Last updated: 2022

SBB AG Immobilien, Trüsselstrasse 2, 3000 Bern 65, Switzerland, operates this website and the services offered on it and is thus responsible for processing your data.

This Privacy Policy applies to the processing of personal data by SBB AG Immobilien within the scope of the Swiss Data Protection Act and the General Data Protection Regulation (GDPR) of the European Union.

It gives you the most important information you need to know: What data we process, for what purpose we need the data, how we protect them, what added value you gain from the data processing, and how you can object to it.

Personal data include all details and information that refer to an identified or identifiable person. In addition to your contact details such as name, telephone number, postal address or e-mail address, this includes further information such as your date of birth.

When we refer to the processing of your personal data in this Privacy Policy, we mean all the ways in which your personal data is handled. This includes data storage, processing, use, erasure, etc.

 

What personal data do we collect and use?

 

Data you give us

These are data that you provide to us, for example when registering for inclusion in the list of prospective tenants, when creating a customer account, when making enquiries, when applying for a property or when submitting reports through the tenant portal. We use this data:

• to inform you about available properties (according to your interest in apartments, office space or commercial space)
• to contact you
• to process your enquiry
• to process your application

 

Data collected when registering for inclusion in the list of prospective tenants for apartments

We collect the following data upon registration for inclusion in the list of prospective tenants for apartments:

• Title
• First name
• Surname
• E-mail
• Postcode, place of residence
• Reference number of the desired apartment

These data are stored in a database and are used for the purpose of marketing the building. You can remove yourself from the list of prospective tenants at any time by clicking on the link included in the confirmation e-mail.

 

Data collected following enquiries concerning office space and commercial space

We collect the following data whenever you express any interest in office space and commercial space using the contact form:

• Company
• Title
• First name
• Surname
• E-mail
• Telephone number
• Street
• Postal code, town/city
• Message
• Reference number for the desired space or the area required in m²
• Additional requirements for the desired space

These data are stored in a database and are used for the purpose of marketing the office and commercial space. After the initial contact, these data are supplemented by us with further data acquired during any subsequent contact (e.g. with the contact history). If you wish, you can agree to receive additional information concerning other projects.

 

Data collected when making a general enquiry

We collect the following data in the event that you submit an enquiry using the contact form other than a form for expressing an interest in a rental property (apartment, office or commercial space):

• Company
• Title
• First name
• Surname
• E-mail
• Telephone number
• Street
• Postal code, town/city
• Message

These data are temporarily stored on the website for 6 months and then automatically erased. An e-mail is generated by your request and forwarded to the relevant persons / organisations.

 

Data collected when submitting a report through the tenant portal

We collect the following personal data in the event that you send a message using the form on the tenant portal (damage report, report to the manager, report to the caretaker, room reservation):

• Title
• First name
• Name
• E-mail
• Telephone number
• Apartment number
• Message

These data are temporarily stored on the website and processed by us (SBB AG) and a third-party facility management provider.

 

Data collected when applying for an apartment

If you are applying for an apartment, this can be done through a letting agency instructed by us. The letting agency is obliged under contract to comply with the SBB AG Privacy Policy. We collect the following personal data from you and the other parties to the contract for the purpose of assessing your application:

• Title
• First name
• Name
• Date of birth
• Marital status
• Nationality
• Place of origin
• E-mail
• Telephone number
• Previous address
• Employment status
• Employer contact details
• Gross annual income
• Debt enforcement register extract

In addition, other non-personal data are collected. After the apartments have been rented, your data will be erased unless you have been allocated the apartment or you have consented to the use of your data for the rental of apartments in relation to other projects.

 

Data collected when signing up for a newsletter

We collect the following data in the event that you sign up for our newsletter:

• Title
• First name
• Surname
• E-mail

You can also enter your interests voluntarily where applicable. We process these data in order to personalise the information and offers we send you and to tailor them more effectively to your interests.

We use third-party e-mail marketing services that use tracking tools when sending e-mails. We collect the data for statistical purposes and subsequent dispatch as well as to optimise the content of our messages.

The following data are used:

• Information about the address file used
• Subject and number of newsletters sent
• Addresses to which the newsletter has not yet been sent
• Addresses to which the newsletter has been sent
• Addresses with failed dispatch
• Opening rate
• Addresses that have opened the newsletter
• Addresses that have unsubscribed from the newsletter distribution list
• Clicking behaviour

At the end of each newsletter there is a link through which you can unsubscribe from the newsletter at any time. When you unsubscribe, you can tell us your reason for doing so if you wish. After unsubscribing, your e-mail address will be blocked to prevent further newsletters from being sent to your e-mail address.

In order to prevent the use of the web beacon in our newsletter, please adjust the settings to stop HTML being displayed in messages.

 

Data collected when booking a station tour

We collect the following data when you submit a booking request for a station tour using the form:

• Date and time
• Group name
• Number of participants
• Are there people with impaired mobility in the group
• Personal details of the contact person
  • Title
  • First name
  • Surname
  • Company
  • E-mail
  • Telephone number
  • Street
  • Postcode and city/town
• Group type

This data is stored in a database and processed by our partner agency for the purpose of carrying out the station tour.

 

Data collected when paying for a station tour

We collect the following data when you pay for a station tour via the link:

• Booking purpose
• Personal details of the contact person
  • First name
  • Surname
  • E-mail
• Payment type
• Payment date

The payment is made via an external payment service provider (Payrexx AG). The payment service provider may process the following data: first name, surname, address, bank details incl. credit card numbers, TANs, checksums.

The terms and conditions and the data protection information of the respective payment service providers apply to the payment transactions; this information can be accessed on the respective website or transaction application. We also refer to these for further information and assertion of revocation, information and other data subject rights.

You can find further information in the Payrexx AG privacy policy.

 

Data that are automatically collected whenever you visit this website

Whenever customers visit this website, our servers temporarily store each visit in a log file. The following technical data are collected as part of this process and stored until they are deleted automatically after 4 weeks at the latest:

• The IP address of the computer requesting access;
• the name of the owner of the IP address range (usually your Internet access provider)
• the date and time of access;
• the website from which our website is being accessed (referrer URL), including the search term where applicable;
• the name and URL of the file being requested;
• the status code (e.g. error message);
• the operating system on your computer;
• the browser you are using (type, version and language);
• the transmission protocol being used (e.g. HTTP/1.1) and
• your username from the registration/authentication process, where applicable.

We collect and process these data in order to guarantee system security and stability and to assess error and performance analyses. We also use the IP address to set the default language on the website. The IP address is also analysed together with the other data following any attempt to access the network infrastructure or in the event of any other unauthorised or improper use of our website in order to establish what has occurred and to prevent subsequent attacks and, where applicable, will be used for the purposes of identification during criminal proceedings and in civil and criminal procedures against the users concerned.

Finally, whenever you visit this website, we use cookies and other applications and tools based on cookies. You can find further details below in this Privacy Policy.

SBB AG does not provide any warranty concerning compliance with data protection regulations of non-SBB websites to which links are provided from SBB websites.

 

Mapbox map service

We use the map service of Mapbox, Inc. on this website. When you open a page with a Mapbox map, your browser connects to a Mapbox server in order to display this map. When this connection is established, Mapbox collects the following technical data in particular:

 

• Your IP address of the requesting computer,
• the date and time of access,
• the website from which the access was made,
• the name and URL of the map accessed,
• the operating system of your computer,
• the browser you use (type, version and language),

Further information can be found in the privacy policy of mapbox.com.

 

Video Hosting Provider – bunny.net

We use the video hoster bunny.net on this website to display some videos. When you click on a video, your browser connects to the server of our video hoster in order to display the video. During this connection, Bunny.net collects the following technical data in particular:

• Your IP address of the requesting computer,
• the date and time of access
• the website from which the access was made
• the name of the video accessed
• the operating system of your computer

You can find more information in the data protection declaration of bunny.net.

 

Friendly Captcha

Our website uses the “Friendly Captcha” service offered by Friendly Captcha GmbH (Am Anger 3-5, 822237 Wörthsee, Germany). This service is a privacy-friendly solution that makes it difficult to run automated programs and scripts (bots) on our website. We have integrated the Friendly Captcha code into our website in forms so that the visitor’s device can connect to Friendly Captcha servers and receive a computational task. The device solves the task (puzzle) and sends the result to our web server, which then contacts Friendly Captcha’s server through an interface to check the result. Depending on the result, we can safely process or reject requests through our website.

In the process mentioned above, Friendly Captcha processes and stores the following data:

• anonymous IP address of the requesting computer,
• information about the browser and operating system used,
• anonymous counters per IP address for controlling cryptographic tasks and the website from which access took place.

This data is used exclusively to protect against spam and bots. Friendly Captcha does not set cookies on the visitor’s device and does not read any. IP addresses are only stored in encrypted form and do not allow us or Friendly Captcha to infer the identity of an individual. If personal data is collected, it will be deleted no later than 30 days.

For more information on data protection when using Friendly Captcha, visit https://friendlycaptcha.com/legal/privacy-end-users/ .

 

Do we pass on data to third parties?

Yes, however, we will only disclose your personal data if you have given your express consent, if there is a legal obligation to do so or if it is necessary for us to do so in order to enforce our rights, in particular to enforce claims arising under the relationship with you.

Where applicable, we may also disclose data to various service providers (e.g. host providers, cloud service providers) as part of our provision and maintenance of the website and the services offered on it. These service providers will only use your data for the purposes mentioned and will likewise comply with the applicable data protection and data security requirements.

If our website contains any links to third-party websites, we no longer have any influence over the collection, processing, storage or use of personal data by third parties once you have clicked on these links and do not accept any responsibility in this regard.

 

Do we transfer data abroad?

We are entitled to transmit your personal data to third parties (contracted service providers) abroad. These are obliged to comply with data protection law to the same extent as we are. If the level of data protection in a country does not match that in Switzerland, we shall ensure under contract that your personal data are protected to the same extent as in Switzerland at all times.

 

What are your rights in relation to your personal data?

You have the following rights in relation to your personal data:

• You can request information about any of your personal data that we have stored
• You can request that your personal data be rectified, supplemented, blocked or erased
• If you have set up a user account, you can have it deleted
• You can object to your data being used for marketing purposes

To exercise these rights, simply write a letter to:

SBB AG
Data protection officer
Hilfikerstrasse 1
CH-3000 Bern 65

or send an e-mail to: datenschutz@sbb.ch.

 

How do we protect your data?

We employ suitable technical and organisational security measures to protect the personal data we store against manipulation, partial or total loss and unauthorised access by third parties. Our security measures are continuously improved in line with technological development.

We also take data protection within SBB very seriously. We have required our staff and the service providers we contract to maintain confidentiality and to comply with data protection regulations.

We will take appropriate precautionary measures to protect your data. However, the transmission of information over the Internet and other electronic means always entails certain security risks and we cannot offer any guarantee as regards the security of information transmitted in this way.

 

What are cookies?

Cookies help in many respects to make your visit to this website simpler, more pleasant and more worthwhile. Cookies are information files which your web browser automatically stores on your computer’s hard drive when you visit our website. They do not damage your computer’s hard drive and cannot collect any other data stored on it.

 

How do we use cookies?

For example, we use cookies to temporarily store the details you enter when filling in a form on our website or your choice of website language so that you do not need to re-enter this information when you access another subpage. Where applicable, cookies may also be used to identify you as a registered user once you have registered on the website to avoid you having to log in again when you access another subpage.

On the following page we have listed all cookies used: Cookies

Most web browsers accept cookies automatically. However, you can configure your browser so as to prevent cookies from being stored on your computer or so that a message always appears when you receive a new cookie. Deactivating cookies means that you may not be able to use all of the features on this website.

 

What are tracking tools?

Tracking tools (also known as tags) are an important indicator for our websites. Can the contents be captured intuitively? What is the surfing behaviour of users like? How can we make it easier to find information? Many of these questions can be answered using tracking tools.

We use tracking tools so that

• we can better understand how you navigate through our websites (and where there may be stumbling blocks).
• we know if you’re reading our e-mails.
• we can offer you better online marketing services.

In conjunction with cookies, tracking tools can analyse user behaviour in relation to online offers.

 

What tracking tools do we use?

 

AT Internet

On this website we use the web analytics service of the company AT Internet based in France in order to optimise the website and apps. You can request that your data not be processed by AT Internet by clicking on the following link: Opt-Out

The following data will be processed:

• Anonymised IP address
• Anonymous tracking data (navigation behaviour, click-through behaviour, login status and login type, device access, etc.)
• Encrypted customer number

Place of data processing: EU

The last three digits of the IP address are deleted immediately after it is collected and before it is further processed to ensure the information is anonymous. The IP address is not linked to any other information that allows visitors to be identified.

For more information on the data collected with AT Internet, see atinternet.com.

 

Adobe Dynamic Tag Management

We use an Adobe tag management system in order to ensure the controlled management of analytical and online marketing software on this website and to improve the technical performance of this website. The tag management system controls, according to definable rules, which software components (tags) used on the website, as described in this Privacy Policy, are used in which form. In this way, we ensure that only the aforementioned tags are used and that they only collect data in the manner described here.

The tag management system passes on data to the tags mentioned and in the manner described. Cookies may also be used as part of this process. However, no data are stored in the tag management system.

Further details concerning the Adobe Launch Tag Management System privacy policy can be found here: https://www.adobe.com/privacy.html

 

Contact person

If you have any questions concerning data protection on this website, please do not hesitate to get in touch with our contact for data protection law by sending an e-mail to datenschutz@sbb.ch.