Data protection declaration of Galliker Transport AG and group companies

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file.

Our website is hosted on our own the servers of Nine Internet Solutions AG.

The following data is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which the access is made (referrer URL),
• Browser type and browser version as well as other information transmitted by the browser (such as the operating system of your computer, the name of your access provider, geographical origin, language setting, etc.).
• the sub-websites that are accessed via an accessing system on our website, and
• other similar data and information used for security purposes in the event of attacks on our information technology systems.

• The data in question is processed for the following purposes:
• Ensuring a smooth connection to the website
• Ensuring a comfortable use of our website
• Evaluation of system security and stability and for other administrative purposes
• To improve and develop our business and services

Nine Internet Solutions AG, Badenerstrasse 47, 8004 Zürich

ongoing GmbH ("ongoing"), Hinterbergstrasse 34, 6312 Steinhausen, Switzerland.

Neos Foundation e.V., Tatzberg 47, DE-01307 Dresden

Processing takes place in Switzerland.

We have concluded a data processing agreement with our processors. 

On our website, we offer you the opportunity to contact us directly by telephone, videoconference, e-mail or contact form. The reason for contacting us may be, for example, questions about transport and logistics services or questions on other topics or feedback.

We do not record any conversations.

The following details can be entered:

• First names and surnames
• E-mail address
• Address (optional)
• Telephone number (optional)
• Possibly your customer number
• Information that you provide in writing or verbally

The data in question is processed for the following purposes:

• Contact us
• Answering your enquiry

Webex from Cisco Systems (Switzerland) GmbH ("Cisco"), Richtistrasse 7, 8304 Wallisellen, Switzerland

Microsoft Teams and Microsoft Outlook from Microsoft Ireland Operations Ltd ("Microsoft"), South County Business Park, One Microsoft Place, D18P521, Leopardstown, Ireland

Call manager from Recos IC AG ("Recos"), Schützenstrasse 7, 8853 Lachen, Switzerland.

We have concluded an order processing contract with Recos.

The transfer of European or Swiss personal data to Microsoft or Cisco may result in this data being transferred to their parent company in the USA or to third parties in a country that does not have an equivalent level of data protection. We have agreed with Microsoft and Cisco that a transfer to the USA will be based on the E.U.- US or Swiss - US Data Privacy Framework (hereinafter Data Privacy Framework) or, if the Data Privacy Framework is declared invalid or does not (yet) apply, based on so-called standard contractual clauses and appropriate and proportionate technical and organisational measures. By submitting your enquiry, you also consent to your personal data being transferred to insecure third countries in accordance with Art. 17 FADP and Art. 49 para. 1 lit. a GDPR.

GTM ensures the activation of other tools, which in turn collect personal data. Depending on the integrated tool, GTM collects:

• the IP addresses of website visitors
• passes the IP addresses to the analysis programmes.

If you are logged in to YouTube at the same time:

• When you access a sub-page that contains a YouTube video, the specific sub-page you visit is recognized.
• This information is assigned to the corresponding YouTube account

The following personal data is therefore processed each time you visit our website:

• Browser type
• Operating system
• Basic device information

When using Google Maps, Google also collects, processes and uses data about the use of the map functions by visitors. This involves the following personal data:

• Location data
• Search history
• Device information
• usage data
• Cookies and device identifiers:
• Communication data
• if you are logged into your Google account, also the details you provided when registering, such as your surname, first name and email address.

By clicking on the map, you will be redirected to the provider's website. We have no influence on the processing of personal data on third-party websites.

To enable you to communicate with us, we operate a social media profile on Instagram at https://www.instagram.com/galliker_transport_ag and on Facebook at https://www.facebook.com/gallikertransportag/?locale=de_DE[NBZ1] . You can contact us via this profile.

In addition, we have placed a social media button from Instagram on our website so that you are simply linked to our respective profile. This is not a plugin, but only an icon with a link. Instagram does not process any of your personal data on our website in this context.

If you contact us via our social media profile or click on a social media button, the following information will be collected from you:

• User behaviour
• IP address
• Connection data
• Device and browser information
• Data about the content accessed when clicking on the social media button
• User name or first and last name
• Possibly pictures, data that you send us in the course of contacting us

By clicking on the social media button, you will be redirected to the provider's website. We have no influence on the processing of personal data on third-party websites.

We are joint controllers with Meta in accordance with Art. 26 GDPR, but only with regard to the collection and transmission of data. Meta is solely responsible for the subsequent processing of the information by Meta. We have concluded a joint controllership agreement with Meta to determine the respective responsibilities for the fulfilment of obligations under the GDPR. Accordingly, we are responsible for informing users of our website, while Meta is responsible for fulfilling requests regarding the rights of data subjects in accordance with Art. 15 to 21 GDPR. However, within the framework of joint controllership, you can in principle assert your data subject rights against each of the joint controllers. You can find out more about the joint controller agreement here: https://de-de.facebook.com/legal/controller_addendum

The transfer of European or Swiss Personal Data to Meta may result in Meta transferring data to its parent company in the United States or to third parties in a country that does not have an equivalent level of data protection. We have agreed with Meta that a transfer to the USA will be based on the E.U.- US or Swiss - US Data Privacy Framework (hereinafter Data Privacy Framework) or, if the Data Privacy Framework is declared invalid or does not (yet) apply, based on so-called standard contractual clauses and appropriate and proportionate technical and organisational measures.

By using the Galliker social media profiles, you also consent to your personal data being transferred to insecure third countries in accordance with Art. 17 FADP and Art. 49 para. 1 lit. a GDPR.

Meta is solely responsible for the subsequent processing of the information by Meta.

Data retention period

To enable you to communicate with us, we operate a social media profile on LinkedIn at https://ch.linkedin.com/company/gallikertransportag. You can contact us via this profile.

In addition, we have placed a social media button from LinkedIn on our website so that you can easily link to our profile. This is not a plugin, but only an icon with a link. LinkedIn does not process any of your personal data on our website in this context.

If you contact us via our social media profile or click on a social media button, the following information will be collected from you:

• User behaviour
• IP address
• Connection data
• Device and browser information
• Data about the content accessed when clicking on the social media button
• User name or first and last name
• Possibly picture, data that you send us when contacting us

By clicking on the social media button, you will be redirected to the provider's website. We have no influence on the processing of personal data on third-party websites.

To enable you to communicate with us, we operate a social media profile on TikTok at https://www.tiktok.com/@galliker_transport_ag.

In addition, we have placed a social media button from TikTok on our website so that you can easily link to our TikTok profile. This is not a plugin, but only an icon with a link. TikTok does not process any of your personal data on our website in this context.

If you contact us via our social media profile or click on a social media button, the following information will be collected from you:

• User behaviour
• IP address
• Connection data
• Device and browser information or app information
• Data on the content accessed
• User name or first and last name
• Possibly picture, data that you send us when contacting us

By clicking on the button, you will be redirected to the provider's website. We have no influence on the processing of personal data on third-party websites.

You have the option of creating a password-protected online customer account with us in the Galliker customer portal, provided that you have concluded a contract or accepted our GTC and a Data Processing Agreement with us. You can use the login data you have created to access the customer portal applications.

We provide you with the following services and information in our customer portal:

• Galliker customer centre
• Track & Trace
• e-Delivery Note download
• Galliker VMS
• Galliker Photo Cloud
• Galliker Dock

The customer account is used to administer the services you have purchased from Galliker. You can also retrieve and manage information on services and inventory data you have purchased in the past.

The following data is processed during access via the website:

• E-mail address
• Password

Other personal data may be processed as part of the individual services and are regulated in the data processing agreement.

• Track & Trace / Galliker VMS: Bauer Software GmbH ("Bauer Software"), Alfred-Nobel-Allee 52, 66793 Saarwellingen, Germany
• Galliker Foto Cloud: komola GmbH ("komola"), Steintorwall 4, 38100 Braunschweig, Germany.
• Galliker Dock: Ehrhardt + Partner GmbH & Co KG ("Ehrhardt + Partner"), Alte Römerstraße 3, D-56154 Boppard-Buchholz, Germany.

Bauer Software:https://www.vsb-soft.de/index-eng.php

Ehrhardt + Partner: https://www.epg.com/gb/privacy-policy

The following personal data is processed:

• First name and surname of employees of customers or potential customers
• Contact details of potential customers

If Galliker provides a service (in particular deliveries) directly to the customer's end customer, Galliker may process the end customer's personal data.

Galliker's customer guarantees that Galliker is authorised to process the end customer's data.

Galliker processes the following data for this purpose:

• First name and surname of the end customer
• Contact details of the end customer

The processing is based on the following purposes:

• Contract fulfilment
• Operation

Coordination and agreement between Galliker and its suppliers is necessary for the procurement of services and ultimately for the mutual fulfilment of the contract.

For their part, Galliker's suppliers are requested to inform their employees about their rights and obligations in the area of data protection.

Galliker processes the following data for this purpose:

• First name and surname of the supplier's employees
• Contact details of the supplier's employee

The processing is based on the following purposes:

• Contract fulfilment
• Operation

You have the option of applying to us via our web-based application tool (at jobs.galliker.com), by post or by e-mail.

Our web-based application tool includes an online application form. We use Refline for this form. The application data you provide is stored on a secure Refline server and can be viewed by us. Your data will only be stored if you are offered employment with us.

In connection with apprenticeships in Switzerland, we use the service www.yousty.ch. Our vacancies are advertised on the platform. You have the opportunity to upload your application documents to the platform.

You have the option of applying to us by e-mail. In these cases, we process all the data that you send us with your application dossier and use MS Outlook for this purpose (you can find more information on the handling of your personal data when using MS Outlook above under "II Processing activities, B. Making contact").

The following information may be processed when you submit an application:

• Applicant master data (first and last name, e-mail address, telephone number, address, date of birth, citizenship)
• Qualification data (cover letter, letter of motivation, CV, previous activities, professional qualifications and competences)
• Voluntary information, such as title, photo, applicant source or other information that you voluntarily provide us with in your application
• Other data/data categories, e.g. publicly accessible, work-related data, e.g. a public profile on social media networks.

Refline AG ("Refline"), Bösch 65, 6331 Hünenberg, Switzerland

Yousty AG ("Yousty"), Limmatstrasse 21, 8005 Zurich, Switzerland

https://refline.ch/de/datenschutz/

https://www.yousty.ch/de-CH/privacy

You have the option of registering for a job newsletter "JobMail" on our website. This newsletter informs you about current vacancies and related information.

Registration for the newsletter is only possible with a double opt-in: After you have registered on our website, you will receive an e-mail in which you must click on the confirmation to receive a newsletter. If you do not wish to do this, ignore the confirmation e-mail.

If you wish to unsubscribe from the newsletter at a later date, you can click on the unsubscribe link that is sent to you with every e-mail newsletter.

We collect the following information for the registration and dispatch of the newsletter:

• First name and surname
• E-mail address

We then process data that can be used to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also recorded, such as

• Time of the call
• IP address
• Browser type
• Click behaviour
• Operating system

With your consent, you have the option of having your application documents stored in our talent pool. For open positions, we would then ask you whether you might be interested in a position.

When we place your documents in the talent pool, you will receive an e-mail asking you to submit a double opt-in. You will receive an e-mail in which you must click on the confirmation to receive job offers. If you do not wish to do this, ignore the confirmation e-mail.

If you wish to unsubscribe from the talent pool at a later date, you can click on the unsubscribe link that is sent to you with every enquiry.

We collect the following information for the registration and dispatch of the newsletter:

• Applicant master data (first and last name, e-mail address, telephone number, address, date of birth, citizenship)
• Qualification data (cover letter, letter of motivation, CV, previous activities, professional qualifications and competences)
• Voluntary information, such as title, photo, applicant source or other information that you voluntarily provide us with in your application
• Other data/data categories, e.g. publicly accessible, job-related data, e.g. a public profile on social media networks.

We then process data that can be used to determine whether a message has been opened and which links, if any, have been clicked on. Technical information is also recorded, such as

• Time of the call
• IP address
• Browser type
• Click behaviour
• Operating system

To request information about your personal data processed by us. In particular, information in accordance with Art. 25 ff. FADP or Art. 15 GDPR may contain information:

• on the purposes of processing
• the category of personal data
• the categories of recipients to whom your data has been or will be disclosed
• the planned storage period
• the existence of a right to rectification, erasure, restriction of processing or objection
• the existence of a right of appeal
• the origin of your data if it was not collected by us
• the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details