Privacy Policy

This privacy policy explains the nature, scope and purpose of the collection and use of personal data by Trafo Baden Betriebs AG (“we”, “us”) and informs you about the rights you have. These rights follow from the applicable data protection laws.

1. Controller and contact

The controller for the processing of personal data on this website and your contact for data protection matters is:

Trafo Baden Betriebs AG
Brown Boveri Platz 1
5400 Baden, Switzerland
+41 56 204 08 88
info@trafobaden.ch

2. Collection and processing of personal data

We process personal data in the following contexts:

• Client data of customers for whom we provide or have provided services.
• Personal data we receive indirectly from our clients while delivering services.
• Digital visitor data generated when you use our website.
• Address data of subscribers to our newsletter.
• Data on personal profiles and interests based on attendance at one of our events.
• Various data arising whenever we communicate with you, in whatever form.
• Data from other contractual relationships, for example as a supplier, service provider or adviser.
• Personal data contained in job applications.
• Data we are required to process for legal reasons.
• Data used in connection with data protection or legal compliance.

More detailed information can be found in section 4.

3. Categories of personal data

The nature and scope of the processing depend on the relationship between you and Trafo Baden Betriebs AG and on the purpose for which we process the data. Besides your contact details, we also process other information about you or about people related to you. Where such information constitutes particularly sensitive personal data, this has further consequences for our processing and internal procedures.

Depending on the purpose, we collect the following categories of personal data:

• Contact details (e.g. surname, first name, address, telephone number, email)
• Personal client information (e.g. date of birth, nationality, marital status, profession, title, job title, social security number)
• Creditworthiness and company law data as well as financial information (bank accounts)
• Data relating to specific orders and contracts
• Website data (e.g. IP address, device information, browser information, website usage such as analytics and use of plug-ins)
• Application data (e.g. CV, employment references)
• Advertising and marketing information as well as personal interests (e.g. newsletter subscription, interest in specific topics)
• Security and network data (e.g. visitor lists, access controls, network and mail scanners, telephone call lists)

Where permitted, we also obtain certain data from publicly accessible sources (e.g. debt collection registers, land registers, the commercial register, the press, the internet), or receive it from our clients and their employees, from authorities, (arbitration) courts and other third parties. In addition to the data you provide directly, the categories of personal data we receive about you from third parties include in particular information from public registers, information obtained in official and court proceedings, information about your professional roles and activities, information about you contained in correspondence and meetings with third parties, credit reports, information provided by people around you (family, advisers, legal representatives) so that we can conclude or perform contracts with you or involving you (e.g. references, delivery addresses, powers of attorney), information required for legal compliance such as anti-money laundering and export restrictions, information from banks, insurers, distribution and other contractual partners regarding services used or provided (e.g. payments made, purchases made), information about you from media and the internet (where appropriate in the individual case, e.g. as part of a job application), your addresses and, where applicable, interests and other sociodemographic data (for marketing), and data relating to the use of the website (e.g. IP address, MAC address of your smartphone or computer, information about your device and settings, cookies, date and time of the visit, pages and content accessed, functions used, referring website, location information).

4. Why we process the data (purpose)

When you contact us (e.g. by telephone, contact form or email), when we contact you, or in the context of our business relationships with clients and other contractual relationships with business partners and other persons involved, we process the personal data required for that purpose.

This personal data includes in particular the following information:

• Contact details (e.g. surname, first name, address, telephone number, email and other contact information)
• Personal information (e.g. date of birth, nationality, marital status, profession, title, job title, passport or ID number, social security number, family circumstances)
• Data on your creditworthiness and entries in various registers or, where applicable, sanctions lists, as well as data from specialised databases and publicly accessible digital sources
• Financial information (e.g. bank details, investments or shareholdings)
• Business data, depending on the order or contract
• Particularly sensitive personal data

We process this personal data for the purposes described on the following legal bases:

• Conclusion or performance of a contract with or for the benefit of the data subject, including pre-contractual steps and any enforcement (e.g. supply contract, sales contract, service contract)
• Compliance with a legal obligation (e.g. where we are legally required to collect and/or disclose data)
• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, ensure security, manage risks, enforce our rights, defend ourselves against claims or check for possible conflicts of interest)
• Consent (e.g. to send you marketing information, to produce photographic material, for the use of cookies or the newsletter).

4.1 Website / hosting

You do not have to disclose any personal data in order to use our website. However, with every request the server records a range of technically necessary user information (e.g. IP address, time of access, pages accessed, browser type), which is temporarily stored in log files. This general information is not attributed to any specific person. The collection is technically necessary in order to display our website, ensure its stability and security, analyse its use and improve the site.

Our website is built with the development and hosting platform Lovable and delivered via a content delivery network. Application, form and content data are stored in a database operated by Supabase in a data centre in the European Union (Frankfurt, Germany). Transactional emails (e.g. confirmation of an enquiry) are sent via the service provider Resend.

4.2 Newsletter

If you subscribe to our newsletter, we use your address and contact details to send it to you. You may subscribe with your consent. The mandatory details for sending the newsletter are your full name and your email address, which we store after you sign up. The legal basis for processing your data in connection with our newsletter is your consent, which you may withdraw at any time by unsubscribing.

4.3 Events

If you attend an event organised by us, we collect personal data in order to organise and run the event and, where applicable, to send you additional information afterwards. We also use your information to inform you about further events. You may be photographed or filmed at these events, and we may publish such material internally or externally.

5. Tracking technologies

We use cookies on our website. These are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone or similar) when you visit our site. Cookies store information relating to the specific device used. This does not mean that we obtain direct knowledge of your identity. Cookies serve, on the one hand, to make the use of our offering more convenient for you (e.g. session cookies that recognise which pages you have already visited) and, on the other hand, to record usage statistically and evaluate it for optimisation purposes.

Most browsers accept cookies automatically. You can, however, configure your browser so that no cookies are stored or so that a notice always appears before a new cookie is created. Disabling cookies entirely may mean that you cannot use all functions of our website.

6. Web and newsletter analytics / services used

In order to understand how our website is used, improve our offering and provide our services, we use third-party services. As a rule, information about the use of the website (e.g. a shortened IP address) is transmitted to the servers of the respective providers; depending on the provider, these servers are located abroad. Transfers to countries without an adequate level of data protection are based on the EU standard contractual clauses or other suitable instruments.

• Supabase (database/backend, data centre in the EU/Frankfurt) — storage of form and content data.
• Resend (email delivery) — sending of transactional emails.
• Google Maps (Google Ireland Ltd.) — maps showing how to reach us are not loaded automatically. On pages with a map reference we first show a placeholder with a link to Google Maps. Data (e.g. your IP address) is only transmitted to Google once you actively click on it.
• Social media links — we link to our profiles on Facebook, Instagram and LinkedIn. These are simple links, not embedded plug-ins; no data is transmitted to these networks when you open our website. Only when you click a link do you reach the respective network, whose own privacy provisions then apply.

7. Disclosure and transfer of data

We only pass your data on to third parties where this is necessary to provide our services, where those third parties provide a service for us, where we are legally or officially obliged to do so, or where we have an overriding interest in the disclosure. We also pass personal data on to third parties if you have consented to this or asked us to do so.

The following categories of recipients may receive personal data from us:

• Other service providers (e.g. IT service providers, hosting providers, suppliers)
• Third parties in the context of our legal or contractual obligations, authorities, public bodies and courts.

With service providers who process personal data on our behalf we conclude contracts obliging them to ensure data protection. Most of our service providers are located in Switzerland or in the EU/EEA. Certain personal data may also be transferred to the USA or, in exceptional cases, to other countries worldwide. Where a transfer to a country without an adequate level of data protection is necessary, it is based on the EU standard contractual clauses or other suitable instruments.

8. Retention periods

We process and store your personal data for as long as this is necessary to fulfil our contractual and legal obligations or otherwise to achieve the purposes of the processing — that is, for example, for the duration of the entire business relationship and beyond, in line with statutory retention and documentation requirements. As soon as your personal data is no longer required for the stated purposes, it is in principle deleted or anonymised as far as possible. Shorter retention periods of twelve months or less generally apply to operational data (e.g. system protocols, logs).

9. Data security

We take appropriate technical and organisational security measures to protect your personal data against unauthorised access (confidentiality), to ensure it is available when needed (availability), to protect it against misuse and alteration (integrity) and to ensure that it is processed traceably. This may include internal directives, training, IT and network security solutions, access controls and restrictions, encryption of data media and transmissions, pseudonymisation and audits.

10. Obligation to provide personal data

Within our business relationship you must provide the personal data required to enter into and perform a business relationship and to fulfil the associated contractual obligations. Without this data we will not be able to conclude or perform a contract with you. The website likewise cannot be used if certain details required to ensure data traffic (such as the IP address) are not disclosed.

11. Your rights

In connection with our processing of personal data you have the following rights:

• The right to information about the personal data we store about you, the purpose of the processing, its origin and the recipients or categories of recipients.
• The right to rectification if your data is incorrect or incomplete.
• The right to restriction of the processing of your personal data.
• The right to request the deletion of the personal data processed.
• The right to data portability.
• The right to object to processing or to withdraw consent at any time without giving reasons.
• The right to lodge a complaint with a competent supervisory authority, where provided for by law.

To exercise these rights, please contact us at the address given in section 1. We reserve the right to invoke the restrictions provided for by law.

12. Changes

We reserve the right to amend this privacy policy at any time. The version published on this website at the relevant time applies. In the event of any discrepancy, the German version of this privacy policy prevails.