Thank you for your visit to our website.
2 Name and address of controller
- For the purposes of the GDPR, controllers for gis-ag.ch are:
Telefon: +41 41 984 11 33
2.1 Point of contact for privacy issues
Please contact us at the following email address with your privacy concerns: email@example.com.
3 General information about data processing
3.1 Scope of personal data processing
Our approach is essentially to process personal data only to the extent that is necessary for the provision of our services. Personal data are generally processed only with the consent of the user. An exception applies in cases in which there are practical reasons why prior consent can not be obtained, and the law permits processing of the data.
3.2 Regulations governing the processing of personal data
The legal regulation which governs obtaining a data subject's consent for the processing of their personal data is Art. 6 (1) a of the EU General Data Protection Regulation (GDPR, or DSGVO in German). The legal regulation which governs the processing of personal data necessary for the fulfilment of a contract to which the data subject is a party is Art. 6 (1) b of the GDPR. This also applies to processing operations which are required for pre-contractual formalities. In cases where personal data must be processed to fulfil a legal obligation to which our company is subject, the applicable legal regulation is Art. 6 (1) c of the GDPR. In the event that vital interests of the data subject or another natural person require personal data to be processed, the applicable legal regulation is Art. 6 (1) d of the GDPR. If processing is necessary to safeguard the legitimate interests of our company or of a third party, and where the data subject's own interests, fundamental rights and freedoms do not prevail over the aforementioned interests, the applicable legal regulation is Art. 6 (1) f of the GDPR.
3.3 Data deletion and storage duration
Data subjects' personal data will be deleted or locked as soon as the purpose of the storage is satisfied. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Data are also deleted or locked when a storage period prescribed by the specified standards expires, unless there is a need for further storage of the data in order to complete or fulfil a contract.
3.4 Disclosure to third parties
We transfer your personal data to third parties only where necessary for the fulfilment of contracts with your company.
The legal regulation governing the data transmission is Art. 6 (1) b of the GDPR.
An exception to this is the use of Google Maps. Data is transmitted to Google Inc. See section 7.
4 Provision of gis-ag.ch and creation of logfiles
4.1 Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the remote computer system in question.
The following data are collected:
- The user's IP address
- Date and time of access
- Pages visited on gis-ag.ch
The data are stored in log files on our system independently from other personal data belonging to the user.
4.2 Legal regulations governing data processing
The legal regulation governing the temporary storage of data and log files is Art. 6 (1) f of the GDPR.
4.3 Purpose of data processing
Data is stored in log files for purposes of website functionality. In addition, these data are used to optimise the website and to ensure the security of our information technology systems. Data collected in this way are not used for marketing purposes.
4.4 Storage duration
Data log files are stored for a maximum of seven days. In the event that they are stored for longer, users' IP addresses are deleted or anonymised, ensuring it is no longer possible to identify the visiting client.
4.5 Objection and deletion rights
The collection of data for use by the website, and the storage of the data in log files, is essential for the website's operation. Consequently, users are not entitled to raise objections.
5.1 Description and scope of data processing
To this end, the following data may be transmitted:
- Language settings
- Security token
- Visited pages
5.2 Legal regulations governing data processing
The legal regulation which governs the processing of personal data via cookies is Art. 6 (1) f of the GDPR.
5.3 Purpose of data processing
User data collected through technically required cookies will not be used to create user profiles.
Cookies are also used for analysis purposes in order to improve the quality of our website and its contents. We use analysis cookies to discover how the website is used, enabling us to keep improving our service.
5.4 Storage duration, objection and deletion options
You also have the option of opting out of the use of Google Inc. analysis cookies by installing the browser add-on available via the following link: https://tools.google.com/dlpage/gaoptout.
6.1 Intended use
Your personal data, which you make available to us by e-mail, contact form etc., we process to answer and settle your inquiries.
a) If you have given us your express consent to process your data, Art. 6 (1) (a) GDPR is the legal basis for such processing, provided that this provision applies.
b) If we process your data for the implementation of pre-contractual measures, Art. 6 para. 1b GDPR is the legal basis, insofar as this provision applies.
c) In all other cases (in particular when using a contact form and when sending direct mail), Art. 6 (1) (f) GDPR is the legal basis, insofar as this provision applies. Our legitimate interest in processing is to communicate with you quickly and to answer your enquiries cost-effectively.
6.3 Storage duration
Your data will be deleted if it can be inferred from the circumstances that your inquiry or the facts concerned have been finally clarified, provided that we are not obligated to further store them on account of statutory or contractual storage obligations or for other reasons.
You have the right to revoke your consent at any time with future effect.
7 Usage of Google Maps
7.1 Description and scope of data processing
We use the plugin of Google Maps on this website. This allows us to show you interactive maps directly within our website, allowing you to conveniently use the map feature. Google receives the information that you have accessed the corresponding sub-page of our website and the following data is transmitted to Google:
- IP address
- Date and time of the request
- Requested content (concrete page)
- Access status / HTTP status code
- Transmitted amount of data
- Requesting website
- Operating system
- Language and version of the browser
This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log from your account. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an analysis is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of this user profile. To exercise your right, you must contact google directly.
7.2 Legal regulations governing data processing
The legal regulation which governs the processing of personal data is Article 6 (1) f of the GDPR.
7.3 Purpose of data processing
To offer you this interactive feature, we use the functionality provided by Google.
7.4 Storage duration, objection and deletion rights
8 Rights of the data subject
In cases where personal data relating to you are being processed, you are the data subject within the meaning of the GDPR and you have the following rights in respect of the controller:
8.1 Right of information
You may ask the controller to confirm whether personal data concerning you are being processed by us. If such processing is taking place, you can request that the controller supply the following information:
- the purposes for which the personal data are being processed;
- the categories of personal data being processed;
- the recipients, or categories of recipients, to whom the personal data relating to you have been disclosed or are still being disclosed;
- the planned duration of storage of your personal data or, if specific information is not available, the criteria for determining the duration of storage;
- the applicability of the following rights: the right to correct or delete any personal data relating to you, the right of restriction of processing by the controller, or the right of appeal against such processing;
- the applicability of a right of appeal to a supervisory authority;
- all available information on the source of the data if the personal data has not been collected from the data subject;
- the use of automated decision-making processes, including profiling under the meaning of Art. 22 (1) and (4) of the GSGVO (GDPR) and - in these cases at least - meaningful information about the decision-making logic involved, as well as the scope and intended impact of such processing on the data subject.
You have the right to request information about whether your personal information is being transferred to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees in accordance with. Art. 46 of the GDPR in connection with the transfer.
8.2 Right to rectification
You have a right to require the controller to correct and/or add to your data if the personal data relating to you are incorrect or incomplete. The controller must make the correction without delay.
8.3 Right of restriction of processing
You may request a restriction of processing of your personal data under the following circumstances:
- should you contest the accuracy of your personal information, for a period of time that enables the controller to verify the accuracy of your personal data;
- the use being made of the data is unlawful and you decline the option of the deletion of your personal data, demanding instead that the use of that personal data be restricted;
- the controller no longer requires the personal data for processing purposes, but you require those data in order to assert, exercise or defend legal claims, or
- if you objected to the processing of the data under the terms of Art. 21 (1) of the GDPR, and it has not yet been established whether the controller's legitimate reasons for use outweigh your own reasons.
In the event that the processing of personal data concerning you has been restricted, such data may be used only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been applied in accordance with the above conditions, the controller will inform you before the restriction is lifted.
8.4 Right of deletion
a) Deletion responsibilities
You may require the controller to delete your personal information immediately, and the controller is required to delete that information immediately if any of the following reasons apply:
- Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You withdraw your consent to the processing in accordance with Art. 6 (1) a or Art. 9 (2) a of the GDPR, and there is no other legal justification for the processing.
- You raise an objection to the processing in accordance with Art. 21 (1) of the GDPR, and there are no prior justifiable reasons for the processing, or you raise an objection to processing in accordance with Art. 21 (2) of the GDPR.
- Your personal data have been processed unlawfully.
- The personal data concerning you are required to be deleted in order to fulfil a legal obligation under Union law, or the law of the Member States to which the controller is subject.
- The personal data relating to you were collected in relation to information society services offered pursuant to Art. 8 (1) of the GDPR.
b) Information to third parties
If the controller has made the personal data concerning you public and is required to delete those data in accordance with Article 17 (1) of the GDPR, it must, with due regard to available technology and implementation costs, take appropriate measures, including those of a technical nature, to inform controllers who process the personal data that you, as a data subject, have requested the deletion of all links to such personal data or of copies or replications of such personal data.
The right to deletion does not apply if processing is necessary
- in the interests of the right to freedom of expression and information;
- to fulfil a legal obligation required by the law of the Union of Member States, or of Switzerland, to which the controller is subject, or to carry out a task in the public interest or in the exercise of public authority which has been delegated to the controller;
- for reasons of public interest in the field of public health pursuant to Art. 9 (2) h and i and Art. 9 (3) of the GDPR;
- for archival purposes of public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) of the GDPR, to the extent that the law referred to in subparagraph (a) is likely to prevent or seriously impair the achievement of the objectives of that processing operation, or
- to assert, exercise or defend legal claims.
8.5 Right of information
If you have approached the controller to exercise your right of data rectification, deletion or restriction, that controller is obliged to notify all recipients to whom your personal data have been disclosed of this data rectification, deletion or restriction, unless this task proves to be impossible or involves a disproportionate effort. You have a right to require the controller to inform you about such recipients.
8.6 Right of data portability
You have the right to receive personally identifiable information you have provided to the controller in a structured, standard and machine-readable format. You also have the right to transfer these data to another person without hindrance by the controller to whom the personal data was supplied, provided that
- the processing is based on consent in accordance with Art. 6 (1) a of the GDPR or Art. 9 (2) of the GDPR or on a contract in accordance with Art. 6 (1) b of the GDPR, and
- the processing is performed using automated procedures.
In exercising this right, you also have the right to ensure that the personal data relating to you are transmitted directly from one controller to another, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected through this action.
The right of data portability does not apply in the case of processing personal data necessary to carry out a task in the public interest or in the exercise of public authority which has been delegated to the controller.
8.7 Objection rights
You have the right at any time, for reasons relating to your own particular situation, to raise an objection against any processing of your personal data in accordance with Art. 6 (1) e or f of the GDPR; this also applies to profiling based on such provisions.
The controller will no longer be entitled to process the personal data concerning you unless it can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or where the purpose of the processing is to enforce, exercise or defend legal claims.
If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling to the extent that it is associated with such direct mail.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58/EC, you have the option, within the context of the use of information society services, of exercising your right to object by means of automated procedures that use technical specifications.
8.8 Right to revoke the data protection consent declaration
You have the right to revoke your data protection consent declaration at any time. Revocation of this consent does not affect the legality of any processing carried out subject to that consent until your revocation.
8.9 Automated decision in individual cases, including profiling
You have the right not to have any decision made against you which is based solely on automated processing, including profiling, where that decision will have legal consequences for you, or affect you in a similar manner. This does not apply if the decision
- is required for the purposes of concluding or fulfilling a contract between you and the controller,
- is permitted under Union or Member State legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
- is taken with your express consent.
However, these decisions must not be based on special categories of personal data as defined in Art. 9 (1) of the GDPR, unless Art. 9 (2) a or g of the GDPR applies and appropriate measures have been taken to protect the relevant rights and freedoms and your own legitimate interests.
With regard to the cases mentioned in (1) and (3), the controller must take appropriate measures to uphold these rights and freedoms and their legitimate interests, including, at a minimum, the controller's right to secure the intervention of a person, the right to express his/her own position and the right to challenge the decision.
8.10 Right of complaint to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your place of residence or employment, or the place of the alleged infringement, if you believe that the processing of the personal data concerning you is in violation of the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the appeal's status and outcome, including the option of a judicial remedy pursuant to Article 78 of the GDPR.