Privacy notice

1. Data privacy at a glance

General information

The information in this section briefly explains what happens to your personal data when you use this website. The term ‘personal data’ means any data that can be used to identify you. Detailed information on the subject of data privacy can be found in our full privacy notice below.

The processing of the personal data of individuals within the European Economic Area (EEA) and outside Europe is subject to the provisions of the General Data Protection Regulation (GDPR) as well as those of other applicable foreign data protection laws.
The provisions of the Swiss Federal Act on Data Protection (FADP) and the associated Ordinance on the Federal Act on Data Protection (FODP) apply to the processing of personal data by Swiss companies within our group.
The European Commission has declared that Switzerland and the United Kingdom offer an equivalent level of data protection, thereby ensuring the free and secure transfer of data within the corporate group.
For this reason, any references in this privacy notice to articles of the GDPR are not cross-referenced to corresponding articles of the Swiss Federal Act on Data Protection (FADP), the Ordinance on the FADP (FODP) or other data protection laws/ordinances.

Data collection on this website

Who is responsible for data collection on this website?

Data on this website are processed by the website operator (the ‘controller’ within the meaning of the GDPR). Their contact details can be found under ‘Controller’ in this privacy notice.

How do we collect your data?

Some of the data we collect are provided by you, for example when you fill in a contact form.

Other data are collected by our IT systems when you visit our website, either automatically or with your consent. These are mainly technical data (e.g. Internet browser, operating system or time of page visit). These data are recorded automatically when you visit this website.

What do we use your data for?

Some of the data are collected to ensure error-free functioning of the website. Other data can be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right to obtain information about the source, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request the rectification or erasure of these data. If you have consented to the processing of your personal data, you have the right to withdraw your consent at any time. Furthermore, under certain circumstances you have the right to request the restriction of processing of your personal data. You also have the right to lodge a complaint with the supervisory authority.

You can contact us at any time to ask about this or any other issue relating to data privacy.

2. Hosting

External hosting

This website is hosted by an external service provider (the ‘processor’ within the meaning of the GDPR). Personal data collected on this website are stored on the host’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website visits, and other data generated via the website.

We use the web host for the purpose of fulfilling our contractual obligations to our potential and existing customers (Art 6(1)(b) GDPR) and in the interests of secure, fast and efficient provision of our online services by a professional provider (Art 6(1)(f) GDPR). If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art 6(1)(a) GDPR, and also Art 25(1) of the German Telecommunications Telemedia Data Protection Act (TTDSG) where consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of TTDSG. You may withdraw your consent at any time.

Our web host processes your data only to the extent necessary to fulfil their service obligations and to comply with our instructions regarding these data.

Our web host is:
gn2 Hosting | Internetagentur | Coworking
Rüdiger Nitzsche
Hahnweg 61a
96450 Coburg, Germany

Data processing

We have concluded a data processing agreement (DPA) with the above-mentioned provider (the processor). This agreement is a mandatory requirement under data privacy laws and guarantees that the host processes the personal data of visitors to our website only in accordance with our instructions and in compliance with the GDPR.

3. General and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy notice.

A variety of personal data are collected whenever you visit this website. The term ‘personal data’ refers to any data that can be used to identify you. This privacy notice explains which data we collect and what we use them for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g. through email communications) is prone to security breaches. It is not possible to fully protect data from access by third parties.

The controller

The data processing controller on this website is:

spannverbund group AG
Seetalstraße 185
CH-6032 Emmen

Europa: 00 800 00000 100
Worldwide: (+) 800 00000 100 *Replace (+) by international call prefix in your country
E-Mail:

According to the GDPR definition, ‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Duration of storage

Unless a more specific storage period is defined in this privacy notice, we retain your personal data only for as long as necessary to fulfill the purposes for which they were collected. If you make a legitimate request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be erased when these reasons cease to apply.

General information about the legal basis for processing data on this website

If you have consented to data processing, we process your personal data on the basis of Art 6(1)(a) GDPR, or Art 9(2)(a) GDPR if special categories of data are processed in accordance with Art 9(1) GDPR. If you have explicitly consented to the transfer of your personal data to a third country, the legal basis for data processing is additionally Art 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information in your end device (e.g. via device fingerprinting), the legal basis for data processing is additionally Section 25(1) TTDSG. You may withdraw your consent at any time. The legal basis for processing personal data that are required for the performance of a contract or for the implementation of pre-contractual measures is Art 6(1)(b) GDPR. In addition, we process personal data that are required for the fulfilment of a legal obligation on the basis of Art 6(1)(c) GDPR. We may also process data on the basis of our legitimate interest in accordance with Art 6(1)(f) GDPR. The following sections of this privacy notice explain the relevant legal basis in specific cases.

Data protection officer

According to Art 37 GDPR, we are not required to appoint a data protection officer. The following people may be contacted on matters relating to data privacy:

Prof. Stefan Böhling President of the supervisory board
Stephan Grau Member of the supervisory board
Urs Huber Member of the supervisory board

If you require any further information, please contact us by phone or email:
Europa: 00 800 00000 100
Worldwide: (+) 800 00000 100 *Replace (+) by international call prefix in your country
E-Mail:

Withdrawing your consent to data processing

Many data processing operations can only be carried out with your express consent. You can withdraw your consent at any time. Withdrawal of your consent does not affect the lawfulness of processing conducted prior to the withdrawal of your consent.

Right to object to the collection of data in special cases and right to object to direct marketing (Art 21 GDPR)

BASED ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON THE BASIS OF ART 6(1)(E) or (F) GDPR, INCLUDING ANY PROFILING BASED ON THESE PROVISIONS. PLEASE REFER TO THIS PRIVACY NOTICE TO DETERMINE THE LEGAL BASIS ON WHICH THE PROCESSING OF DATA IS BASED. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR DOING SO WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR SERVE TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART 21(1) GDPR).

WHERE PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES, YOUR PERSONAL DATA SHALL NO LONGER BE PROCESSED FOR SUCH PURPOSES (OBJECTION PURSUANT TO ART 21(2) GDPR).

Right to lodge a complaint with the supervisory authority

In the event of an infringement of the GDPR, as data subject you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint exists without prejudice to any administrative or judicial remedy.

Right to data portability

You have the right to receive data that we automatically process on the basis of your consent or in the performance of a contract in a commonly used, machine-readable format, and to transmit those data to a third party. If you request to have your data transferred directly to another controller, we will do so only where technically feasible.

SSL and TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential information, such as orders or enquiries which you send to us as the website operator. You can tell that a connection is encrypted when the address line of your browser changes from ‘http://’ to ‘https://’ and a padlock icon is displayed.

When SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

Right to access, erasure and rectification

Within the framework of the applicable legal provisions, you have the right to access your personal data free of charge at any time and to obtain information as to their source, their recipients and the purpose of processing. You also have the right to rectification or erasure of these data. You can contact us at any time to ask about this or any other issue relating to data privacy.

Right to the restriction of processing

You have the right to request the restriction of processing of your personal data. You can contact us at any time to exercise this right. The right to the restriction of processing exists in the following cases:

  •  If you contest the accuracy of the personal data stored by us, we will generally need time to verify this. You have the right to request the restriction of processing of your personal data while our investigations are underway.
  • If the processing of your personal data was/is unlawful, you can request restriction of processing instead of erasure.
  • If we no longer need your personal data, but you require them to establish, exercise or defend legal claims, you have the right to demand the restriction of processing of your personal data instead of their erasure.
  • If you have raised an objection pursuant to Art 21(1) GDPR, your interests and our interests must be weighed up to determine whether one overrides the other. You have the right to request the restriction of processing of your personal data until it is determined whose interests prevail.

If you have restricted the processing of your personal data, these data may – with the exception of storage – be processed only with your consent or to establish, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

Objection to marketing emails

The operators of this website hereby object to the use of contact data published in our legal notice in compliance with legal disclosure requirements for the purpose of sending unsolicited promotional and informational material. We explicitly reserve the right to take legal action in the event of receiving unsolicited promotional information, for example, through spam emails.

4. Data collection on this website

Cookies

Our website uses cookies. Cookies are small text files which do not cause any harm to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain on your device until you yourself delete them or they are automatically deleted by your web browser.

In some cases, third parties may also store cookies on your device when you visit our website. These third-party cookies enable us or you to use certain third-party services (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary because certain website features would not function without them (e.g. the shopping basket or video display function). Other cookies are used to analyse user behaviour or display adverts.

Cookies which are required to facilitate electronic communication processes, to provide certain functions you have requested (e.g. shopping basket function) or to optimise the website (e.g. statistical cookies that measure the number of visitors to the site) – known as essential cookies – are stored on the basis of Art 6(1)(f) GDPR where no other legal basis applies. The website operator has a legitimate interest in storing essential cookies so that they can provide their services in an optimised manner without technical faults. If your consent has been obtained for the storage of cookies and comparable tracking technologies, processing is carried out exclusively on the basis of this consent (Art 6(1)(a) GDPR and Art 25(1) TTDSG); you can withdraw your consent at any time.

You can set your browser so that you are informed about the use of cookies and can choose your individual cookie preferences; you can also set your browser to automatically delete cookies when you close it. If you choose to deactivate cookies, the features of this website may be limited.

We will specifically inform you of the use of third-party or analytics cookies in accordance with this privacy notice and request your consent where appropriate.

Consent with Borlabs Cookie

Our website uses the Borlabs Cookie consent technology to obtain your consent to store certain cookies in your browser or to use certain technologies and to log your consent in accordance with data privacy laws. The provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany (hereafter referred to as Borlabs).

When you visit our website, a Borlabs Cookie is stored in your browser which logs the consent you have given us or the withdrawal of this consent. These data are not shared with the provider of Borlabs Cookie.

The data that are collected are stored until you ask us to delete them or you yourself delete the Borlabs Cookie, or the reason to retain them no longer applies. Mandatory statutory retention periods remain unaffected. You can find details about the information stored by Borlabs Cookie here https://borlabs.io/kb/what-information-does-borlabs-cookie-store/.
We use the Borlabs Cookie consent technology to obtain statutory consent for the use of cookies. The legal basis for this is Art 6(1)(c) GDPR.

Server log files

The website server automatically collects and stores the following information in server log files which your browser automatically sends to us:

  •  browser type and version
  • operating system used
  • referrer URL
  • host name of accessing computer
  • time of server request
  • IP address

These data are not merged with any other data sources.

The legal basis for collecting these data is Art 6(1)(f) GDPR. The website operator has a legitimate interest in presenting an optimised and fully functional website – server log files must be created for this purpose.

Contact form

If you send us an enquiry via the contact form, the information entered in the form, including your contact details, are stored by us so that we can process your request and respond to any follow-up questions. We will not transfer these data without your consent.

In so far as your enquiry is connected to the performance of a contract or is required for the implementation of pre-contractual measures, the legal basis for processing these data is Art 6(1)(b) GDPR. In all other cases, processing is based on our legitimate interest in effectively processing the requests we receive (Art 6(1)(f) GDPR) or on your consent (Art 6(1)(a) GDPR), in so far as this was obtained; you may withdraw your consent at any time.

The data that you entered in the contact form are retained by us until you ask us to erase them, you withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. your request has been dealt with). Mandatory statutory provisions – especially retention periods – remain unaffected.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it (name, request), are stored and processed by us so that we can deal with your request. We will not transfer these data without your consent.
In so far as your enquiry is connected to the performance of a contract or is required for the implementation of pre-contractual measures, the legal basis for processing these data is Art 6(1)(b) GDPR. In all other cases, processing is based on our legitimate interest in effectively processing the requests we receive (Art 6(1)(f) GDPR) or on your consent (Art 6(1)(a) GDPR), in so far as this was obtained; you may withdraw your consent at any time.

The data that you sent us via the contact form are retained by us until you ask us to erase them, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. your request has been dealt with). Mandatory statutory provisions – especially retention periods – remain unaffected.

5. Our social media presence

Data processing by social networking sites

We maintain public profiles on social networking sites, also referred to as social media platforms. You can find more information about the social media platforms we use below.

Social media platforms such as Facebook, Twitter etc. can routinely conduct a comprehensive analysis of your user behaviour when you visit their website or a website with integrated social media content (e.g. like-buttons or advertising banners). When you visit our social media pages, numerous processing operations pertaining to data privacy law are set in motion, which are described in more detail below.

When you are logged into your social media account and visit our social media page, the operator of the social media platform can assign this visit to your user account. In certain circumstances your personal data may even be collected when you are not logged in or do not have an account with the respective social media site. In this case data may be collected via cookies which are stored on your device or by obtaining your IP address, for example.

The operators of the social media sites can use the data collected in this way to create user profiles containing your preferences and interests.  This is how targeted advertising based on your interests may appear on and outside the respective social media page. If you have an account with the respective social media platform, targeted advertising may appear on all devices that you are or were logged into.

Please note that we cannot be aware of all the processing operations on the social media platforms. Depending on the provider, other processing operations may thus be performed by the operators of social media platforms. To find out more, please refer to the terms of use and data privacy provisions of the respective social media platforms.

Legal basis

Our social media pages are intended to ensure the widest possible Internet presence. Their legal basis is our legitimate interest within the meaning of Art 6(1)(f) GDPR. The analytical processes initiated by the social media platforms may have different legal bases which must be indicated by the operators of the social media platforms (e.g. consent within the meaning of Art 6(1)(a) GDPR).

Controller and exercising of rights

When you visit one of our social media sites (e.g. Facebook), we and the operator of the social media platform are jointly responsible for the data processing operations triggered by your visit. You can exercise your rights (access, rectification, erasure, restriction of processing, data portability and complaints) both with respect to us and with respect to the operator of the social media platform (e.g. Facebook).

Please be aware that, despite having joint responsibility with the social media platform operators, we do not have full control of the data processing operations of the social media platforms. Our options largely depend on the company policy of the respective provider.

Duration of storage

The data collected directly by us via our social media pages are erased from our systems as soon as you ask us to erase them, withdraw your consent to storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – especially retention periods – remain unaffected.
We have no control over the duration of storage of any personal data stored by the operators of the social media platforms for their own purposes. Please consult the operators of the social media platforms directly for more information in this regard (e.g. their privacy notice, see below).

Our social networking sites

XING
We have a XING profile. The service provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. More information about how XING processes your personal data can be found in their privacy notice:  https://privacy.xing.com/de/datenschutzerklaerung.

LinkedIn
We have a LinkedIn profile. The service provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

You can use the following link to deactivate LinkedIn advertising cookies: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transfer to the USA is based on the EU Commission’s standard contractual clauses. You can find more details here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.
More information about how LinkedIn processes your personal data can be found in their privacy notice: https://www.linkedin.com/legal/privacy-policy.