Protecting your privacy means a lot to us. We respect your identity and privacy and ensure that they are protected and that your personal data is processed in accordance with the applicable laws.
Personal data includes all the details and information that refer to a specific or identifiable person. In addition to contact details such as your name, telephone number, address and e-mail address, this also includes other details you provide us with, such as your date of birth.
Who is responsible for data processing?
TILO SA is responsible for processing your data.
Please do not hesitate to contact TILO by e-mail: firstname.lastname@example.org.
Why do we collect personal data?
We know how important it is to you that your personal data is handled carefully. Data is only ever processed for specific purposes. This could be out of technical necessity or due to contractual requirements, legal provisions, overriding interest, i.e. for legitimate reasons, or if you have granted your express consent. We collect, store and process personal data where necessary. This includes for the purposes of managing customer relationships, preparing information on and marketing our products and services, assisting with technical issues and evaluation and further developing products and services.
What data is processed for marketing purposes?
Unless you object, we will use the following for marketing purposes: your customer data (e.g. name, gender, date of birth, address, customer number, e-mail address) and your click patterns on our website or in e-mails.
What data is processed when our websites are used?
When you visit our websites, our servers temporarily store each access in a log file. The following technical data is collected in the process and stored until it is automatically deleted after fourteen months at the latest:
- IP address of the computer requesting access
- The date and time of access
- The website from which our website is being accessed, including the search term where applicable
- The name and URL of the file being requested
- Any search queries performed (timetable, webpage’s general search function, products, etc.)
- The operating system on your computer (provided by the user agent)
- The browser you are using (provided by the user agent)
- The type of device when accessed via mobile phone
- The transmission protocol being used
This data is processed and collected for the purposes of system security and stability and for analysing errors and performance as well as for internal statistical purposes. It enables us to optimise our website.
The IP address is also analysed together with other data when there is an attempt to access the network infrastructure or in the event of other unauthorised or improper use of our websites for information and defence purposes and, where applicable, is used for the purposes of identification during criminal proceedings and in civil and criminal procedures against the data subject.
TILO does not accept any guarantee for compliance with data protection regulations for external websites that are linked to TILO webpages.
What are cookies and when are they used?
How are tracking tools used?
We use the web analytics services run by Google Analytics and other third parties for the purposes of designing and continuously optimising our websites and e-mails in line with customer needs.
We receive the following information as part of the process:
- The navigation path via which the visitor is accessing the website
- The length of time spent on the webpage or subpage
- The subpage from which the visitor leaves the website
- The country, region or city from which the visitor accesses the website
- The device (type, version, colour depth, resolution, width and height of the browser window)
- Returning or new visitors
The information is used to evaluate the visitor’s use of the websites
You can find out more about Google Analytics below.
Google Inc., a company of the US-based holding company Alphabet Inc., provides the Google Analytics service. Google does not link the anonymised IP address transmitted by your browser as part of the Google Analytics service to other data. Only in exceptional cases will the full IP address be transmitted to one of Google’s servers in the US and shortened there. According to Google Inc., the IP address is never linked to other data relating to the user.
For more information about the web analytics service used, please visit the Google Analytics website. For an introduction to how you can prevent your data from being processed by the web analytics service, visit https://tools.google.com/dlpage/gaoptout?hl=en
What are social plugins and how are they used?
Our websites use social plugins from sites such as Facebook. The plugins are marked with the provider’s logo, e.g. “Like” buttons.
If you access one of our websites and it contains one of these plugins, the provider will be notified via the plugin that you have accessed our website. If you are logged into the provider’s site at the same time, the provider can match up your visit to your profile. If you interact with the plugins, the corresponding information will be transmitted directly from your browser to the provider and stored there.
If you do not want providers to collect data about you, you can select the “Block cookies from third-party providers” option in your browser settings. If there is embedded content from other providers, the browser will then no longer send corresponding information to that provider’s server. However, in some cases this setting will mean that other content on our website no longer works.
How long will your data be stored for?
Your data will be deleted once it is no longer required for the purpose for which it was collected (e.g. as part of a contractual relationship). If there are legal or factual obstacles that prevent us from deleting the data (e.g. legal obligation of safekeeping), it will be made unavailable instead.
What rights do you have in relation to your personal data?
You have the following rights in relation to your personal data:
- You can request information about the personal data we have stored
- You can request for your personal data to be rectified, supplemented, blocked or deleted
- You can object to your data being used for marketing purposes
To exercise these rights, simply write an e-mail: email@example.com.
Will data be disclosed to third parties?
Your personal data will not be disclosed, sold or transmitted in any other way to third parties outside the public transport industry .
Will your personal data be transmitted abroad?
We are also authorised to transmit your personal data to third parties (for example external service providers) abroad. These are obliged to comply with data protection law to the same extent as we are. If the level of data protection in a country does not match that in Switzerland, we shall contractually ensure that your personal data is protected to the same level as in Switzerland at all times.
We employ suitable technical and organisational security measures to protect the personal data we store from manipulation, partial or total loss and unauthorised access by third parties. Our security measures are continuously improved in line with technological development.
We also take data protection within SBB very seriously. Our staff and the external service providers working on our behalf are committed to maintain confidentiality and to comply with data protection provisions.
We will take appropriate precautionary measures to protect your data. However, the transmission of information over the Internet and other electronic means always carries certain security risks and we cannot offer any guarantee as regards the security of information transmitted in this way.