Personal data are defined as all information relating to an identified or identifiable natural person. Personal data can be used to identify or contact a specific person. These include, for example, your name, address, e-mail address, telephone number or an IP address allocated to you by your Internet provider. Information that cannot be used to identify you (anonymous data) does not qualify as personal data.

While using our website, your Internet browser for technical reasons automatically transmits specific usage data or server log files to us. This information includes, among others:

•    Date and time of access
•    URL (address) of the referring website
•    Requested file
•    Volume of data sent
•    Host name of the requesting computer (IP address)
•    Browser type and version
•    Operating system

This information is stored by us solely for the technical administration of our website, in order to defend ourselves against unlawful actions relating to our website, and in part also for statistical evaluation purposes. We reserve the right to subsequently check these protocol data if there is specific evidence to legitimately suspect the unlawful use of the website.

You can generally use our website without providing us with any of your personal data. Personal data is only collected and stored if you provide us with such data voluntarily. Unless stated otherwise, these data are only used to process your specific enquiry.

IIf you contact us by e-mail or contact form, the information provided by you is stored in order to process your enquiry and to answer any follow-up questions.

The personal data you provide will not be merged with other data. We process and store your personal data for as long as is necessary for the fulfilment of our contractual and legal obligations or otherwise for the purposes for which the processing is carried out, as well as based on our legitimate interests or in accordance with the statutory retention and documentation periods. 

With our newsletter we aim to inform you of offers, services and projects. We only send newsletters, selections and e-mails containing advertising information with the consent of the recipient. To subscribe to the newsletter, you need to provide your title, first name, last name, e-mail address and company name. For verification purposes, the time of subscription is logged together with the IP address.

We also use the data provided during your registration, if any, on the basis of our legitimate interest to send our newsletter in order to maintain the customer relationship with you.

For our newsletter, we use the Salesforce Pardot platform, a B2B marketing automation tool provided by Salesforce (salesforce.com EMEA Limited, Floor 26 Salesforce Tower, 110 Bishopsgate, EC2N 4AY London, UK).

Salesforce Pardot offers options for the statistical analysis of usage data. These include, among others, confirmation that an e-mail has reached the recipient or was rejected by the server, and information on the links that were clicked.  Users who do not wish for their data to be processed by Salesforce Pardot should not subscribe to the newsletter.

Although Salesforce primarily hosts your data in the EU, your data may also be transferred to and stored on servers in the US.

We have entered into an order processing agreement with Salesforce, which incorporates standard contractual clauses, to ensure adequate protection of your personal data. Salesforce also remains certified under the Swiss-U.S. Privacy Shield. You can obtain more information about certification, Salesforce privacy, and Pardot via the following links: 

•    https://compliance.salesforce.com/en/privacy-shield     
•    https://www.salesforce.com/company/privacy/
•    https://www.pardot.com/legal/ 

You have the right to decide that you no longer wish to receive our newsletter at any time with future effect. To do this, you simply have to unsubscribe from the newsletter. An unsubscribe link is provided at the end of every newsletter.

On our website, you have the option of registering in order to gain access to our Keystone-SDA Visual and Keystone-SDA Direct portals, the NP360 front-end portal and the Multimedia Hosting portal. We use the data collected during registration for the purpose of facilitating the use of the respective offer or service for which you have registered, as well as for the distribution of our newsletter and for statistical analysis, in each case based on our legitimate interests.

It is possible for you to cancel your registration at any time. You can amend or delete your personal data at any time. If the personal data are required for the performance of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion. 

The data collected during registration will be stored by us as long as you are registered on our website. If you cancel your registration, your data will continue to be used for sending the newsletter unless you unsubscribe. Statutory retention periods remain unaffected.

We also process personal data to the extent necessary in each case to provide you with our contractual or pre-contractual services and to render other services requested by you. The data processed and the type, scope, purpose and necessity of its processing are determined by the underlying contractual relationship.

We store traffic data for billing purposes until the expiry of the period within which the invoice can be legally challenged. We can transmit the data required for billing to third parties.

If you apply for a position with us, we will process personal data provided by you in the course of the application process, such as your personal details, education, work experience and skills, the usual correspondence information and certificates. This data is only used for the purpose of processing your application.

Your application data is stored separately from other user data and is not merged with it.

Your application data is processed for the purpose of fulfilling our contractual and precontractual obligations during the application process. 

You may object to the processing of this data at any time and withdraw your application. Please send your objection to the person named as your point of contact in the job advertisement or to privacy@keystone-sda.ch. 

If the application process does not result in your appointment, your personal data shall be deleted immediately, unless you have given us your consent to reuse your details for future applications. You are of course entitled to revoke this consent subsequently at any time (by contacting the person named as your point of contact in the job advertisement or by writing to privacy@keystone-sda.ch).

Our website uses cookies designed to make it more user-friendly, effective and secure. Cookies are small text files that are placed on your device and stored by your browser. Most of the cookies used by us are “session cookies” that are automatically deleted at the end of your visit. Other cookies remain stored on your computer until you delete them. These cookies allow us to recognise your browser when you visit our website again. 

You can change the settings on your browser to notify you when a cookie should be set, which will allow you to approve or reject cookies on an ad hoc basis or to generally block all cookies and to activate the automatic deletion of all cookies when you close your browser. Disabling cookies can mean that the functionality of our website is restricted. 

The procedure for checking and deleting cookies depends on the browser you are using. You can find out about these options for the most commonly used browsers via the following links:

•    Internet Explorer
•    Microsoft Edge
•    Mozilla Firefox
•    Google Chrome
•    Apple Safari MacOS and iOS

More information on cookies can be found here: http://www.allaboutcookies.org.

This website uses Google Analytics, a web analytics service provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you are a permanent resident of the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). 

Google Analytics makes use of cookies that make it possible to analyse your use of our website.

The information generated by the cookie about your use of this website is transmitted to and stored on a Google server in the US. Google will use this information to evaluate your visit to our website, compile reports on website activities and provide us with other services related to the use of the website and the Internet. Google may also forward this information to third parties to the extent required by law or to process these data on behalf of Google. We do not combine the IP address transmitted by your browser within the scope of Google Analytics with other Google data.

We use Google Analytics with the added code «_anonymizeIp()», which means that the IP addresses transmitted to Google are only processed in truncated form, making it impossible to identify any persons directly (IP masking).

You can prevent the storage of cookies for Google Analytics by setting your browser software accordingly. You can refuse the collection and storage of data for Google Analytics with future effect at any time by installing a browser plug-in from Google. Please note that you will have to repeat this refusal if you remove the cookies from your browser or access our website from another browser.

You can find more information in the Terms of Use for Google Analytics and the Google Privacy Policy.

On our website, we use the open-source software tool Matomo  (www.matomo.org),, a service of the provider InnoCraft Ltd, 150 Willis St., 6011 Wellington, New Zealand, to analyse and statically evaluate the use of the website. Cookies are used for this purpose. The information generated by the cookie about website usage is transmitted to our servers and compiled into pseudonymous usage profiles. The data are used to evaluate the use of the website and to enable us to design our website in line with requirements.

If individual pages of our website are called up, the following data are stored:

(1)    Two bytes of the IP address of the user’s accessing system 
(2)    The website accessed
(3)    The website from which the user accessed the website called up
         (referrer) 
(4)    The subpages accessed from the website called up 
(5)    The time spent on the website 
(6)    The frequency with which the website is accessed

The software runs exclusively on the servers of our website, which is the only place where the personal data of users is stored. The data will not be passed on to third parties. 

You can prevent the collection of data generated by the cookie and related to your use of our website (including your IP address) by setting your browser to «Do Not Track». You can find more information on this and on the terms of use and privacy at https://matomo.org/privacy/ and https://www.innocraft.com/privacy.

We use the reCAPTCHA function provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you are a permanent resident of the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. 

This function is primarily used to distinguish whether an entry is made by a natural person or improperly by machine and automated processing. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as you call up our website. For the analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, time spent on the website or mouse movements made by the user). The data collected during the analysis are forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

You can find more information in the reCAPTCHA documentation and the Google Privacy Policy. 

On our website, we use Google Tag Manager, a product provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you are a permanent resident of the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). 

Google Tag Manager allows us to manage website tags through one interface. Tag Manager is a domain that does not use cookies and does not collect any personal data. The tool triggers other tags that may capture data under certain circumstances. Google Tag Manager does not access these data. If the function is disabled at domain or cookie level, it applies to all tracking tags that are implemented by Google Tag Manager. You can find further information in the Use Policy for this service. 

More information about Google’s use of data for marketing purposes is available on the overview page and the Google Privacy Policy. 

If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google.

We operate a Google My Business profile provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you are a permanent resident of the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Google My Business allows us to introduce our business to you and gives you the opportunity to contact us, review our business and upload photos related to our business. 

When you visit and interact with our Google My Business profile, Google may collect other information in addition to your IP address, which is stored in the form of cookies on your device. Google uses this information to provide us with statistical information about the use of Google services. The data collected from you will be processed by Google and may be transmitted to a Google server in the US.

You can prevent your personal data from being processed by not visiting our Google My Business profile. 

You can find more information on the Google My Business overview page and in the Google Privacy Policy.

On our website, we use the Google Maps service provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you are a permanent resident of the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. 

By using Google Maps, information about your use of our website (including your IP address) may be transmitted to a Google server in the US3 and stored there. Under certain circumstances, Google may store this data as usage profiles for the purpose of tailoring its services, advertising and market research. If you are signed in to Google, your data will be associated directly with your account. As Google Maps is based on a JavaScript code, you can prevent execution by disabling JavaScript in your browser’s settings or installing a JavaScript blocker. Please note, however, that in this case you will have limited or no access to Google Maps.

You can find more information in the Google Maps Terms of Use and the Google Privacy Policy.

You can run a location search via your browser to identify your location. Our website will only use this information to determine the location close to you and to display this to you. As a rule, your IP address, information on array processors in your vicinity and any identification number are collected and processed in order to determine your location. These data are also sent to your browser provider and the browser’s location service provider. The Google Location Service, which is operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you are a permanent resident of the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), is particularly widely used. 

You can find more information in the Google Privacy Policy. Please also take note of the information on the location function provided by your browser provider.

We maintain social media profiles on Facebook, Instagram, Twitter, LinkedIn, XING and YouTube.

The data you enter on our social media profiles are published by the social media platform and are not used or processed by us for any other purpose at any time. We do, however, reserve the right to delete content if necessary. We will communicate with you via the social media platform in any case.

Please be aware that the operator of the social media platform uses online tracking methods. The online tracking, over which we have no control, can also take place regardless of whether you are logged in or registered with the social media platform.

More detailed information on data processing by the provider of the social media platform can be found in the privacy policy of the respective provider:

•    Facebook
•    Instagram
•    Twitter
•    LinkedIn
•    Xing
•    YouTube

We publish videos on our websites using the external platform TwentyThree, provided by TwentyThree ApS, Sortedam Dossering, 7E 2200 Copenhagen N, Denmark. TwentyThree does not collect any personal data on our websites.

On our website, we have integrated plug-ins provided by the video portal Vimeo of Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA, based on our legitimate interests in the analysis, optimisation and economic operation of our online offering. 

When you access a page of our website that contains a video plug-in of this kind, your browser establishes a direct connection to the servers operated by Vimeo. This transmits information to the Vimeo server, telling it which of our Internet pages you have visited. If you are logged in as a Vimeo member, Vimeo will assign this information to your personal user account. If you click on the start button of a video, this information can also be assigned to an existing user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies placed by Vimeo.

Further information on data processing and protection by Vimeo can be found in Vimeo’s Privacy Policy at https://vimeo.com/privacy.

Please note that Vimeo may use the Google Analytics tracker via an iFrame in which the video is accessed. This is Vimeo’s own tracking, and we do not have access to it. In this regard, please consult the Privacy Policy (https://policies.google.com/privacy?hl=en&gl) and opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=en) or Google’s settings for the use of data for marketing purposes (https://adssettings.google.com/authenticated?hl=en).

If you have subscribed to the relevant service from Keystone-SDA, we will send you a link to a live blog about a specific topic. This live blog is operated by our contracting partner Tickaroo (Tickaroo GmbH, Waffnergasse 8, D-93047 Regensburg, Germany). Social plug-ins from Twitter (Twitter Inc.,1355 Market Street, Suite 900, San Francisco, CA 94103, USA, or, if you are a permanent resident of the European Economic Area (EEA) or Switzerland, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland) are sometimes integrated into the live blog. If you access a live blog from Tickaroo that contains such a plugin, a connection with the relevant network will be established and data will be transferred. If you are logged into Twitter, the network providers will be able to associate your visit to the Tickaroo live blog with your personal profile on the social network. If you are not a member of the social network, it is possible that your IP address may be transmitted and saved by the provider. Data processing is the responsibility of the provider in accordance with its data protection provisions. We do not receive any of your personal data from the providers. In your browser settings, you can select the “Disable third-party cookies” function. If you do this, your browser will not send any cookies to Twitter’s server. However, activating this setting may prevent other cross-page functions of other providers, not including the plug-ins, from working under certain circumstances. More information about the purpose and scope of data collection and the further processing and use of your personal information can be found in Twitter’s Privacy Policy, where you will also find further information on your rights in this regard and setting options for protecting your privacy as well as your right to object to the creation of user profiles.

You can also find more information in Tickaroo’s privacy policy: Privacy policy (tickaroo.com).

As a matter of principle, we treat your personal data as confidential and only disclose them if you have expressly consented to this, if we are legally obliged or entitled to do so (e.g. within the framework of order data processing) or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. We also disclose your personal data to third parties if this is necessary or expedient within the framework of the use of the website or for the possible provision of the services requested by you (including those not linked to the website).

We disclose your personal data to the following categories of recipients, in addition to the recipients that have already been mentioned:

•    Business partners
•    Credit assessment companies 
•    Collection partners
•    Service providers
•    Authorities and courts, where appropriate
•    Web agency for search engine optimization (SEO) and search engine marketing

It goes without saying that the legal provisions governing the disclosure of personal data to third parties are complied with during this process. If we use contractors to provide our services, we take appropriate legal precautions and corresponding technical and organisational measures to ensure the protection of your personal data in accordance with the relevant statutory provisions.

If the level of data protection in a country where the data is processed does not comply with the applicable data protection regulations, we will ensure that the protection of your personal data is equivalent to that in Switzerland at all times. We provide this assurance in particular through the conclusion of standard protection clauses from the European Commission with the companies concerned and/or the existence of recognised certifications or binding internal data protection regulations at the companies concerned and/or the existence of other guarantees that comply with the applicable law.

We do not knowingly capture personal data of children younger than thirteen years of age. Children younger than thirteen are requested not to provide any personal data. We wish to encourage parents and guardians to monitor their children’s use of the Internet and to help us enforce our data protection guidelines by instructing their children to never provide personal data via the services without their permission. If you have reason to suspect that a child younger than thirteen has given us personal data via the services, we would ask you to inform us of the incident. We will erase the data from our databases.

We have taken technical and organisational security precautions to protect your personal data from loss, destruction, falsification, manipulation and unauthorised access. 

To ensure the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

However, you should remember that transmission via the Internet can never be 100% secure or free of errors. We ask you to consider this when using this website. As communication via any e-mails you may send to us is unencrypted, you should never send any confidential or sensitive data via this communication channel.

This Data Privacy Statement only applies to our website. The website can contain links to external sites that are not covered by this Data Privacy Statement. If you leave our website by clicking on such links, we advise you to carefully read the data privacy information of all websites.

We reserve the right to amend this Data Privacy Statement from time to time to ensure that it always meets the latest legal requirements, or to implement changes to our services in the Data Privacy Statement, e.g. when new services are launched. The new Data Privacy Statement will then apply to your next visit.

This Data Privacy Statement is also available in French, Italian and German. In the event of contradictions, the German version shall take precedence.

You have the right to ask us free of charge for information about your personal data stored with us at any time and to have these data rectified, blocked or erased. To this end, please contact us by post or e-mail:

KEYSTONE-SDA-ATS AG
Data Protection Coordinator
Wankdorfallee 5
P.O. Box
CH - 3000 Bern 22

privacy@keystone-sda.ch