provider to collect the following data for example:

 

• the accessed website
• the browser used
• the operating system
• the referrer URL
• IP address
• the provider sending the request

 

Cloudflare is the recipient of your personal data and acts as a contractor for us.

 

You have the right to object to processing of your data at any time. Your objection should be sent to the contact stated under section 1 or to the following email address: datenschutz@bouygues-es.com.

 

You can find more information at: www.cloudflare.com/cloudflare_customer_SCCs-German.pdf

 

15. How do we process personal data on our social network platforms and how are social media plugins used?

 

We maintain a presence on social networks and other platforms operated by third parties and process data about you in connection with this. In the process, we receive data from you (e.g. whenever you communicate with us or comment on our content) and from the platforms themselves (e.g. statistics).

 

We use social plugins (plugins) from various social networks on our website. You can use these plugins to share content or recommend products, for example.

 

These are the following:

 

• YouTube

We integrate videos from the 'YouTube' platform. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://policies.google.com/privacy?hl=de,

• Facebook

Functions and content of the Facebook service may be included in our website. This may include content such as images, videos or texts and buttons that allow users to share content from this website within Facebook. If the users are members of the Facebook platform, Facebook may associate the accessing of the content and functions stated above with the user profiles there. The list and appearance of the Facebook social plugins can be viewed here: developers.facebook.com/docs/plugins/; Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook Inc., 1601 Willow Avenue, Menlo Park, CA 94025, USA; Privacy Policy: www.facebook.com/privacy;

• Instagram

Our website may contain functions and content provided by Instagram. Service provider: Meta Platforms, Inc., D/B/A Instagram, 1 Hacker Way Building 14, First Floor Menlo Park, CA 94025, USA. Information on how Facebook processes data is contained in theInstagram privacy statement at: https://help.instagram.com/519522125107875.

• Twitter

Our website may contain functions and content provided by Twitter. This may include content such as images, videos or texts and buttons that allow users to share content from this website on Twitter. If the users are members of the Twitter platform, Twitter may associate the accessing of the content and functions stated above with the user profiles on its platform. Service provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, parent company: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy notice: twitter.com/de/privacy.

• Pinterest

Our website may contain functions and content provided by Pinterest. This may include content such as images, videos or texts and buttons that allow users to share content from this website on Pinterest. If the users are members of the Pinterest platform, Pinterest may associate the accessing of the content and functions stated above with the user profiles on its platform. Service provider: Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA; Privacy policy: policy.pinterest.com/de/privacy-policy.

• LinkedIn

Our website may contain functions and content provided by LinkedIn. This may include content such as images, videos or texts and buttons that allow users to share content from this website on LinkedIn. If the users are members of the LinkedIn platform, LinkedIn may associate the accessing of the content and functions stated above with the user profiles on its platform. Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, parent company: LinkedIn Corporation, 1000 W. Maude Avenue Sunnyvale, CA 94085, USA; Privacy policy LinkedIn Privacy policy; Cookie Policy: Cookie Policy | LinkedIn; Opt-Out option: Ads unsubscribe (linkedin.com).

• Xing

Our website may contain functions and content provided by Xing. This may include content such as images, videos or texts and buttons that allow users to share content from this website on Xing. If the users are members of the Xing platform, Xing may associate the accessing of the content and functions stated above with the user profiles on its platform. Service provider: XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany; Privacy statement: privacy.xing.com/de/datenschutzerklaerung.

• TikTok

Our website may contain functions and content provided by TikTok. This may include content such as images, videos or texts and buttons that allow users to share content from TikTok. If the users are members of the TikTok platform, TikTok may associate the accessing of the content and functions stated above with the user profiles on its platform. Service provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland; Privacy policy: www.tiktok.com/legal/page/eea/privacy-policy/de

 

Our website only integrates these plugins as an external link.

 

When you visit our website and one of the social plugins listed on the website is activated, a direct connection is created between your browser and the server of the particular social network. The content of the plugin is transmitted by the social network directly to your browser and integrated into the website. This informs the network that you have visited our website. If you are logged in to the social network, it may associate the visit with your account. If you interact with the plugins, the corresponding information is transmitted directly from your browser to the social network and stored there.

 

Even if you are not logged in to the social networks while visiting our website, data may be sent to the networks by websites with active social plugins. An active plugin generates a cookie with an identifier each time the website is accessed. Since your browser sends this cookie unprompted every time you connect to a server of the respective networks, the social networks could in theory use it to create a profile of the websites visited by the user associated with the identifier. It may then be possible to later associate this identifier with a person, for example when logging in to the social network at a later date.

 

MIBAG Property Managers business unit 

 

Privacy policy for tenants

 

1. Who is the data controller?

 

The following controllers are responsible for processing your data:

 

• Bouygues Energies & Services Schweiz AG, MIBAG Property Managers business unit;
• The property owners and their representatives as well as companies affiliated with the owner. 

 

You can address any concerns relating to the processing of your personal data to any controller. The most reliable method is via the following contact:

 

Bouygues Energies & Services Schweiz AG

MIBAG Property Managers business unit

Keyword: Data protection

Brandstrasse 24

8952 Schlieren, Switzerland

info@mibag.com

 

or you can also contact our data protection advisors at: dataprivacy.ch@equans.com

 

2. What are the purposes of the data processing?

 

Your personal data is required in order to complete or process rental agreements that you have concluded with the respective property owner.

 

Legal obligations also exist that must be fulfilled. These include obligations under tenancy law, the obligation to report moves/relocations, the obligation to check for sanctions/penalties, the obligation to store data, etc.

 

The processing of your personal data is also necessary for the following purposes:

 

• Debt collection
• Checking creditworthiness and identity
• Contracting of tradespeople for repairs and conversions
• Managing access
• Safeguarding interests in the case of legal disputes
• Digital processing including testing and development of IT tools
• Security, such as video surveillance

 

3. What are the categories of personal data to be processed?

 

The following categories of personal data are relevant:

 

• Personal data and contact details, such as first name, surname, gender, date of birth, marital status, home town/country, official ID, photo, language, details of family members, address, email, telephone number
• Job-related data, such as education, profession, employer
• Financial data, such as income, outstanding rent payments, credit reference details, debt enforcement information, certificates of loss
• Contractual data relating to the tenancy agreement
• Your housing situation
• Reference information
• Bank and insurance data, payment information
• Data from exchanges (text, image, voice), such as letters, email communication, communication via platforms or online channels, appointments, telephone calls
• Utility data, such as heat, electricity, water
• All other data that you provide or make available to us

 

The following categories of particularly sensitive personal data are relevant in rare cases:

 

• Data regarding support services, if this is required for payment of rent
• Data relating to bans on entering a home or neighbourhood
• Biometric data for relevant access systems

 

4. Which recipients will the personal data be passed on to?

 

Your personal data will be passed on to the following categories of data controllers:

 

• Insurance companies, banks
• Suppliers
• Courier companies
• Debt collection companies, law firms
• Authorities, courts
• Affiliated companies that provide services by way of our instructions
• Payment providers (such as credit card companies, banks, PayPal)
• Companies that provide credit reports and check compliance
• Potential direct or indirect purchasers of the rental property

 

We have no influence on the processing of your personal data by these data controllers. Please refer to the privacy policy of these third parties.

 

Your personal data will be passed on to the following categories of service providers:

 

• IT solution providers, such as GARAIO REM AG, Creanet Internet Service AG
• Companies in the construction sector, such as skilled trade providers, architectural firms, construction management companies, providers of construction software and solutions
• Companies specialising in lettering (e.g. for nameplates)
• Contractors responsible for the maintenance and management of the rental property
• Security companies
• Property valuation companies
• Survey and market research companies
• Common IT providers and IT service companies
• Common service companies, such as accountants, archiving companies

 

5. Where is your data processed and stored?

 

As a rule, your personal data is always stored in Switzerland.