Data protection policy

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection policy.

If there is the option to enter personal or business data (email address, name, address) on this website, input of this data is expressly voluntary on the part of the user. We will not use this data for any purposes other than those indicated and it will not be passed on to third parties.

Privacy Policy
We – Shiptec AG – are committed to handling your personal data responsibly. Accordingly, we consider it a matter of course to comply with the legal requirements of the Swiss Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), and any other applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR).

Our Customer Commitment:
We handle your data with trust and care. Protecting your personal rights and privacy is a top priority for us. We guarantee that your personal data will be processed in accordance with the applicable data protection laws. In summary, we process personal data exclusively in accordance with the following principles:

• You are in control of your personal data.
  Within the framework of legal regulations, you can refuse the processing of your data at any time, revoke your consent, or request the deletion of your data.

• We provide added value when processing your data.
  Your data is used solely to deliver our services and to offer you added value (e.g., tailored offers, relevant information, and support). We use your data exclusively for the development, delivery, optimization, and analysis of our services or to maintain customer relationships.

• Your data is not sold.
  Your data will only be shared with selected third parties listed in this Privacy Policy and only for the explicitly stated purposes. If we engage third parties to process data on our behalf, they are contractually obligated to comply with our data protection standards.

• We ensure the security and protection of your data.
  We handle your data with care and take appropriate organizational and technical measures to ensure its security and protection.

In this Privacy Policy, we inform you about the key aspects of how data is processed within our company, as well as your legal rights regarding data protection. This Privacy Policy applies to the collection of personal data both online and offline.

1. Contact

1.1 Name and Address of Shiptec

The data controller within the meaning of data protection law is:

Shiptec AG
Werftestrasse 5
6002 Lucerne
Switzerland
Tel: +41 (0)41 367 67 67
Email: datenschutz@remove-this.sgvholding.ch
Website: www.shiptec.ch

1.2 Name and Address of the Data Protection Coordinator

The contact details of the Data Protection Coordinator of the SGV Group are:

SGV Holding AG
Data Protection Coordinator
Werftestrasse 5
6002 Lucerne
Switzerland
Tel: +41 (0)41 367 67 67
Email: datenschutz@remove-this.sgvholding.ch
Website: www.sgvgruppe.ch

2. Legal Bases
The legal basis for processing your personal data depends on the specific purpose of the data processing in each individual case. The following legal grounds may apply:

• Your consent, which you can revoke at any time. A simple notice sent to the following email address is sufficient: datenschutz@remove-this.sgvholding.ch. The lawfulness of data processing carried out prior to the revocation remains unaffected;

• The conclusion or performance of a contract with you or the implementation of pre-contractual measures;

• The protection of our legitimate interests, provided that your interests do not override ours;

• A legal obligation that permits or requires us to process the data.

3. Recipients of Personal Data
We treat your personal data confidentially and only disclose it if you have expressly consented, if we are legally obliged or entitled to do so, or if it is necessary to enforce our rights—particularly to assert claims arising from the contractual relationship. Furthermore, we may disclose your personal data to third parties where necessary or appropriate in the context of using the website or providing the services you have requested (including outside the website).

We may disclose certain personal data to the following categories of recipients:

• Companies within our group

• Website and email service providers

• Reservation service providers

• Hosting partners

• Public authorities

All legal provisions governing the disclosure of personal data to third parties are strictly observed. Where we engage data processors to provide our services, we take appropriate legal, technical, and organizational measures to ensure the protection of your personal data in accordance with applicable legal requirements.

Some recipients are located within Switzerland, while others may be based abroad. Whenever possible, we store data in Switzerland or in an EU/EEA country that ensures an adequate level of data protection. However, for certain processing activities, you should be aware that your data may be transferred to countries both within and outside of Europe, where some of our IT service providers are located. If we transfer data to a country without an adequate level of legal data protection, we require the recipient to take appropriate safeguards to protect your personal data (e.g., through the use of so-called EU standard contractual clauses [available here], other suitable measures, or based on permitted legal grounds).

4. Retention Period

As a general rule, we process your personal data only for as long as it is necessary for the respective purpose.

Where statutory retention obligations exist, the relevant personal data will be stored for the duration of the legal retention period. After the retention period has expired, we assess whether there is still a need to continue processing. If no further necessity exists, your data will be deleted or anonymized.

If data is stored due to a contractual relationship with you, it will be retained at least for the duration of that relationship and for as long as limitation periods for potential legal claims are in effect or legal or contractual retention obligations exist.

5. Collection and Processing of Personal Data

5.1 Visiting our Website

When you access our website, data is automatically transmitted by the browser used on your device to the server of our website. This data is temporarily stored in a log file known as server log files. Access data includes in particular the IP address, the accessed URL, the operating system used, the name of your internet service provider, the date and time of access, the type of browser used, and similar technical information. This information does not allow any direct conclusions about your identity.

The processing of this data serves the purpose of enabling use of the website (connection setup), ensuring long-term system security and stability, optimizing our online offering, and for internal statistical purposes—based on our legitimate interests. This data is not passed on to third parties or otherwise analyzed. No personal user profiles are created.

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the session ends.

5.2 Newsletter

You have the option to subscribe to our newsletter. Through this newsletter, we inform you about our company and our services. To subscribe, we require your email address and confirmation that you consent to receiving the newsletter. We obtain your consent during the registration process and refer you to this privacy policy.

You can unsubscribe from the newsletter at any time and revoke your consent. A link to the unsubscribe page is included in every newsletter. We will store your data until you unsubscribe.

Mailchimp
We use Mailchimp, a newsletter distribution platform operated by Rocket Science Group LLC (a company of Intuit Inc.) based in the United States, to send our newsletters. Mailchimp is a service that allows us to organize and analyze newsletter distribution.

The data you provide for newsletter subscription, particularly your email address, is transferred to and stored on Mailchimp’s servers in the USA or in other countries where Mailchimp or its sub-processors maintain facilities. Mailchimp undertakes to implement adequate safeguards for data protection, especially through the use of EU Standard Contractual Clauses.

Further details on how Mailchimp processes personal data and ensures data protection can be found in their legal terms on the Mailchimp website.

5.3 Contact Form

When you submit an inquiry via our contact form, the data you provide is stored for the purpose of processing your request. The form indicates which data fields are required (marked with *). Providing additional information is optional but helps us process your request more effectively and respond more precisely.

The basis for processing your personal data is our legitimate interest in responding to your request. If the contact is made as part of fulfilling a contract with you or in the context of pre-contractual measures, this also forms the legal basis for processing your data. Your data will be deleted once it is no longer necessary for the purpose of its collection.

You may object to this data processing at any time by sending an email to: datenschutz@remove-this.sgvholding.ch. In such cases, your request will not be processed further.

5.4 Online Applications

If you apply for a job with us, we process the personal data you provide during the application process. This includes personal details, information about your education, work experience, and skills, as well as typical contact data such as your mailing address, email address, and telephone number. Additionally, we process all documents submitted as part of your application, such as cover letters, CVs, and references. Applicants may also voluntarily provide us with further information.

This data is processed exclusively in connection with your application—stored, evaluated, processed, or internally forwarded—and may also be used for statistical purposes (e.g., reporting). In such cases, the data is anonymized to prevent any personal identification.

Processing may also occur electronically, especially when application materials are submitted by email.

The legal basis for processing applicant data is the performance of (pre-)contractual obligations as part of the application process.

You can object to the processing of your data and withdraw your application at any time. Please send your objection either to the contact person named in the job posting or to: datenschutz@remove-this.sgvholding.ch.

If we enter into an employment contract with you, the submitted data will be stored for the purpose of managing the employment relationship in accordance with legal regulations.

If the application process ends without employment, your data will be deleted unless you have given us permission to keep your application on file for future opportunities. You may revoke this consent at any time by sending an email to datenschutz@remove-this.sgvholding.ch or the address indicated in the job posting.

6. Cookies

We use so-called cookies on our website. Cookies are small text files that are stored on your device by your browser. Cookies do not cause any damage to your device. They cannot execute programs or transmit viruses to your computer. Cookies help make our website more user-friendly and effective, and enhance your overall experience when visiting our site.

Most of the cookies we use are so-called session cookies. These are automatically deleted when you log out or close your browser. Other cookies remain stored on your device beyond your current session and allow us or our partner companies (third-party cookies) to recognize your browser during your next visit. Any other types of cookies (e.g., cookies used to analyze your browsing behavior) are addressed separately in this Privacy Policy.

The legal basis on which we process your personal data via cookies depends on whether we ask for your consent. If we do and you consent to the use of cookies, then your consent serves as the legal basis for the processing of your data. Otherwise, the data processed via cookies is based on our legitimate interests (e.g., ensuring the security of our website) or is necessary to fulfill our contractual obligations.

Most internet browsers are set to accept cookies by default. If you do not want this, you can configure your browser to notify you when cookies are set and allow cookies only in individual cases or block them entirely. You can also enable automatic deletion of cookies when closing your browser. Additionally, you can delete already stored cookies at any time via your browser or other software programs.

How to control or delete cookies depends on the browser you use. You can find information on this in your browser’s help menu. Please note that disabling cookies may affect the functionality of certain features on our website.

You may revoke any previously given consent for the use of cookies at any time with future effect by adjusting your privacy settings (see direct links on the website). For some of the services we use (described later in this policy), we also provide alternative options for how you can prevent or object to the respective service provider’s data processing.

7. Google Services

Based on your consent, we use various services from Google LLC, based in the USA, or — if you reside in the European Economic Area (EEA) or Switzerland — from Google Ireland Ltd., based in Ireland ("Google"). For the processing of personal data when using "YouTube" and "Google Maps", Google LLC is always responsible. We use the following Google services on our websites:

• Google Tag Manager

• Google Analytics

• Google Ads

• Google Maps

• YouTube

More detailed information on each specific service is provided below.

Google uses technologies such as cookies, local storage in your browser, and tracking pixels, which allow for an analysis of your use of our website. The information generated about your use of our website may be transferred to a Google server in the USA and stored there.

We use tools provided by Google that, according to Google, may process personal data in countries where Google or its subcontractors operate facilities. Google assures in its data processing terms that it ensures an adequate level of data protection by relying on EU Standard Contractual Clauses.

Google is also certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks.

You can find more information on Google’s data processing and privacy settings in Google’s privacy policy and settings.

7.1 Google Tag Manager

Our website uses Google Tag Manager, a tool that enables the efficient management of website tags. Website tags are placeholders in the source code of the website used, for example, to integrate frequently used website elements such as tracking codes for analytics tools. Google Tag Manager itself only processes personal data for technical purposes and is responsible for triggering other tags, which may in turn collect data. Google Tag Manager does not access this data. If a deactivation is carried out on domain or cookie level, it will remain in effect for all tracking tags implemented via Google Tag Manager.

For more information, refer to Google’s Help Center, the Google Tag Manager Terms of Service, and Google’s Privacy Policy.

7.2 Google Analytics

To analyze our website and its visitors, and for marketing and advertising purposes, we use the web analytics service Google Analytics 4.

Google Analytics uses cookies stored on your device (laptop, tablet, smartphone, etc.) to analyze your use of our website. This helps us evaluate user behavior on our website and improve our offerings through the resulting statistics and reports.

We use Google Signals, which collects additional data from users who have enabled personalized ads (such as interests and demographic data), and allows ads to be delivered to these users in cross-device remarketing campaigns.

IP anonymization is enabled by default in Google Analytics 4. This means that your IP address is shortened by Google within Switzerland or the EU/EEA before being transmitted. Only in exceptional cases is the full IP address sent to a Google server and shortened there.

Google uses this information to analyze your pseudonymous use of our website, compile reports on website activity, and provide us with other services related to website and internet usage. According to Google, the IP address transmitted by your browser will not be merged with other Google data. Your user behavior (e.g., page views, website interaction, click paths), as well as approximate location (country and city), technical browser and device details, and referrer URLs (e.g., which website or ad led you to ours), are recorded.

The data collected via Google Analytics is automatically deleted after 14 months.
You can prevent the collection and processing of your data (including your IP address) by Google Analytics by installing the browser add-on to deactivate Google Analytics.
To opt out of interest-based advertising from Google, you can use Google's opt-out settings.

You can find an overview of how Google Analytics uses data and the measures Google takes to protect your data in the Google Analytics Help Center. Further information is available in Google’s Terms of Service and Privacy Policy.

7.3 Google Ads

Our website uses the Google Ads online advertising service, part of the Google Marketing Services portfolio, to draw attention to our attractive offerings via ads on external websites. We can evaluate the success of individual advertising measures in relation to the data from advertising campaigns.

If you reach our website via a Google ad, a "conversion cookie" is set on your device. These cookies generally expire after 30 days and are not intended to identify you personally. These cookies enable Google to recognize your browser. If you visit specific pages on our site and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to our site. Each Google Ads customer receives a different cookie, preventing tracking across the websites of different Ads clients.

We do not collect or process personal data through these advertising measures. We only receive statistical reports from Google, which help us assess which ads are most effective. We do not receive any data that could identify you.

Based on the information collected, interest-based categories are assigned to your browser, which are then used for personalized advertising.

Google Ads also allows us to retarget users who have already visited our website. This way, we can present our ads to audiences already interested in our products or services.

You can prevent participation in this tracking in several ways:

• By adjusting your browser settings to block third-party cookies

• By deactivating conversion tracking cookies in your Google Ads settings

• By opting out of interest-based advertising via the "YourAdChoices" self-regulation campaign

Further details can be found in Google Ads’ Privacy Policy and Terms of Use.

7.4 Google Maps

To display interactive maps, our website uses the Google Maps online map service.

When accessing a webpage that includes Google Maps, Google sets a cookie. This cookie typically remains until it expires unless manually deleted by you.

Using Google Maps may involve data about your use of our site (including your IP address) being transmitted to and stored on a Google server in the USA. Google may store this data as usage profiles for the purposes of customizing services, advertising, and market research. If you are logged into your Google account, this data can be directly associated with your profile. You can prevent this by logging out of your Google account before using our site.

If you do not agree to this data processing, you can deactivate Google Maps by disabling JavaScript in your browser. However, this may impair the functionality of some parts of our website.

For more information, refer to the Google Maps Terms of Service and Google’s Privacy Policy.

7.5 YouTube

To embed videos, we use services from YouTube LLC, based in the USA, a subsidiary of Google LLC.

When you start a YouTube video on our website, a connection is established to YouTube’s servers. YouTube is informed which of our pages you visited. This information (including your IP address) may be transmitted to a Google server in the USA and stored there. If you are logged into your YouTube account at the same time, this allows YouTube to associate your browsing behavior with your personal profile. You can prevent this by logging out before visiting our website.

We use YouTube’s so-called extended data protection mode, which, according to YouTube, ensures that no data about you as a visitor is stored unless you play the video. However, this mode does not necessarily exclude data being transmitted to YouTube partners.

More information can be found in YouTube’s Terms of Service and Google’s Privacy Policy.

7.6 Vimeo

In addition to YouTube, we also use services from Vimeo Inc., based in the USA ("Vimeo") to embed videos on our website.

When you access a page containing a Vimeo video, your browser establishes a direct connection with Vimeo’s servers. Vimeo learns which of our pages you have visited. If you are logged into your Vimeo account at the same time, this data may be linked to your personal profile. If you click on a video’s play button, this action may also be associated with your user account. You can prevent this by logging out of your Vimeo account and deleting Vimeo cookies before using our website.

We have entered into a data processing agreement with Vimeo that includes the EU Standard Contractual Clauses to ensure adequate data protection.

If you have consented to the use of Vimeo, you may withdraw your consent at any time with future effect by adjusting your cookie settings.

More information about Vimeo’s data collection and processing, your rights, and how to protect your privacy can be found in Vimeo’s Privacy Policy.

Please note that Vimeo may use Google Analytics. For more information on data processing by Google and your opt-out options, refer to Google’s Privacy Policy, the Google Analytics opt-out browser add-on, and Google’s ad personalization settings.

8. Pixels, local storage and similar technologies

Based on your consent, we also use other technologies such as tracking pixels and local storage. We use these technologies, for example, to check which features are particularly popular, to create a more personalized user experience, and to serve user-relevant advertising.

Tracking pixels (also referred to as clear GIFs, web beacons, or pixel tags) are small code units that are installed in or on a website, mobile app, or advertisement. These tracking pixels can query certain information from your browser and device, such as operating system, browser type, device type and version, referring website, visited website, IP address, and other similar information.

8.1 LinkedIn Conversion Tracking

Based on your consent, we use the conversion tracking technology of LinkedIn Corporation, headquartered in the USA, or, if you have your habitual residence in the European Economic Area (EEA) or Switzerland, LinkedIn Ireland Unlimited Company, headquartered in Ireland ("LinkedIn").

We use LinkedIn's technology for marketing and optimization purposes, in particular to analyze the use of our website, to continuously improve individual functions and offers as well as the user experience, and to serve relevant and interesting advertisements for you. Furthermore, we receive aggregated and anonymous reports from LinkedIn about ad activity and information on how you interact with our website. For this purpose, LinkedIn uses a JavaScript code (Insight Tag), which in turn places a cookie in your web browser or uses a pixel.

According to LinkedIn, data about the use of our website is collected via the LinkedIn Insight Tag, including information such as referrer URL, IP address, device and browser characteristics, or timestamp. The data collected via the LinkedIn Insight Tag is encrypted, IP addresses are truncated, and the direct IDs of members are removed within seven days to pseudonymize the data. These remaining pseudonymized data are deleted within 90 days. LinkedIn does not share personal data with the operator of the website but only provides aggregated reports on the website audience and ad performance.

Due to LinkedIn's structures, it cannot be ruled out that your data will also be transferred to LinkedIn in the USA. To protect your privacy, we have entered into a "Data Processing Agreement" with LinkedIn, including EU Standard Contractual Clauses.

Further information on the type, purpose, and scope of data processing can be found in LinkedIn’s privacy policy, cookie policy, and privacy portal. In addition, you can object to personalized (LinkedIn) advertising by installing an opt-out cookie, regardless of whether you are a LinkedIn member or not.

8.2 LinkedIn Marketing Solutions

Based on your consent, we use LinkedIn Marketing Solutions ("LMS") on our website, a service provided by LinkedIn Corporation, headquartered in the USA, or, if you have your habitual residence in the European Economic Area (EEA) or Switzerland, LinkedIn Ireland Unlimited Company, headquartered in Ireland ("LinkedIn").

LMS stores and processes information about your user behavior on our website. For this purpose, LMS uses, among other things, cookies that are stored locally in the cache of your web browser on the respective end device you use and enable an analysis of your use of our website.

We use LMS for marketing and optimization purposes, in particular to analyze the use of our website, to continuously improve individual functions and offers as well as the user experience, and to serve relevant and interesting advertisements for you.

If you are logged into the LinkedIn member area, LinkedIn can associate the use of our online offering with your profile. If you do not wish this, you must log out of LinkedIn before visiting our websites.

Further information on the type, purpose, and scope of data processing can be found in LinkedIn’s privacy policy, cookie policy, and privacy portal. In addition, you can object to personalized (LinkedIn) advertising by installing an opt-out cookie, regardless of whether you are a LinkedIn member or not.

9. Social Media Presence

We maintain social media profiles on LinkedIn, YouTube, Vimeo, and X (Twitter).

The data you enter on our social media profiles is published by the social media platform and is never used or processed by us for other purposes. However, we reserve the right to delete content if this should be necessary. Where applicable, we may communicate with you via the social media platform.

The basis for this is your and our legitimate interest in exchanging information with each other in this way.

Be aware that the operator of the social media platform uses web tracking methods. This web tracking, over which we have no influence, may also take place regardless of whether you are logged in or registered with the social media platform.

You can find more detailed information about data processing by the provider of the social media platform in the privacy policy of the respective provider.

10. Data Security

We take technical and organizational security measures to protect your personal data against manipulation, loss, destruction, or access by unauthorized persons and to ensure the protection of your rights and compliance with applicable data protection regulations.

The measures taken are intended to guarantee the confidentiality and integrity of your data as well as the availability and resilience of our systems and services when processing your data over the long term. They are also intended to ensure the rapid restoration of data availability and access to it in the event of a physical or technical incident.

Our data processing and security measures are continuously improved in accordance with technological developments.

We also take internal company data protection very seriously. Our employees and the service providers commissioned by us are obligated to maintain confidentiality and to comply with data protection regulations. Moreover, access to personal data is granted to them only to the extent necessary.

11. Use of the Website by Minors

The website is aimed at an adult audience. It is prohibited for minors, especially children under the age of 16, to transmit personal data to us or to register for a service without the consent or approval of their parents or legal guardians. If we discover that such data has been transmitted to us, it will be deleted. Parents (or legal representatives) of the child may contact us and request deletion or deregistration. For this, we require a copy of an official document identifying you as the parent or legal guardian.

12. Linked Websites

Our website may contain links to websites of other providers, to which this privacy policy does not extend. After clicking the link, we no longer have any influence on the processing of data possibly transferred to third parties (such as the IP address or the URL), as the behavior of third parties is naturally beyond our control. Therefore, we cannot assume any responsibility for the processing of your personal data by third parties. If the use of websites of other providers involves the collection, processing, or use of your personal data, please refer to the privacy notices of the respective providers.

Illegal content was not recognizable at the time of linking. However, permanent content control and examination of the linked pages without concrete indications of a legal violation is not reasonable. Upon becoming aware of legal violations, such links will be removed immediately.

13. Your Rights

You basically have the rights to information, correction, deletion, restriction, data portability, objection to processing, and revocation of consent regarding your personal data.

If you believe that the processing of your personal data violates data protection law or that your data protection rights have otherwise been infringed, you may also lodge a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC; https://www.e-doeb.admin.ch/).

For questions related to the data protection we practice and for information regarding your rights as well as for asserting them, you can contact us using the contact options given in section 1 of this privacy policy. If necessary, we reserve the right to request identification from you in an appropriate manner to process inquiries.

EcoTrack App

For the EcoTrack application, reference is made to the privacy policy of the developer Hooc AG, 3930 Visp, CH. (Link https://www.hooc.ch/datenschutz)