Privacy notice

The Hupac Group has always been attentive to the protection of data concerning its clients, supplier, employees, and all the people with whom it comes into daily contact.

 

Therefore, the entities of the Hupac Group update their procedures periodically, where needed, under the coordination of the headquarters. The privacy notice is updated to 25 May 2018 the new European Regulation Nr. 679/2016 ("GDPR") concerning the protection of personal data becomes effective.

 

In this and the following sections, you can find the information you need to be informed on how your personal data will be processed, what right do you have and how you can assert them. If you are an user of the website, please refer to the Website privacy notice below, if you are a Client or a Supplier, please refer to the Section Privacy notice for clients and suppliers.

 

In order to find the contacts to which your rights to object (art. 21 GDPR) can be lodged or your questions can be sent, please refer to the section Contact persons for privacy and data protection, hereby.

 

Website privacy notice

 

 

A) Controller

 

The controller is Hupac Intermodal SA, Viale R. Manzoni 6, CH-6830 Chiasso. Hupac Intermodal SA is the entity of the Group in charge for the operation and the update of the Group’s website.

 

 

B) General

 

The Hupac Group offers only business-to-business (B2B) services. Hupac Intermodal SA considers it important that its website users are informed as to when, for what purposes and which personal data are processed.

 

Hupac Intermodal SA reserves the right to amend this Privacy notice from time to time. You should therefore read this Privacy notice regularly. The date of the then-current version (valid from) may be found at the beginning of the Privacy notice.

 

What are personal data?

Personal data means any information relating to an identified or identifiable natural person (e.g., name, address, telephone number, date of birth or email address).

 

In general, you can use our website without providing any personal data except for technical navigation data automatically collected to allow the functionality of the website. The use of certain website services may require personal data to be provided, for instance in order to sign up for a newsletter, to leave a comment in our forum or to purchase participate in a sweepstake.

 

Personal data are therefore not processed as a matter of course, but rather only under certain circumstances and for specific purposes.

 

When are personal data processed in connection with HUPAC INTERMODAL SA’s website?

In order to provide the Hupac Intermodal SA’s online services, Hupac Intermodal SA or third parties process personal data in connection with:

  1. Websites: personal data may be processed using log files, cookies, analysis tools, and plugins of social media and other providers.
  2. Contact form: personal data may be processed via contact forms in order to deal with suggestions, requests, complaints and enquiries of users.

 

For more detailed information, please visit the section Website privacy notice - detailed information of our Privacy notice on our website.

 

For what purposes are personal data processed?

  • Optimising the website (e.g., market research and internet audience measurement)
  • Personalising the website for users
  • Ensuring data security for the users of our website
  • Dealing with requests, complaints and enquiries of users.

 

On what legal basis does Hupac Intermodal SA process personal data?

Insofar as we obtain your consent to process personal data, your consent serves as the legal basis. This is the case for example in connection with our portals (Hupac Portals, Goal System, WOLF).

 

We also process your personal data on the basis of our legitimate interest. This includes processing for purposes of:

  • optimising and personalising our website
  • ensuring data security
  • dealing with your requests, complaints and enquiries
  • granting access to our collaboration platforms for partners, intermediaries and clients for the use of said platforms
  • the fulfilment of the contracts we have concluded with our clients, partners and suppliers (B2B contracts).

 

When you, as an individual, order products or services within our collaboration tool, we need to process your personal data for the performance of the contract we concluded with you. This includes processing which is necessary prior to entering into a contract.

 

To the extent personal data is processed based on a legal obligation, this serves as the legal basis. This may be the case for example relating to the disclosure of personal data to third parties or storage or retention periods.

 

 

C) The disclosure of personal data to third parties

 

Is personal data disclosed to third parties?

In general, we only disclose your personal data to third parties insofar as we have a legitimate interest in doing so or you have provided your consent.

 

Furthermore, your data may be disclosed to third parties insofar as we may be obliged to do so pursuant to legal provisions or an enforceable administrative or court order.

 

Are third parties used for processing data?

We use third party service providers for data processing. Service providers are generally involved as so-called "processors", who may only process the personal data of the users of our website in accordance with our instructions. For example, your email address may be passed along to a service provider in order for it to send you a newsletter you requested.

 

Is personal data sent to recipients in a third country (outside Switzerland, the EU or the EEA)?

Personal data may be processed in Switzerland (where the data controller is based) in accordance with the adequacy decision of the European Commission of 26 July 2000.

 

We also provide personal data to third parties, controllers or processors, that are not based in the EU/EEA or Switzerland. In this case, we ensure prior to disclosure either that the recipient provides an adequate level of data protection (e.g., on the basis of an adequacy decision for the relevant country, self-certification by the recipient for the CH-U.S. Privacy Shield, the application of standard contractual clauses of the European Union) or that our users have provided their consent.

 

We can provide you with an overview of the third country recipients along with a copy of the terms specifically agreed to in order to ensure an adequate level of data protection. Please use the details provided in the Contact section to do so.

 

 

D) Duration of storage and retention periods 

 

For how long does Hupac Intermodal SA retain the personal data?

We store your data for as long as is necessary in order to provide our website services and the related services or for as long as we have a legitimate interest in continuing storage. In all other cases, we delete your personal data, with the exception of any data that we are required to retain in order to comply with legal obligations (e.g., retention obligations). 

 

 

E) Rights of users

 

What are your rights as a data subject?

  1. Right of access: users have the right to request confirmation from the controller as to which personal data concerning them is being processed and whether these data are being transmitted to a third country.
  2. Right to rectification: users have the right to request the controller to correct any incorrect or incomplete personal data relating to them.
  3. Right to erasure: users have the right to request the controller to erase promptly any personal data relating to them if these data are no longer necessary for the purposes for which they were collected or processed. The same applies if the data subject withdraws consent or objects to the processing in absence of an overriding legitimate interest of the controller or if these data are being unlawfully processed. The data subject may additionally execute this right in case where the controller is subject to a legal obligation to delete these personal data or when the personal data have been collected in the context of information society services.
  4. Right to restriction of processing: users have the right to request the controller to restrict processing.
  5. Right to withdraw consent: users have the right at any time to withdraw their consent to the processing of any personal data relating to them for any specific purpose or purposes if that processing is based on their express consent. The withdrawal of consent will not affect the lawfulness for the processing on the basis of that consent carried out prior to the withdrawal of consent.
  6. Right to object: users have the right at any time to object to the processing of any personal data relating to them if the processing occurs on the basis of the legitimate interest of the controller or of a third party. Where personal data are processed for direct marketing purposes, users have an absolute right to object to such processing at any time.

 

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection authority. In order to do so, you may contact the data protection authority competent for your place of residence or your federal state, or the data protection authority competent for us. This is:

 

Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter
Feldeggweg 1
CH-3003 Bern
T. +41 58 462 43 95

 

How can you exercise your rights?

In order to exercise your rights, please contact: Privacy.CH@hupac.com.

 

 

F) Data protection contact

 

Please do not hesitate to contact us, respectively our Hupac Intermodal SA Coordinator for data protection, by email to Privacy.CH@hupac.com for any information or with any suggestions regarding data protection.

 

If you wish to contact us, you may reach us as follows:

 

Federico Centonze

Head of Legal Services

Viale R. Manzoni 6

CH-6830 Chiasso

T. +41 58 855 86 10

Privacy.CH@hupac.com